Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa
File:                     jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa (raw, json)
Hash identifier:          5kM1BAnTjWphShKIOB0pbAEs/XV7ksK2qqJNAj3qSOI=
Subject key identifier:   8C:5E:3B:4D:60:99:DE:77:1B:F8:A8:FA:9E:F6:DD:6C:26:2E:CE:11
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa
Signing time:             Tue 31 Mar 2026 07:55:58 +0000
ROA not before:           Tue 31 Mar 2026 07:55:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5025 (0x13a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8C5E3B4D6099DE771BF8A8FA9EF6DD6C262ECE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:41:09:69:bc:0e:01:f2:f9:81:3a:0c:d8:
                    02:c1:b1:b2:79:ca:fc:fb:2b:43:99:1b:95:34:d9:
                    9a:b2:b4:38:45:7e:ed:32:18:d2:37:4d:10:2a:ff:
                    d8:45:5b:f5:56:f9:7b:31:46:56:ac:7b:c3:e4:2a:
                    a3:5a:47:c6:b0:f5:e8:2c:a7:14:f2:39:ba:c0:b1:
                    ed:01:a7:7b:9f:e7:22:bc:e6:22:c1:08:81:d8:0e:
                    3f:7f:12:a9:fd:06:ca:b4:ff:11:6b:96:ff:89:43:
                    2e:eb:ad:ff:2f:db:14:47:3a:36:c2:6a:37:0a:cf:
                    eb:4f:ff:e7:75:fd:66:c7:84:34:dc:79:09:23:29:
                    cd:5a:e7:16:99:60:92:d1:8f:24:74:79:86:04:c1:
                    8e:ae:6e:69:94:ba:8b:74:d6:f2:4c:f6:7c:1b:95:
                    00:97:6d:62:85:af:0a:c4:cb:29:fb:c6:6a:63:24:
                    b1:f7:ad:53:ae:c4:7d:d6:fd:13:b0:79:78:77:cb:
                    61:f5:e3:5f:a4:67:93:ef:e7:dd:e5:f8:a9:ff:ed:
                    d8:4b:cf:2e:35:45:1f:24:2f:08:4d:14:cb:8e:c9:
                    17:39:a5:04:4b:c9:f0:8e:8d:8b:a5:a8:17:67:0d:
                    bb:a5:2c:b9:72:04:f4:7e:94:57:8d:82:0f:31:be:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:3B:4D:60:99:DE:77:1B:F8:A8:FA:9E:F6:DD:6C:26:2E:CE:11
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jF47TWCZ3ncb-Kj6nvbdbCYuzhE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:d1:38:d9:5e:af:26:67:e7:1b:be:cf:89:09:4c:fd:5a:
         2d:a1:92:71:9e:c4:e1:8d:be:b2:6c:32:78:4c:6e:d5:bb:22:
         72:11:72:e4:df:e1:71:e1:ec:17:d5:49:0c:a9:49:8b:e6:48:
         cf:ad:79:43:73:e3:db:12:18:92:9b:a7:b1:2f:94:b1:06:c2:
         53:31:47:6e:08:09:37:4d:35:69:48:11:ff:b3:c7:83:2b:a9:
         5c:45:e4:24:3a:31:72:72:8f:7b:c3:a8:1d:50:fe:23:31:85:
         4a:58:20:bd:01:38:f5:30:18:c9:4a:0d:cf:ae:f4:3d:17:ee:
         80:fd:6e:8e:82:00:5e:28:53:3a:44:3b:25:b6:81:24:ef:d3:
         b8:00:73:ae:8e:c0:f8:66:b5:4e:ae:80:97:c8:5e:3b:bf:d6:
         d1:0f:2e:af:de:d5:60:67:c1:ea:0a:29:c9:c1:f8:3b:35:8f:
         77:84:b8:88:d7:ce:60:f0:ab:e7:11:90:e0:b1:91:57:c7:b2:
         e3:3a:8f:23:a5:9f:e7:8e:01:35:e0:6a:83:ec:24:e5:f1:0d:
         fc:95:72:4b:13:8e:e0:a8:cc:72:82:81:33:03:6f:d1:79:26:
         37:0f:40:47:96:31:01:96:65:26:6b:f0:58:06:9d:ce:0d:d5:
         8a:89:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:52 2026 by rpki-client