Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m1s0LkQtZaSodMJjHYR5WmJSs8o.roa
File:                     m1s0LkQtZaSodMJjHYR5WmJSs8o.roa (raw, json)
Hash identifier:          kbFjZD2dJLH7oO1cZYa44yFmhTnGodv7SkwCkp4kTa8=
Subject key identifier:   9B:5B:34:2E:44:2D:65:A4:A8:74:C2:63:1D:84:79:5A:62:52:B3:CA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15B2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m1s0LkQtZaSodMJjHYR5WmJSs8o.roa
Signing time:             Tue 31 Mar 2026 08:00:12 +0000
ROA not before:           Tue 31 Mar 2026 08:00:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5554 (0x15b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9B5B342E442D65A4A874C2631D84795A6252B3CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:c0:61:35:2b:14:2f:ab:9a:34:21:c1:75:
                    16:69:1c:72:8a:13:49:ab:f4:78:02:4d:c3:fc:51:
                    af:5c:4e:fe:29:a0:e8:42:94:e8:d8:47:1f:1f:d7:
                    c0:f3:3b:c1:0d:ec:cf:a2:7b:0b:68:06:82:e4:ef:
                    b6:2e:45:59:49:95:5e:94:1a:44:1d:a4:8d:9a:a3:
                    b6:8d:5a:25:82:a4:67:aa:e2:fb:e3:a1:95:1d:a1:
                    d6:3c:21:59:da:1f:e2:2d:f3:fe:55:84:ce:11:5c:
                    16:aa:58:ee:96:f9:9e:6b:0b:aa:f6:a2:9d:a8:9f:
                    e6:6b:19:e8:10:1c:f9:e2:d3:5d:f8:3b:ef:b6:c1:
                    f7:7f:dd:c0:f7:79:49:3e:ce:ae:76:70:ca:95:ae:
                    a3:58:ac:9f:4e:fd:37:80:de:c7:47:ba:4b:cb:f5:
                    11:46:91:4c:5d:02:61:9b:35:22:b2:db:62:76:99:
                    b9:3b:9e:92:63:08:82:4b:d2:2e:0f:47:6f:dc:43:
                    df:62:13:48:b1:da:14:9a:ad:f9:de:8e:55:f7:65:
                    2c:d2:97:5b:dc:f7:ff:62:3b:88:b7:05:dc:2d:38:
                    eb:7c:f5:b3:79:54:19:f4:2a:f3:da:80:dd:2d:f9:
                    c0:31:8a:d0:9b:cf:6c:74:46:78:43:6c:21:66:01:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:34:2E:44:2D:65:A4:A8:74:C2:63:1D:84:79:5A:62:52:B3:CA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m1s0LkQtZaSodMJjHYR5WmJSs8o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:07:38:55:1f:e5:3d:b8:a6:2d:4c:66:72:dd:bf:28:c7:
         49:d7:be:1b:5d:c7:a4:24:36:3b:8e:ba:08:15:02:4f:77:b5:
         19:08:f3:39:54:24:49:0c:4b:75:b4:97:ee:41:89:e9:59:d6:
         e2:03:70:8b:b7:98:94:26:76:9c:82:de:19:4c:f3:a1:b8:3c:
         a9:f9:56:bb:9a:a1:ab:62:70:32:0d:ee:02:d7:09:9c:2d:94:
         e7:95:2a:af:25:08:a7:09:b9:79:b0:50:bc:08:ea:f3:5f:38:
         e3:0e:c5:c2:02:8b:f8:87:c9:17:ee:14:58:31:6d:c2:6c:92:
         2e:f6:8b:7a:31:40:f2:b9:a7:5e:e7:10:6f:0f:85:b2:dd:ca:
         6e:d1:aa:7e:80:86:a1:ed:ba:87:cf:ed:ad:cf:fa:3e:13:85:
         21:c2:90:71:a0:92:42:44:5c:8e:5d:60:ac:a0:78:c4:d0:7c:
         14:8e:8f:c6:56:d6:47:2d:71:f2:95:ce:28:5f:fb:22:06:6a:
         29:93:05:62:5b:88:e2:84:c2:cb:b2:cb:f6:f4:a7:30:2e:11:
         e3:38:a7:75:d7:ea:94:b2:2f:61:09:63:f7:5a:d9:1a:d4:64:
         13:e2:63:b5:a0:2d:b6:43:de:8e:af:5c:fb:a6:8a:9d:09:06:
         2f:da:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client