Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/npK04-pL4S4mtI2PCK0GwPp7J-E.roa
File:                     npK04-pL4S4mtI2PCK0GwPp7J-E.roa (raw, json)
Hash identifier:          kqYd19iDyVnsibVkHPOBTHuqaTxWz5XWDeBmXMxBnjs=
Subject key identifier:   9E:92:B4:E3:EA:4B:E1:2E:26:B4:8D:8F:08:AD:06:C0:FA:7B:27:E1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       164F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/npK04-pL4S4mtI2PCK0GwPp7J-E.roa
Signing time:             Tue 31 Mar 2026 08:01:33 +0000
ROA not before:           Tue 31 Mar 2026 08:01:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5711 (0x164f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E92B4E3EA4BE12E26B48D8F08AD06C0FA7B27E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:f9:b6:75:14:1a:00:4b:16:1f:28:af:98:
                    10:68:d4:53:08:cd:2d:a5:c1:3f:71:14:3f:70:ea:
                    7e:6d:a9:2c:f5:0c:7b:39:98:55:89:57:7a:fe:60:
                    9e:b4:1e:c3:40:aa:39:69:8d:39:d9:90:47:d7:dc:
                    b7:69:6b:1d:61:a9:2b:a9:f4:cc:b4:50:4d:f5:1e:
                    2f:86:3b:0c:05:10:89:79:60:46:44:b4:2d:13:be:
                    6f:cf:45:77:90:c9:29:29:d5:fc:19:5d:61:62:5b:
                    b4:70:03:ec:e2:e5:d0:6a:20:b8:2f:ec:0b:77:fb:
                    78:f0:a1:04:4e:75:9a:40:e8:7e:c4:62:7e:aa:ba:
                    ab:29:16:6e:2e:17:e6:36:c6:e0:33:47:e2:7e:ba:
                    4f:e1:44:32:c5:7b:6e:fd:23:56:01:44:75:59:35:
                    2d:a7:8d:a7:b6:54:f4:72:a6:ca:ad:9a:f3:60:11:
                    6a:2f:97:21:d2:48:b7:44:91:91:18:b1:ab:1f:c3:
                    75:62:cc:8d:ee:26:80:51:3f:5d:9f:f7:b0:70:5e:
                    7d:7a:59:80:7d:e1:28:b0:96:fa:49:c8:f7:ff:ec:
                    ef:ba:1d:3a:f3:2d:b6:03:2f:61:2c:b7:2e:ef:ce:
                    43:b0:47:07:dc:f7:8d:36:5b:70:38:14:5e:32:db:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:92:B4:E3:EA:4B:E1:2E:26:B4:8D:8F:08:AD:06:C0:FA:7B:27:E1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/npK04-pL4S4mtI2PCK0GwPp7J-E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c9:66:88:4e:64:33:3f:bb:5e:c6:9c:8e:9b:b0:48:a0:48:16:
         20:32:29:a2:c9:c8:42:be:6c:17:87:20:c0:0a:2e:d3:28:24:
         67:8c:58:16:8e:ee:83:bd:85:28:c5:d6:d1:5a:4f:6c:30:5e:
         71:98:1c:31:4c:d4:97:5f:01:4d:15:d0:d1:3b:7a:e3:82:a1:
         08:86:b2:9f:9b:a3:27:6a:0d:88:d1:fd:43:a8:07:c3:d3:12:
         28:e6:37:d0:1e:d0:f3:6e:78:97:56:9d:2e:4c:4c:c5:d0:d9:
         e5:4f:49:ad:31:e5:cc:df:6d:1f:9d:ef:d2:1e:41:46:4a:ea:
         f0:73:09:0a:6a:5c:b5:1a:77:17:c0:68:89:31:65:c2:09:1b:
         9d:bf:55:73:cd:e8:86:1b:f8:84:6d:84:a5:4e:d3:2c:b0:b9:
         74:03:a6:c7:ee:98:ff:35:53:b2:e3:bb:ee:c8:a0:d5:b8:82:
         46:96:63:09:f8:e1:47:2f:6c:be:89:5b:0a:a7:88:65:fd:f0:
         4f:e4:c6:c4:ca:90:09:3c:af:89:b8:22:3c:e5:71:f3:96:a4:
         85:c1:dc:9f:5b:c8:3b:fc:51:90:3a:47:f3:14:bc:62:5d:58:
         9f:d9:54:57:d4:d5:aa:c7:d7:d8:f7:b4:69:65:8a:5a:0a:ed:
         73:ef:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:41 2026 by rpki-client