Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1v61ENegiLEvuKdHxBmdfOB8oM.roa
File:                     s1v61ENegiLEvuKdHxBmdfOB8oM.roa (raw, json)
Hash identifier:          8tYhOTnCxEPhFSDZlOsmYJ4PJ766dmBqgTu979jRRx8=
Subject key identifier:   B3:5B:FA:D4:43:5E:82:22:C4:BE:E2:9D:1F:10:66:75:F3:81:F2:83
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15AC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1v61ENegiLEvuKdHxBmdfOB8oM.roa
Signing time:             Tue 31 Mar 2026 08:00:06 +0000
ROA not before:           Tue 31 Mar 2026 08:00:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5548 (0x15ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B35BFAD4435E8222C4BEE29D1F106675F381F283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:d5:89:65:2e:27:a6:96:e7:1e:6c:65:b2:
                    d7:18:7f:36:23:ce:49:8e:e3:b6:ed:81:14:cb:34:
                    d2:c0:e2:a6:59:4c:fa:5d:67:77:4c:d5:20:07:b8:
                    06:f9:b0:56:b3:6c:d5:3f:af:3f:6c:83:25:fe:f4:
                    28:9e:10:58:84:a8:55:ec:33:c2:8a:d8:1b:ab:89:
                    ac:bc:0e:a7:89:b5:37:61:fa:92:87:cb:2b:e9:7e:
                    d3:d1:c2:c0:aa:af:16:e2:81:f0:08:a1:4c:aa:1b:
                    1b:bd:00:e8:0e:61:0f:8d:da:92:ed:ae:cf:9e:7d:
                    e9:e0:54:7c:1a:75:34:5c:46:35:fd:19:8a:ba:d4:
                    a5:6c:4b:c4:9c:d4:fb:e1:69:2f:07:e2:8d:3b:df:
                    a6:28:dc:81:5c:ff:62:15:61:1e:65:e7:d7:47:e1:
                    04:55:99:b1:14:b8:a5:bf:da:aa:f3:0b:55:4d:01:
                    24:b3:61:2a:d6:7d:49:8f:b4:66:a8:a1:f9:02:33:
                    57:b0:98:77:7a:84:84:6f:96:bc:52:0f:e6:dc:b2:
                    e5:b1:64:24:67:6b:4a:ff:27:97:ad:a5:e7:02:18:
                    f5:03:7b:1d:50:b4:c3:e3:68:23:81:ff:e3:6c:4d:
                    89:a8:6d:b9:3f:3b:44:ae:f1:8d:54:71:3e:f8:87:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5B:FA:D4:43:5E:82:22:C4:BE:E2:9D:1F:10:66:75:F3:81:F2:83
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1v61ENegiLEvuKdHxBmdfOB8oM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:7d:37:41:a4:d9:3c:f2:93:2f:3e:12:38:26:3e:3d:35:
         3d:9d:c9:73:3a:6c:4d:76:4b:af:80:c6:56:39:f4:8f:2c:2a:
         b1:d5:ce:ce:ba:95:48:b7:c7:92:c4:5d:cb:b3:8c:29:d1:f5:
         cf:79:65:6a:a9:d4:fa:ef:71:71:5e:52:4c:9e:f6:be:96:ff:
         95:84:ad:75:33:c5:2b:23:e5:7f:77:35:a2:be:f5:9d:e0:b2:
         88:e8:1b:e9:58:f5:8c:4d:45:ad:c2:e0:76:3e:18:e8:20:7d:
         5c:0a:bd:2e:13:52:e2:73:01:91:14:b5:11:14:a0:97:45:32:
         26:d6:35:0b:ca:43:2b:64:27:da:b0:33:c5:3f:f5:5e:4d:1a:
         44:4d:84:97:4d:d0:b5:8c:7c:e2:0b:9a:af:2d:88:e4:09:c7:
         25:66:a6:c7:15:d1:18:3c:85:0c:6d:44:da:e4:d7:86:37:d1:
         54:bc:50:40:42:01:40:e8:85:90:9e:bb:0b:d9:53:0b:b5:36:
         41:87:ea:fd:96:94:c9:be:24:12:4b:fc:bd:f5:a1:8f:fa:78:
         0a:f0:d9:55:1a:0d:5e:ab:98:25:16:37:90:90:47:6b:4d:b9:
         66:c7:52:8b:af:aa:33:01:3e:3b:b4:3d:92:08:95:d6:12:64:
         88:e1:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:13 2026 by rpki-client