Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_FHTOMgiL-l6xl5P8ipqkLl15E.roa
File:                     s_FHTOMgiL-l6xl5P8ipqkLl15E.roa (raw, json)
Hash identifier:          liBsloBfOb6YBYBwuOEV736jT9wSQpCQ5omgHB/eQCw=
Subject key identifier:   B3:F1:47:4C:E3:20:88:BF:A5:EB:19:79:3F:C8:A9:AA:42:E5:D7:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1536
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_FHTOMgiL-l6xl5P8ipqkLl15E.roa
Signing time:             Tue 31 Mar 2026 07:59:12 +0000
ROA not before:           Tue 31 Mar 2026 07:59:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5430 (0x1536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B3F1474CE32088BFA5EB19793FC8A9AA42E5D791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:25:a4:92:c5:8a:e1:4d:20:a7:9c:78:ca:
                    d2:d8:4b:7c:ad:4f:30:86:04:97:bb:c9:e8:e0:8f:
                    6a:b9:9b:e1:f3:68:8b:b2:40:f5:82:98:e9:f2:70:
                    96:55:56:9d:c2:c8:d6:68:23:4e:b8:c8:3a:fc:5a:
                    ca:46:4b:07:83:c2:39:64:63:21:ff:b0:93:8f:73:
                    0e:30:7a:4c:0d:6b:99:f1:d8:43:5f:5f:a2:8f:32:
                    a6:5b:96:0d:90:65:3e:a9:75:5e:4b:1f:6e:94:d8:
                    41:9a:f3:d0:c9:1e:02:1d:00:29:93:49:f6:36:cd:
                    b3:29:ba:07:ff:cd:b4:24:95:65:47:f8:22:58:17:
                    f2:cd:a0:b4:15:38:3e:65:54:35:d9:54:bc:2b:bd:
                    0b:5a:0b:60:93:51:bd:a0:53:d6:cb:01:61:2e:1c:
                    8a:6a:81:5d:67:6f:48:20:c6:8c:0c:79:39:bd:8e:
                    17:21:f0:88:88:0c:06:76:61:51:20:93:57:ff:45:
                    0d:38:e3:d9:b2:41:37:37:fc:24:45:70:46:12:04:
                    4b:6c:f5:85:54:63:ad:26:39:e5:e2:bf:d9:8e:46:
                    6f:f7:10:b6:0a:97:b2:08:74:47:91:4d:be:2d:ea:
                    22:b3:d0:cc:cc:77:6a:25:06:9e:27:a8:68:4d:67:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:47:4C:E3:20:88:BF:A5:EB:19:79:3F:C8:A9:AA:42:E5:D7:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s_FHTOMgiL-l6xl5P8ipqkLl15E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:33:31:d2:b7:3e:c0:d7:af:58:c8:ba:b6:ae:8b:08:55:
         d3:84:e5:51:cf:31:b0:4c:1d:13:d3:89:22:5d:3a:4b:77:ab:
         9c:70:4e:2e:c6:dd:78:7a:42:3b:2b:7d:43:99:45:7e:c4:19:
         6e:0b:f7:80:9f:c8:a4:79:d7:35:0d:64:5f:1a:21:7e:02:37:
         c5:a7:30:fe:6e:66:6a:a9:aa:91:48:56:fb:85:36:a8:0d:b1:
         f3:85:7b:d3:89:e1:f4:79:6a:51:dc:89:66:51:3d:d2:67:f1:
         40:b3:d8:7a:ac:4b:f5:f6:b9:55:e0:a3:2f:2b:38:53:be:1b:
         0a:b4:89:c4:e2:86:52:87:c9:af:8e:78:28:e9:cc:f2:90:1a:
         17:85:76:3b:51:9f:ca:c1:90:bd:cf:13:96:bb:ab:42:1c:f0:
         75:43:4a:4f:53:db:7d:43:0a:f3:50:1f:ee:d2:16:10:c1:85:
         b1:de:cd:cf:20:5a:fc:b9:5d:73:2c:d2:29:cb:a1:bd:99:8e:
         0a:d9:d1:86:42:eb:c7:3e:1e:79:e1:ba:68:50:27:12:69:6b:
         ff:33:72:b5:91:2e:63:fa:4e:9e:fe:69:c5:df:4c:72:00:01:
         23:2f:bf:51:1a:45:1e:ac:c8:49:cc:8e:2b:69:80:ac:07:51:
         b5:7c:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client