Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tD0Sxzb_DbvXfbSlgUNO_SldQyc.roa
File:                     tD0Sxzb_DbvXfbSlgUNO_SldQyc.roa (raw, json)
Hash identifier:          UHs6z/2Ecx5JUBE5CS7IzKzS/TWc4wYXSQU7x97mchc=
Subject key identifier:   B4:3D:12:C7:36:FF:0D:BB:D7:7D:B4:A5:81:43:4E:FD:29:5D:43:27
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15A6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tD0Sxzb_DbvXfbSlgUNO_SldQyc.roa
Signing time:             Tue 31 Mar 2026 08:00:03 +0000
ROA not before:           Tue 31 Mar 2026 08:00:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5542 (0x15a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B43D12C736FF0DBBD77DB4A581434EFD295D4327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:76:e0:de:92:44:6d:9d:c1:9a:14:9c:79:
                    85:ec:0b:8c:2e:3c:0a:ee:83:30:85:63:53:29:0e:
                    45:90:c4:0e:87:31:18:cd:8b:f2:01:bc:9d:56:1b:
                    4c:a0:ff:d5:e7:89:16:61:88:cf:bf:87:10:50:6d:
                    a3:47:36:53:ae:fd:65:76:ef:d2:3d:53:0d:2a:0c:
                    fb:2e:de:12:39:93:a5:b0:5f:70:25:80:08:10:b8:
                    67:de:8e:32:2b:f6:6b:56:1c:aa:38:2a:f0:ca:fd:
                    a6:0f:8f:19:87:31:bd:e0:e5:17:a8:09:50:7f:6f:
                    10:21:52:df:47:2c:bd:e1:20:2d:c3:fd:7d:62:13:
                    4a:d3:df:4c:d2:44:33:7a:41:10:ce:5c:2d:59:88:
                    ce:66:fa:2e:10:89:f0:1d:de:39:7d:2d:a7:ab:da:
                    5f:4e:b1:26:7f:bd:03:96:65:2f:76:54:93:39:8e:
                    6a:4d:19:b8:9d:94:cb:c7:56:81:85:17:17:bb:a6:
                    25:c2:3d:40:1b:a3:94:5d:26:e7:09:dc:33:8c:ad:
                    1b:7a:37:b2:04:ec:d7:f7:37:be:76:7e:dd:53:4c:
                    ae:0a:24:41:6f:00:39:e8:4b:45:ff:33:ef:75:55:
                    70:d6:6b:74:03:a3:cb:f6:13:d0:a6:d2:14:16:6a:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:12:C7:36:FF:0D:BB:D7:7D:B4:A5:81:43:4E:FD:29:5D:43:27
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tD0Sxzb_DbvXfbSlgUNO_SldQyc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:c0:7a:d6:13:23:35:e5:43:ea:f6:25:2e:da:5f:65:94:0a:
         69:57:2a:1b:a3:a5:8e:eb:e7:b8:e7:f9:1a:3f:d6:ec:78:4c:
         1a:e8:58:70:39:00:c8:60:cf:6a:9f:c0:b9:b6:7a:fc:96:0b:
         42:34:2e:d0:d6:df:17:c5:a8:02:54:93:6d:b9:ff:61:07:0b:
         dc:5d:f5:cb:81:b8:e8:0d:71:ca:9d:3b:50:e0:58:2a:bb:a1:
         e3:d5:0b:fc:ad:9b:7b:fd:41:b6:a2:ea:e0:59:09:4a:16:5e:
         78:78:65:a5:ae:93:fd:c3:6e:9c:2c:4e:5a:7b:88:3c:1e:5a:
         bf:c9:f8:f3:3e:2e:32:eb:6f:13:76:da:77:96:e8:51:68:81:
         63:5a:5f:74:da:3a:6a:7a:49:fc:a4:4e:6f:10:1f:fa:98:c1:
         8f:cf:74:f6:43:bb:2d:ad:d0:c2:96:4f:92:1d:24:60:b0:c6:
         78:a4:5b:3a:3d:4a:6b:8c:eb:d9:00:e0:8d:d3:ca:83:06:65:
         04:d4:3d:f7:4b:db:2f:c9:b3:27:4f:a4:48:a5:0a:2e:f6:d1:
         7d:12:47:dc:17:d6:fd:e1:bd:d1:fa:43:c9:78:7d:30:24:d0:
         35:3f:dc:6e:17:04:75:99:e6:7c:a3:d8:3a:9b:05:0b:a2:13:
         4d:aa:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client