Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vg4KM5Kx8WZlhVLyJ8YmaLU8-M4.roa
File:                     vg4KM5Kx8WZlhVLyJ8YmaLU8-M4.roa (raw, json)
Hash identifier:          DvOhfWSrjkbhsL5xpm2h35v0+M2J59aw0yABqgorAt0=
Subject key identifier:   BE:0E:0A:33:92:B1:F1:66:65:85:52:F2:27:C6:26:68:B5:3C:F8:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1649
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vg4KM5Kx8WZlhVLyJ8YmaLU8-M4.roa
Signing time:             Tue 31 Mar 2026 08:01:31 +0000
ROA not before:           Tue 31 Mar 2026 08:01:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5705 (0x1649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE0E0A3392B1F166658552F227C62668B53CF8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:a3:31:56:48:03:b3:b7:f4:a2:7e:2f:a0:
                    46:ef:c2:2b:00:d7:f4:35:4b:11:86:af:7d:15:f1:
                    af:f5:51:2a:fa:e0:e3:5a:74:e0:80:de:4b:e1:b7:
                    8a:e3:0e:f8:41:3b:24:88:7a:cc:63:f9:be:b2:4f:
                    bb:a7:62:60:88:bc:9b:14:96:58:72:75:95:7a:05:
                    21:99:65:d8:e6:1d:c4:61:46:b1:a5:52:95:f0:12:
                    8d:92:f1:d2:74:cb:46:ba:cb:e9:50:8c:3a:f6:94:
                    5b:83:28:bb:f9:7f:b0:e8:20:f2:c5:5d:07:6b:ef:
                    62:9d:47:d1:df:77:1f:b8:30:83:3d:07:1c:6d:e6:
                    46:ac:4a:da:4a:f4:25:13:71:b4:a4:9d:34:90:be:
                    e5:a1:8f:e3:b0:42:c4:43:ed:22:a3:0d:6d:25:4b:
                    2e:8e:5d:d8:5c:cf:df:f3:54:94:85:cb:97:be:e1:
                    46:e5:bf:eb:6d:46:9c:ff:c7:f0:01:a6:75:6a:5f:
                    b3:4e:39:b6:4c:52:2a:9f:a3:38:1c:59:46:e3:7c:
                    c2:30:ed:3c:5b:bd:54:1a:fb:64:35:0e:d6:40:24:
                    27:b2:22:63:68:70:95:95:0d:55:0d:98:08:9b:1e:
                    d6:58:86:6f:b5:1a:dd:cd:0d:63:33:d5:77:93:93:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:0A:33:92:B1:F1:66:65:85:52:F2:27:C6:26:68:B5:3C:F8:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vg4KM5Kx8WZlhVLyJ8YmaLU8-M4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:09:d9:f3:93:b7:24:2f:30:66:93:69:a9:43:2f:88:4a:8b:
         cf:5a:63:bc:c5:0a:8f:1c:56:62:da:e1:fa:31:1b:c5:55:c9:
         ab:b1:56:0d:6c:13:98:80:a9:b5:33:78:d1:8c:d8:5d:3c:a3:
         2e:72:8e:a8:c0:44:16:dc:0a:e2:72:27:78:75:7b:0d:84:10:
         50:d6:cc:5e:17:1a:19:f2:d6:a0:11:4b:4c:c0:ed:21:14:f4:
         92:39:05:84:16:1d:4f:43:c5:9a:0d:f1:71:42:b1:0b:ed:f1:
         ab:0f:f6:30:2b:53:bd:bd:c9:8e:61:f5:ab:22:ba:58:4b:f0:
         83:9c:a5:75:0c:7f:87:bf:5c:79:5e:73:33:90:5f:9e:c6:5b:
         e9:ed:b5:13:98:96:25:7f:77:05:50:fb:78:86:a0:8d:e4:63:
         c3:b1:31:2f:9f:10:4f:fc:1c:7a:d0:7f:29:c0:cc:34:7e:7c:
         e0:7b:a4:a8:8b:5e:d9:5b:13:c5:ff:ef:c6:02:f8:db:99:e4:
         db:95:0e:df:9b:f9:c6:06:af:80:ac:58:bc:dc:1c:6b:a7:38:
         d0:ff:2f:ad:05:80:de:68:40:85:52:7d:72:d0:74:ab:c4:57:
         fb:02:ba:46:11:d5:3b:17:da:91:ae:e4:17:59:c5:31:b6:51:
         c0:24:54:af
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFMEUwQTMzOTJCMUYx
NjY2NTg1NTJGMjI3QzYyNjY4QjUzQ0Y4Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM6KMxVkgDs7f0on4voEbvwisA1/Q1SxGGr30V8a/1USr64ONa
dOCA3kvht4rjDvhBOySIesxj+b6yT7unYmCIvJsUllhydZV6BSGZZdjmHcRhRrGl
UpXwEo2S8dJ0y0a6y+lQjDr2lFuDKLv5f7DoIPLFXQdr72KdR9Hfdx+4MIM9Bxxt
5kasStpK9CUTcbSknTSQvuWhj+OwQsRD7SKjDW0lSy6OXdhcz9/zVJSFy5e+4Ubl
v+ttRpz/x/ABpnVqX7NOObZMUiqfozgcWUbjfMIw7TxbvVQa+2Q1DtZAJCeyImNo
cJWVDVUNmAibHtZYhm+1Gt3NDWMz1XeTkwJhAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvg4KM5Kx8WZlhVLyJ8YmaLU8+M4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3ZnNEtNNUt4OFdabGhWTHlKOFltYUxVOC1NNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMxaFAwDQYJKoZIhvcNAQELBQADggEB
AHYJ2fOTtyQvMGaTaalDL4hKi89aY7zFCo8cVmLa4foxG8VVyauxVg1sE5iAqbUz
eNGM2F08oy5yjqjARBbcCuJyJ3h1ew2EEFDWzF4XGhny1qARS0zA7SEU9JI5BYQW
HU9DxZoN8XFCsQvt8asP9jArU729yY5h9asiulhL8IOcpXUMf4e/XHleczOQX57G
W+nttROYliV/dwVQ+3iGoI3kY8OxMS+fEE/8HHrQfynAzDR+fOB7pKiLXtlbE8X/
78YC+NuZ5NuVDt+b+cYGr4CsWLzcHGunOND/L60FgN5oQIVSfXLQdKvEV/sCukYR
1TsX2pGu5BdZxTG2UcAkVK8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:04 2026 by rpki-client