Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vo1CRCGwf5KwRkDlGcydg_0UQ00.roa
File:                     vo1CRCGwf5KwRkDlGcydg_0UQ00.roa (raw, json)
Hash identifier:          2lIEBQ3QIbiB0huRctTjin6ZZu3UPyzTvfvZKmYX1zI=
Subject key identifier:   BE:8D:42:44:21:B0:7F:92:B0:46:40:E5:19:CC:9D:83:FD:14:43:4D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15C3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vo1CRCGwf5KwRkDlGcydg_0UQ00.roa
Signing time:             Tue 31 Mar 2026 08:00:22 +0000
ROA not before:           Tue 31 Mar 2026 08:00:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5571 (0x15c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE8D424421B07F92B04640E519CC9D83FD14434D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:3e:89:c3:da:df:aa:1a:1b:57:fd:0e:d4:
                    79:da:42:2c:13:cf:6f:1b:46:5e:41:ff:12:c5:8b:
                    ed:68:6f:9a:c7:c3:c3:12:e9:6c:fa:7e:33:78:6a:
                    27:34:87:d1:94:01:f6:77:bb:c6:2f:9c:3f:14:08:
                    1b:45:23:95:6f:c2:72:c8:cc:39:07:d4:dd:10:38:
                    69:52:ee:10:79:92:1c:96:13:06:fc:a1:a6:4b:10:
                    0a:a1:86:35:67:9a:0d:e2:7c:aa:fc:b5:0c:46:62:
                    a0:cd:63:a5:43:d4:1c:01:8e:8f:af:c5:a6:5d:71:
                    dd:6e:d9:9d:c9:45:05:70:bb:7f:e9:2c:2f:86:00:
                    0d:e5:ba:70:b7:22:70:84:74:55:41:5b:fa:ee:a0:
                    13:0b:ec:8b:65:8e:b1:b0:b0:cf:f6:67:53:29:47:
                    40:07:1e:eb:9d:d4:b4:33:a0:20:cb:cf:da:2a:49:
                    9b:e4:29:ff:7e:9b:10:42:a1:3a:7c:b0:96:06:a2:
                    a1:e2:d9:0a:f0:c6:9a:e4:50:18:dc:6c:61:35:50:
                    8d:b5:8d:32:d5:0e:06:5f:33:18:72:84:3c:98:41:
                    03:59:37:a0:d3:77:a6:14:11:b9:11:44:79:9b:91:
                    be:03:de:5f:b7:41:65:ef:41:1a:07:17:1c:59:c4:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8D:42:44:21:B0:7F:92:B0:46:40:E5:19:CC:9D:83:FD:14:43:4D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vo1CRCGwf5KwRkDlGcydg_0UQ00.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:82:98:50:57:2d:f4:15:88:83:21:87:3a:94:f7:14:69:8d:
         dd:26:75:08:d4:08:55:99:26:93:53:84:07:08:f1:1a:8e:14:
         62:ca:61:60:56:dd:a8:fc:74:7a:5b:05:2f:80:6b:cd:53:f6:
         e2:81:a8:55:ba:79:7f:ad:09:e3:a9:3e:74:73:cc:3a:5d:0a:
         c6:4b:b4:7f:8c:90:ed:70:44:4c:32:4a:da:98:0b:e1:15:be:
         e1:55:13:cf:84:e9:d9:e2:87:97:6d:fc:43:77:1e:e4:a4:0e:
         a8:19:91:09:f7:1a:40:aa:62:93:45:9f:83:d1:cc:df:2e:8f:
         33:20:04:e2:1c:4a:66:2a:ed:96:eb:34:b1:25:84:c3:ef:4a:
         d2:fc:c3:19:d1:d3:7a:9b:95:91:07:b2:20:95:e0:3a:6e:6f:
         f3:e3:ac:5b:9b:8e:ed:0a:40:2c:9b:5e:ae:5d:c6:08:1b:89:
         e5:2c:90:df:89:f9:d7:da:c1:2a:56:83:12:20:f9:70:6f:e4:
         2d:8b:ae:b3:e5:85:0b:4d:97:56:0e:1f:33:75:0c:f0:d2:1d:
         47:61:91:2c:b6:17:d0:44:2d:78:ed:20:5c:60:37:1a:40:e9:
         7c:23:e2:20:cb:a5:dc:00:9e:4a:9a:9e:43:cd:c9:f5:10:af:
         20:e4:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:05 2026 by rpki-client