Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wepFttVTlr2eu3J7ExPNPfDSJx0.roa
File:                     wepFttVTlr2eu3J7ExPNPfDSJx0.roa (raw, json)
Hash identifier:          WkaHLZb6tKXsEehzCq4Xsjp8xQGlB5ht/h1mn5NxCxw=
Subject key identifier:   C1:EA:45:B6:D5:53:96:BD:9E:BB:72:7B:13:13:CD:3D:F0:D2:27:1D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1833
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wepFttVTlr2eu3J7ExPNPfDSJx0.roa
Signing time:             Tue 31 Mar 2026 08:05:28 +0000
ROA not before:           Tue 31 Mar 2026 08:05:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6195 (0x1833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C1EA45B6D55396BD9EBB727B1313CD3DF0D2271D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:24:43:6e:93:7a:6b:ef:1f:e5:65:74:71:
                    32:77:ea:0e:6f:00:f9:03:c2:96:67:73:71:02:8c:
                    f8:c7:65:9a:59:f6:8a:db:04:39:e9:1c:60:ca:f6:
                    6f:a6:13:f5:18:5a:d9:e7:1e:35:46:f0:97:7d:02:
                    8b:52:fa:9d:cc:e8:75:97:e9:60:05:68:d2:ba:79:
                    0e:98:8d:9a:97:8b:0e:56:06:30:9a:6e:a2:5a:d8:
                    1b:89:b1:31:50:6f:64:bd:53:42:52:01:c5:b6:2d:
                    6a:b6:12:c8:b6:8d:bd:d9:7e:d5:b5:7e:c1:34:bf:
                    23:b1:39:ca:2b:be:d2:93:6e:36:b0:f2:f3:e5:60:
                    bc:64:39:71:c0:0d:5a:8a:8f:c3:91:85:01:06:59:
                    44:67:61:a2:41:7b:32:03:82:68:e2:ce:15:83:57:
                    f6:42:59:4c:bf:9e:be:8c:98:fc:2a:4e:51:51:4b:
                    8b:96:32:85:87:fa:c7:5e:10:cc:79:15:eb:3c:da:
                    00:6a:43:17:e5:57:1b:71:3e:48:2a:b6:3b:78:d9:
                    e6:e7:3f:03:1e:aa:61:06:ea:a5:8c:03:db:5c:9a:
                    ad:f9:30:c2:15:89:ff:94:21:16:ee:d5:75:79:68:
                    de:cb:19:4f:7c:bb:1c:33:34:d0:c5:2b:4c:1e:c5:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:45:B6:D5:53:96:BD:9E:BB:72:7B:13:13:CD:3D:F0:D2:27:1D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wepFttVTlr2eu3J7ExPNPfDSJx0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1b:f0:96:48:c2:83:68:a2:91:f4:90:34:59:0d:be:a6:7c:
         45:aa:59:f3:37:2f:57:9a:7f:f0:9c:3d:3e:69:1b:c1:52:f4:
         7d:3f:31:77:90:f2:9b:8e:fb:00:3c:f0:15:1c:8d:27:e4:28:
         ce:f2:f9:b7:9b:b9:3b:f5:51:45:65:0f:a2:fd:0b:c2:75:25:
         23:c7:87:56:ca:a7:c3:5d:3c:9b:d3:7c:88:b2:fd:77:d1:69:
         0f:29:26:67:ac:78:3f:4e:18:11:db:95:0a:28:dc:7c:31:d8:
         96:31:b9:dd:0b:d7:4e:e3:70:ca:93:b0:66:27:8d:82:29:87:
         95:1a:f4:74:a0:71:14:87:66:be:20:24:aa:2d:79:53:61:6c:
         94:b8:02:72:01:90:5b:c2:99:08:44:0c:3f:0e:71:19:06:d7:
         73:c0:bd:c0:9b:0c:8d:04:af:4d:34:f0:b2:15:23:a9:c2:92:
         72:9e:5c:b8:4d:10:79:f9:bd:79:84:18:10:01:09:77:69:f6:
         40:17:7e:02:fc:9c:fd:2d:14:40:50:a4:f3:a5:34:67:b9:02:
         b2:bf:45:3c:f1:09:65:b9:b1:af:b4:50:ea:34:81:8b:6b:11:
         d0:b9:88:6f:81:0c:e3:fc:ac:b1:78:6e:dc:e3:dc:88:58:72:
         7b:75:83:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMxRUE0NUI2RDU1Mzk2
QkQ5RUJCNzI3QjEzMTNDRDNERjBEMjI3MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb2CRDbpN6a+8f5WV0cTJ36g5vAPkDwpZnc3ECjPjHZZpZ9orb
BDnpHGDK9m+mE/UYWtnnHjVG8Jd9AotS+p3M6HWX6WAFaNK6eQ6YjZqXiw5WBjCa
bqJa2BuJsTFQb2S9U0JSAcW2LWq2Esi2jb3ZftW1fsE0vyOxOcorvtKTbjaw8vPl
YLxkOXHADVqKj8ORhQEGWURnYaJBezIDgmjizhWDV/ZCWUy/nr6MmPwqTlFRS4uW
MoWH+sdeEMx5Fes82gBqQxflVxtxPkgqtjt42ebnPwMeqmEG6qWMA9tcmq35MMIV
if+UIRbu1XV5aN7LGU98uxwzNNDFK0wexSGTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUwepFttVTlr2eu3J7ExPNPfDSJx0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3dlcEZ0dFZUbHIyZXUzSjdFeFBOUGZEU0p4MC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYHAwDQYJKoZIhvcNAQELBQADggEB
ALIb8JZIwoNoopH0kDRZDb6mfEWqWfM3L1eaf/CcPT5pG8FS9H0/MXeQ8puO+wA8
8BUcjSfkKM7y+bebuTv1UUVlD6L9C8J1JSPHh1bKp8NdPJvTfIiy/XfRaQ8pJmes
eD9OGBHblQoo3Hwx2JYxud0L107jcMqTsGYnjYIph5Ua9HSgcRSHZr4gJKoteVNh
bJS4AnIBkFvCmQhEDD8OcRkG13PAvcCbDI0Er0008LIVI6nCknKeXLhNEHn5vXmE
GBABCXdp9kAXfgL8nP0tFEBQpPOlNGe5ArK/RTzxCWW5sa+0UOo0gYtrEdC5iG+B
DOP8rLF4btzj3IhYcnt1g+A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:03 2026 by rpki-client