Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgxXFA9ejU_-E0RQgONzXNDoCfY.roa
File:                     xgxXFA9ejU_-E0RQgONzXNDoCfY.roa (raw, json)
Hash identifier:          2AR5R4rEizgyfSPWTY4DMLRgm8sZ5chujAaLorn4a0w=
Subject key identifier:   C6:0C:57:14:0F:5E:8D:4F:FE:13:44:50:80:E3:73:5C:D0:E8:09:F6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgxXFA9ejU_-E0RQgONzXNDoCfY.roa
Signing time:             Tue 31 Mar 2026 08:04:52 +0000
ROA not before:           Tue 31 Mar 2026 08:04:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6131 (0x17f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C60C57140F5E8D4FFE13445080E3735CD0E809F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:a8:eb:b0:da:fa:a9:3f:aa:5b:3f:b7:15:
                    d6:37:69:57:c5:db:be:fb:c7:c3:c1:e6:38:d0:27:
                    4f:25:1f:1f:fc:d4:82:8a:d0:79:46:c4:a5:2d:67:
                    25:42:ed:85:e8:4a:14:26:97:05:59:fd:d9:db:64:
                    64:76:8c:f9:c6:ce:df:b7:fd:3c:3d:67:22:d2:20:
                    86:cd:3b:0c:72:3c:2a:67:40:08:37:9f:78:b8:b6:
                    50:8f:b1:fd:b6:e4:0c:b0:a5:30:5f:b1:32:d8:2e:
                    ac:32:67:32:54:36:0a:fb:d0:43:e1:ba:1d:30:56:
                    14:40:ab:8f:91:0e:7e:45:aa:f9:2d:f7:0b:20:37:
                    73:29:93:02:fb:1a:19:87:28:49:0e:66:db:5e:4a:
                    33:59:a2:de:8b:52:24:dc:af:d6:72:16:68:66:c2:
                    dc:ac:27:a9:b1:02:2d:ad:0e:37:fa:54:4c:45:e2:
                    6b:95:36:aa:1b:61:03:12:fd:44:10:f7:08:8d:54:
                    6b:a7:59:63:a9:8e:05:bc:c5:2a:b7:12:01:e3:b4:
                    19:5a:c9:7b:95:cf:17:79:38:4b:40:50:0e:82:72:
                    03:32:58:ef:1f:c2:fb:b5:b1:78:3d:20:e4:07:18:
                    04:d9:6e:4b:b7:ac:d7:c8:d7:14:93:ab:08:56:36:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:57:14:0F:5E:8D:4F:FE:13:44:50:80:E3:73:5C:D0:E8:09:F6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgxXFA9ejU_-E0RQgONzXNDoCfY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:f5:fe:f7:42:69:22:dd:d2:70:1f:cc:85:17:29:d5:d0:ea:
         c9:5d:f6:0c:93:91:82:44:21:f9:73:e5:21:f2:18:04:10:3f:
         9b:bd:f2:2e:29:5e:4b:e9:79:f5:1c:18:43:f3:17:4e:04:a5:
         96:9f:a4:99:da:af:5b:db:16:cf:69:97:ca:76:aa:f5:b5:1d:
         dc:ee:0c:a5:8c:fa:84:aa:0b:1b:d5:02:e5:b7:fe:05:28:ac:
         42:ce:7f:7b:ed:27:ac:be:0f:51:a8:5a:36:b2:eb:4c:01:b5:
         2f:a4:a0:6f:21:0e:4b:b6:ab:99:ee:e7:06:56:37:56:f0:f6:
         b4:71:3a:d7:53:79:1e:d1:ed:4b:cf:d6:f2:d9:cc:5f:74:30:
         05:67:93:97:5f:6b:b9:db:34:f4:50:df:3c:e7:af:a1:c8:af:
         e1:09:5a:18:68:91:f2:d4:38:4d:07:db:7b:8e:f5:a2:7b:6d:
         5e:af:2f:e3:fb:7e:e4:ec:d2:e7:00:49:ff:ce:05:5b:0d:b3:
         1c:a9:4d:a3:08:fa:98:eb:f7:82:31:72:1d:50:15:04:0e:ec:
         83:1a:09:3f:cf:af:f1:c7:c2:ac:26:16:30:42:04:ed:cd:5e:
         6d:95:08:db:df:09:a9:e4:5f:47:a7:01:7a:ca:63:a4:b2:3c:
         40:8f:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:40 2026 by rpki-client