Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ycUjukasnsv9TTytKS3f48nIHao.roa
File:                     ycUjukasnsv9TTytKS3f48nIHao.roa (raw, json)
Hash identifier:          QJLvnu6CAFxsxKHrj3DlH/dmvPhXk+uZ+SYGvwpXSJg=
Subject key identifier:   C9:C5:23:BA:46:AC:9E:CB:FD:4D:3C:AD:29:2D:DF:E3:C9:C8:1D:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1510
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ycUjukasnsv9TTytKS3f48nIHao.roa
Signing time:             Tue 31 Mar 2026 07:58:51 +0000
ROA not before:           Tue 31 Mar 2026 07:58:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5392 (0x1510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C9C523BA46AC9ECBFD4D3CAD292DDFE3C9C81DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:8b:77:6a:aa:ef:66:f3:b9:6c:6a:02:2a:
                    99:ef:6a:07:5e:6b:2b:2d:5a:95:b9:ed:5d:fd:c8:
                    bc:c5:23:fe:9c:00:68:36:7b:3d:d0:4a:cc:94:a1:
                    e4:5b:9d:fa:af:df:81:68:bd:fa:c9:b5:38:81:55:
                    19:82:56:a7:cb:89:8b:d6:fd:f7:81:75:05:0b:8a:
                    ba:23:ba:08:af:8e:98:3d:84:ef:ef:0f:bc:9d:61:
                    90:11:44:03:24:b2:f1:92:65:f7:19:90:71:47:78:
                    9e:4a:94:d1:5b:7b:20:41:b5:48:80:e9:ff:33:65:
                    cb:32:b3:77:03:52:9d:2c:d1:96:56:d3:eb:76:43:
                    ac:96:42:1d:f5:3d:42:9a:fa:d2:e7:f5:43:e3:d4:
                    98:4f:4d:d6:aa:d9:08:c3:3e:de:cc:07:8b:29:12:
                    ae:71:2a:87:c5:b1:1a:53:8e:f1:7a:fc:28:b7:d2:
                    d3:3d:b2:ba:34:eb:5c:fd:74:a3:e4:b4:7d:52:44:
                    71:89:e6:ba:80:61:45:30:88:04:01:88:aa:15:57:
                    92:85:03:40:63:d1:7f:7c:a4:88:aa:bb:4a:71:f3:
                    ae:b7:77:25:aa:56:86:d3:2b:c3:42:c7:16:bc:c3:
                    52:af:d8:7e:bd:b6:b8:17:a6:d9:fe:ad:39:be:26:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C5:23:BA:46:AC:9E:CB:FD:4D:3C:AD:29:2D:DF:E3:C9:C8:1D:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ycUjukasnsv9TTytKS3f48nIHao.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:16:99:03:10:f6:d6:93:06:2e:ff:fd:3a:b3:46:1b:7b:b5:
         e6:51:5e:4f:59:d0:ec:9c:7c:61:bd:da:4f:61:56:f0:46:9e:
         df:fd:2b:61:30:8b:e2:30:b8:f7:c6:5d:5c:4f:d5:b0:a4:6d:
         2b:26:41:6b:4c:81:33:b6:6b:ec:cf:a9:d1:cb:86:6c:6c:66:
         17:b5:33:a0:58:99:28:ff:5c:c3:7d:2c:68:80:5d:07:60:76:
         0b:35:f5:0c:7a:d7:15:90:b8:c8:3a:40:e6:f8:f8:94:1b:6e:
         7b:7b:66:85:90:15:8a:e5:f9:4d:3a:73:56:8b:ed:f0:12:83:
         19:e9:43:b8:13:12:ef:72:f8:f2:d9:0d:20:8d:88:7b:03:25:
         f6:a0:c4:8c:c5:da:79:61:db:91:f7:21:21:a6:ec:99:c1:35:
         69:cb:b3:94:ae:a3:7b:3d:fd:b2:29:09:d6:ed:11:c0:54:4d:
         87:b3:3a:4c:fa:b4:b2:d6:6e:80:9c:92:9e:2d:93:cf:dc:b2:
         73:8f:ac:4f:a1:50:f2:60:0e:00:64:6f:5b:a9:18:ec:74:84:
         b8:3b:25:ad:b5:21:20:42:09:3d:a0:59:29:42:f7:ce:b3:cd:
         e2:a3:b9:d2:71:f6:cf:0e:58:96:b0:51:4f:45:93:41:a7:78:
         0f:09:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:59 2026 by rpki-client