Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/6soE9JqtVouEEsBGMaMHroIraOw.roa
File:                     6soE9JqtVouEEsBGMaMHroIraOw.roa (raw, json)
Hash identifier:          FB9nWoW/BobY9ujCWSijFQTnCbn5XkqAYRwkoHdo4xg=
Subject key identifier:   EA:CA:04:F4:9A:AD:56:8B:84:12:C0:46:31:A3:07:AE:82:2B:68:EC
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       22
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/6soE9JqtVouEEsBGMaMHroIraOw.roa
Signing time:             Tue 31 Mar 2026 08:44:33 +0000
ROA not before:           Tue 31 Mar 2026 08:44:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        218.223.14.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Mar 31 08:44:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EACA04F49AAD568B8412C04631A307AE822B68EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:8e:e4:92:e9:4a:da:a0:38:e7:59:24:c6:
                    d6:f8:a6:a9:bd:f4:d7:2d:81:b9:3b:bc:d1:0b:dc:
                    48:35:bf:51:4e:9a:33:8a:50:f7:07:4d:ec:82:4a:
                    0c:20:53:6c:4a:ee:4b:b0:32:c4:e9:d3:5a:24:32:
                    b0:10:3e:eb:05:75:d6:72:39:c5:e4:48:04:af:f0:
                    6b:2a:85:1e:b2:b5:bf:29:49:7c:f4:15:0e:54:14:
                    ac:38:98:60:d6:07:de:1e:ff:fc:1a:a6:f6:20:07:
                    6a:d3:f0:16:62:d5:b6:bb:74:90:a3:dd:20:5a:c3:
                    39:2e:fb:17:dc:8a:81:2b:06:d9:fd:8d:bb:99:38:
                    f1:bf:c7:15:2c:91:e1:54:0f:64:03:de:30:c8:5e:
                    e0:71:42:34:c1:17:f0:68:45:40:68:6c:9c:f4:5b:
                    99:84:5f:c8:05:9a:de:6c:73:4c:3f:31:62:d0:97:
                    b2:6e:80:73:e4:cf:3e:83:9e:3f:6e:53:f5:9c:a3:
                    8a:1e:70:a2:17:40:46:c9:2a:3a:af:ae:4e:9f:ea:
                    56:c7:b5:db:b0:4f:57:3d:5d:ee:c8:f2:03:1c:97:
                    91:09:b5:3a:6a:87:a5:37:f6:a5:03:6d:77:4a:92:
                    9d:f0:94:07:ec:73:2b:39:1b:59:d7:34:82:94:6e:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:04:F4:9A:AD:56:8B:84:12:C0:46:31:A3:07:AE:82:2B:68:EC
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/6soE9JqtVouEEsBGMaMHroIraOw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:6e:5f:8e:ba:ea:d2:c6:02:66:a1:3d:dc:60:4e:3f:76:
         15:99:5f:ea:70:bd:5c:71:0a:06:92:a7:71:f2:9c:d3:08:26:
         e5:c8:f5:c5:b0:a3:07:a0:78:64:9e:e9:e9:5a:ca:e3:5f:d0:
         e5:59:a2:e0:c6:86:a2:da:e8:9f:63:46:d2:c1:b1:3a:d4:dc:
         ef:62:26:b8:79:43:e1:36:fa:14:36:e9:33:53:0c:81:69:b3:
         1a:00:43:57:00:86:fe:81:04:55:60:84:a4:fa:44:35:8d:ab:
         50:dc:3a:89:04:71:db:0f:a1:4f:d1:50:74:39:66:19:ce:f9:
         2e:0f:f7:4b:10:90:d7:61:d1:4e:6f:de:57:36:93:9f:31:36:
         a6:2f:a1:61:fc:f9:5a:93:ae:74:18:7b:dd:bd:b3:37:07:85:
         23:8d:f0:9f:ec:89:37:92:e4:29:6e:b3:78:0d:14:60:47:26:
         99:c6:e1:3a:59:a8:4a:56:95:2b:ab:f0:29:91:0d:63:8e:bc:
         0d:cc:dc:27:7c:4c:00:a4:0c:93:0c:6f:ed:09:58:1f:3e:3b:
         10:1b:9b:5f:1f:d3:05:6d:b5:c5:28:5d:94:ea:3a:80:2d:73:
         68:2e:3f:b2:58:60:a1:dc:54:28:09:91:61:ac:3c:0a:e9:87:
         16:b1:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:00 2026 by rpki-client