Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YpAYUsaAIJ0PE6Bz_WrhptbS0zc.roa
File:                     YpAYUsaAIJ0PE6Bz_WrhptbS0zc.roa (raw, json)
Hash identifier:          9ssnZVT+jIXjrMOyI7dYWxnT66Qk+79yAv3aiV3/RfU=
Subject key identifier:   62:90:18:52:C6:80:20:9D:0F:13:A0:73:FD:6A:E1:A6:D6:D2:D3:37
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       187E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YpAYUsaAIJ0PE6Bz_WrhptbS0zc.roa
Signing time:             Wed 20 May 2026 06:37:54 +0000
ROA not before:           Wed 20 May 2026 06:37:54 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6270 (0x187e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 20 06:37:54 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=62901852C680209D0F13A073FD6AE1A6D6D2D337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:7d:35:72:6f:56:a1:f8:12:ef:0b:8e:b1:
                    6b:5f:55:84:a3:3e:a4:3a:a5:89:cd:8b:36:89:de:
                    df:7e:0c:83:30:bc:c4:f9:4c:c0:cd:b4:93:a8:74:
                    2c:ea:09:93:47:ad:f6:13:f1:52:1a:74:15:62:e2:
                    48:e2:b6:9b:93:4f:39:aa:1c:35:4f:f3:9c:6a:f6:
                    3c:89:e8:e2:c6:07:fd:78:f8:5b:e6:84:2e:2f:c4:
                    17:d6:46:45:f1:bd:3a:55:a0:e7:64:f8:df:5b:b9:
                    ff:fd:d8:2d:2a:ec:25:e4:de:14:38:3a:f1:5f:3b:
                    1a:79:24:4f:95:80:5a:9c:c9:f4:42:d8:2d:ae:dd:
                    64:8f:e2:4f:45:62:10:31:6e:e9:e9:8e:cf:b8:42:
                    f7:d9:69:19:37:64:79:2d:88:98:38:45:17:59:cf:
                    d2:23:d6:66:c0:cc:05:1b:5f:08:23:3f:2f:93:0f:
                    1d:fc:57:c7:db:93:ec:ae:e5:eb:7b:8b:75:0e:11:
                    cb:60:4c:39:70:4b:28:81:88:25:2e:10:ea:ee:77:
                    bd:1c:ae:3a:f6:79:6d:43:c9:a3:2e:6a:4d:84:b5:
                    cc:d3:e5:da:94:d9:dc:b4:d3:57:02:9d:2b:b7:b1:
                    14:72:c0:3f:58:b2:fe:7e:43:34:8e:0d:88:81:36:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:90:18:52:C6:80:20:9D:0F:13:A0:73:FD:6A:E1:A6:D6:D2:D3:37
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YpAYUsaAIJ0PE6Bz_WrhptbS0zc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:72:5d:07:2e:1e:0a:8e:49:94:f2:4a:5a:b6:f0:51:2a:
         95:fb:d1:08:d1:77:00:5e:a9:92:36:8e:b0:7d:68:4a:8e:df:
         7c:19:48:b5:e1:46:23:8e:a6:a3:4b:89:00:72:e9:0e:22:61:
         29:7d:9a:e7:b5:b8:ec:3c:3c:2b:b9:ee:3c:46:15:1a:79:f6:
         62:aa:b8:97:19:7f:21:f3:22:4c:bb:a1:50:62:81:04:9c:89:
         8e:26:d2:9f:09:dc:56:00:86:0f:43:eb:27:2e:95:28:66:8a:
         69:f7:98:04:3f:eb:57:b9:85:f0:3f:59:69:3a:0d:ec:16:00:
         ff:79:04:03:66:a5:bc:12:65:42:fa:14:ed:d5:ad:77:ad:94:
         38:9e:3e:5a:ce:89:a5:94:d4:7a:b7:f4:42:6e:a6:a4:1c:18:
         c7:3a:67:3f:8f:64:3e:0b:ac:e6:e8:6a:ac:43:57:a6:29:17:
         a2:23:30:a3:00:66:90:60:b0:6c:42:bf:7e:95:b8:b2:3e:17:
         9c:3b:d9:74:82:74:33:b5:10:db:1f:95:60:55:cd:d6:85:2c:
         22:2f:89:dc:64:a5:4c:96:a5:dd:50:a6:0a:28:c9:95:9e:03:
         47:5c:23:91:59:cc:1e:27:bf:fa:d5:17:00:7f:8b:c7:8e:3a:
         63:90:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:07 2026 by rpki-client