Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0VzaGW7Pw1Xc0d00w5C2YkSUp9w.roa
File:                     0VzaGW7Pw1Xc0d00w5C2YkSUp9w.roa (raw, json)
Hash identifier:          QdmiF69oO1wri8lP8akFELMz+u6cPsHXMqfcPjk0Bdo=
Subject key identifier:   D1:5C:DA:19:6E:CF:C3:55:DC:D1:DD:34:C3:90:B6:62:44:94:A7:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       114F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0VzaGW7Pw1Xc0d00w5C2YkSUp9w.roa
Signing time:             Sun 01 Mar 2026 02:16:51 +0000
ROA not before:           Sun 01 Mar 2026 02:16:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4431 (0x114f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:16:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D15CDA196ECFC355DCD1DD34C390B6624494A7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:13:47:49:ca:18:b2:c3:25:87:f5:13:4c:
                    a8:ec:7d:16:b1:8a:ff:04:ad:56:4f:6f:60:97:05:
                    d9:96:2f:d5:13:e2:33:d0:17:bd:99:7d:62:d6:f2:
                    3d:8c:e8:e5:4d:b1:cd:5e:ea:68:03:8f:2f:d1:fd:
                    67:c0:4f:a2:4a:58:c6:c3:cf:b5:87:93:e9:69:1f:
                    15:ed:1c:83:11:32:92:5e:6e:55:39:3c:b9:6d:1c:
                    25:cc:5b:b2:d6:00:af:22:26:5d:6c:b7:d8:60:da:
                    81:1d:7a:dd:0e:b0:eb:c8:3d:2e:8f:1b:2e:57:b4:
                    33:80:8d:da:f2:34:9a:26:a2:11:8b:d1:11:71:14:
                    91:31:95:d5:6f:90:c6:4d:16:a8:b2:82:bc:c5:3f:
                    10:fb:75:dd:f1:57:d2:b5:68:2a:87:4b:46:70:e0:
                    37:7d:55:f5:54:70:8a:5b:49:fd:45:e3:99:2a:87:
                    d1:59:3f:20:1b:17:31:2d:ef:a9:bf:7c:fe:7d:f0:
                    d3:40:f5:be:10:3c:f5:c5:22:82:73:a4:56:5b:be:
                    39:14:bc:35:59:22:73:c3:df:d8:0a:4f:d8:01:82:
                    43:de:2a:d9:2c:a5:a4:6e:c9:8c:45:d3:4f:87:bd:
                    8e:b6:b8:7f:c0:33:d7:6e:02:60:d9:3b:ac:7b:8b:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5C:DA:19:6E:CF:C3:55:DC:D1:DD:34:C3:90:B6:62:44:94:A7:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0VzaGW7Pw1Xc0d00w5C2YkSUp9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:73:8b:55:84:7f:7d:4d:d4:17:40:83:a3:49:f8:3d:1b:6b:
         f6:77:d4:53:78:1f:8a:06:a2:3c:e7:b3:cc:28:8e:72:b3:d8:
         63:07:5f:b6:d5:0a:69:fb:eb:24:aa:49:a4:32:3b:69:f4:21:
         67:e4:e1:76:d6:1c:d2:e5:6f:ca:b5:4e:8b:15:43:08:1a:d0:
         79:16:e4:87:ee:d9:18:41:c3:db:a3:65:34:d2:b3:77:51:2d:
         5a:58:ee:b8:b5:68:8c:aa:64:e0:fa:4a:d5:af:73:fa:ea:50:
         04:7a:7a:38:7c:d7:f7:1e:b5:f9:27:2b:b4:2e:f4:0d:4d:11:
         0b:87:ce:82:42:39:7a:c4:6c:b4:de:57:f8:30:07:a9:13:b5:
         05:0d:ba:49:ac:d3:13:3f:f3:de:0b:43:79:9b:ec:44:86:54:
         bf:d7:e0:a1:3a:72:44:7d:62:b1:79:b1:8b:24:4e:2a:78:f4:
         8f:45:7f:e8:81:a0:29:16:8d:67:1c:94:cc:4b:28:bb:56:8c:
         c1:56:25:a5:98:d5:e0:ff:d2:8d:fa:03:9c:7c:23:8f:b5:d3:
         26:63:3b:4d:5c:ad:51:29:a3:1c:97:71:ce:1d:a0:d8:35:b4:
         1e:d1:cd:cf:0c:3e:42:42:8c:3a:3a:02:1c:04:0a:af:2b:74:
         19:ce:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:13 2026 by rpki-client