Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1BA0Oes2FOuAdi3X2zrEbD1Z2so.roa
File:                     1BA0Oes2FOuAdi3X2zrEbD1Z2so.roa (raw, json)
Hash identifier:          lznMoqt0XuvsInDZeFfdeNS74br6XESw7S1hwoo8poQ=
Subject key identifier:   D4:10:34:39:EB:36:14:EB:80:76:2D:D7:DB:3A:C4:6C:3D:59:DA:CA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1BA0Oes2FOuAdi3X2zrEbD1Z2so.roa
Signing time:             Sun 01 Mar 2026 03:27:57 +0000
ROA not before:           Sun 01 Mar 2026 03:27:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4859 (0x12fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:27:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D4103439EB3614EB80762DD7DB3AC46C3D59DACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:79:7b:35:30:60:3d:5b:81:13:f4:4d:ff:
                    7f:8c:bd:5b:e9:66:9f:35:ec:7a:ec:c0:c6:f7:dd:
                    51:3a:58:d4:5b:b3:aa:50:d1:85:bb:29:e5:4b:86:
                    c8:62:bb:5c:dc:25:39:59:17:90:f4:8f:08:8f:4e:
                    c8:7a:46:c4:17:62:c5:9d:fb:12:2a:4c:a8:46:9d:
                    da:32:82:50:7a:28:d4:f3:d5:a8:f7:9e:e8:ce:73:
                    23:cd:fd:7b:4f:9c:18:04:cc:0a:61:25:9a:d3:eb:
                    d7:8c:50:dd:bb:a6:ae:2d:99:db:14:12:f4:e0:01:
                    a0:f0:c6:8b:25:3c:99:a4:e6:1d:5a:30:af:7b:57:
                    55:25:d5:08:ab:ab:52:66:36:91:d5:34:eb:d5:a1:
                    ae:89:02:da:bd:41:ed:97:b9:30:b7:46:4d:72:ca:
                    04:fa:37:5d:c8:89:d3:85:c3:54:92:57:f4:96:4b:
                    74:e8:3c:0e:1a:70:80:6c:da:8b:e2:e4:90:5b:5d:
                    bf:71:97:0d:bc:fd:89:f6:3e:04:bb:75:f7:1e:fa:
                    0d:c2:b1:3d:c4:75:77:cd:76:e5:9a:73:e3:51:cc:
                    e0:5c:ae:9e:6f:1b:89:bf:bb:09:e5:bd:6c:73:e8:
                    af:b9:d9:18:ce:53:b3:70:a2:7f:7c:11:03:d7:1a:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:10:34:39:EB:36:14:EB:80:76:2D:D7:DB:3A:C4:6C:3D:59:DA:CA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1BA0Oes2FOuAdi3X2zrEbD1Z2so.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:81:97:60:08:6a:f0:e1:a2:be:d0:af:4a:85:fc:49:0b:ea:
         4c:f0:d5:1b:85:52:33:27:86:da:f8:dd:ca:0a:ff:8b:dc:d1:
         4d:7e:ae:6d:d8:64:b3:19:c4:21:e9:5e:61:76:95:8f:32:ec:
         ef:85:a3:9d:49:c2:a5:3e:cb:b9:f4:d3:ee:8c:8b:5a:a3:69:
         3f:3f:4f:d1:0b:aa:f1:39:1f:3d:07:1b:7e:6d:8e:9e:f9:05:
         de:c5:4e:0b:8e:49:72:a3:af:0c:a1:fd:c4:ac:32:e4:dd:d7:
         1b:52:fa:ed:2b:b1:68:47:c8:96:7c:aa:a3:27:a3:60:a3:bd:
         64:bf:70:dc:c8:db:6f:85:6a:27:cf:f0:db:8a:e7:ca:72:f4:
         82:fd:7b:a5:5c:e5:49:0a:9c:48:75:fc:c3:91:11:63:ec:89:
         21:84:e0:e4:03:3e:46:7c:c4:55:df:c7:a4:c1:e3:15:a2:ff:
         6b:22:1c:c7:e9:b3:17:e4:9a:80:8c:37:a4:8d:80:aa:a0:61:
         57:07:50:bd:97:e7:3e:58:71:a8:68:a8:73:9c:1a:ef:38:32:
         8f:97:aa:9f:6e:36:0b:eb:06:24:0b:51:14:b7:d9:7e:d7:c0:
         46:e0:63:f5:ac:c5:17:f9:ec:52:60:fb:95:aa:25:18:a3:f0:
         3a:dc:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:51 2026 by rpki-client