Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1haya-_p9bNv3aLBBq_TSxJVeZ4.roa
File:                     1haya-_p9bNv3aLBBq_TSxJVeZ4.roa (raw, json)
Hash identifier:          Kahxws3f8W0FVXIkKLcXDC44LUQZUE9XvdZUYcufQ08=
Subject key identifier:   D6:16:B2:6B:EF:E9:F5:B3:6F:DD:A2:C1:06:AF:D3:4B:12:55:79:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1071
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1haya-_p9bNv3aLBBq_TSxJVeZ4.roa
Signing time:             Sun 01 Mar 2026 01:34:23 +0000
ROA not before:           Sun 01 Mar 2026 01:34:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4209 (0x1071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:34:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D616B26BEFE9F5B36FDDA2C106AFD34B1255799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:93:ba:07:ab:db:cc:ce:b4:18:fd:8f:13:d7:
                    12:8d:ac:91:a3:40:9e:00:44:0b:8a:19:59:07:32:
                    bb:a1:96:19:a4:ac:00:49:93:5e:fb:5e:82:3a:dc:
                    3f:35:93:fa:96:fb:90:07:a2:ab:35:55:07:85:57:
                    9a:e5:78:6c:c7:49:72:66:e2:9a:83:58:4d:74:52:
                    b6:11:28:75:14:70:fc:83:c8:36:ac:22:45:ea:0b:
                    9d:18:c1:04:82:df:05:bb:a0:c2:c3:b6:f5:9c:b4:
                    56:9c:61:74:a1:4b:d4:d6:6d:48:06:f3:94:6e:7a:
                    10:da:39:ea:eb:31:e6:1d:d8:c4:b7:70:03:65:80:
                    52:7a:ab:13:eb:74:07:29:00:98:56:89:6d:bb:39:
                    92:ec:d1:f3:42:7b:d5:02:43:15:98:77:94:0c:f2:
                    5b:b8:cc:cb:05:b0:f2:fc:4b:a6:ea:0d:73:ae:35:
                    46:cb:a6:95:59:7f:46:51:5e:3c:dd:93:39:a3:dc:
                    fb:25:d5:9f:c6:ae:35:ff:21:94:4c:38:03:6f:28:
                    d1:22:6e:8e:fa:42:fd:5d:c1:6f:f7:4b:b4:37:a4:
                    26:40:86:d5:da:8c:f6:c8:c2:54:3d:6a:51:f5:d6:
                    f6:9c:35:f5:57:da:2a:7a:13:0d:1c:74:3e:b4:72:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:B2:6B:EF:E9:F5:B3:6F:DD:A2:C1:06:AF:D3:4B:12:55:79:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1haya-_p9bNv3aLBBq_TSxJVeZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:be:6e:36:8e:e1:1f:da:e5:ba:31:d4:d0:75:07:d7:01:
         a5:82:ed:23:4e:ef:18:f6:05:15:fe:36:59:2b:0b:45:70:2a:
         8f:41:da:43:05:1e:b3:85:55:a0:f6:c8:1e:98:db:7b:fc:f2:
         6a:18:64:6b:4c:8a:cb:3e:02:5f:cb:4e:5d:a1:d2:e9:e3:f2:
         0d:b0:23:89:00:fc:dd:94:7a:55:46:55:5b:3e:80:f3:cd:91:
         d4:a6:a7:72:0f:6e:ad:23:44:db:05:a9:66:6c:73:60:e1:e4:
         6a:88:be:fa:38:54:17:ff:35:2e:30:c9:62:f9:0e:80:43:75:
         c7:d7:5e:03:f9:0f:de:07:d2:48:30:f5:bf:ef:32:12:1a:e1:
         39:1a:76:72:16:cc:c1:84:ca:2f:8b:e0:63:45:86:3e:cb:b1:
         7d:2f:94:93:c9:7e:55:15:c4:89:fb:11:f6:77:5c:fd:ed:9f:
         8b:0c:57:3b:08:c7:0a:cf:97:20:c9:ce:23:19:bb:08:3a:7c:
         9d:63:bb:a5:fb:4e:34:c9:c1:5d:a5:85:a6:73:2d:2c:5d:01:
         16:6f:58:61:33:d0:91:3b:19:e4:29:b5:7d:93:a4:63:39:17:
         4f:83:0b:dc:49:f1:9c:1a:f2:a9:00:de:31:ea:b4:ca:d2:3f:
         4a:4e:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:13 2026 by rpki-client