Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/39m6GOljNVxtyxhVp1dWtOhZacM.roa
File:                     39m6GOljNVxtyxhVp1dWtOhZacM.roa (raw, json)
Hash identifier:          Q9lrnXYRhFIuMINzRfX2X7sZgv9D0L92Zj4DW4fAHP0=
Subject key identifier:   DF:D9:BA:18:E9:63:35:5C:6D:CB:18:55:A7:57:56:B4:E8:59:69:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       128D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/39m6GOljNVxtyxhVp1dWtOhZacM.roa
Signing time:             Sun 01 Mar 2026 03:08:39 +0000
ROA not before:           Sun 01 Mar 2026 03:08:39 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4749 (0x128d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:39 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DFD9BA18E963355C6DCB1855A75756B4E85969C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:a1:9f:df:58:d2:7b:21:09:52:3b:09:71:
                    43:df:cd:65:28:3d:d1:42:6d:d9:98:45:6c:0c:b8:
                    48:39:70:f8:ed:7b:85:0c:d5:78:9b:13:5e:7d:63:
                    8b:e6:c8:e8:94:fe:66:e3:0d:66:d2:b0:22:2b:3f:
                    c6:c2:4b:df:b7:8f:23:4f:53:60:1e:5c:9f:a4:51:
                    21:0b:91:32:09:c7:bf:37:1f:fe:e0:54:8f:b7:58:
                    b4:e6:81:eb:a9:a1:77:9e:63:88:f7:73:75:54:f6:
                    43:b0:14:c9:f3:81:a8:a2:cf:f1:29:ea:a4:39:37:
                    14:25:f8:ad:53:e8:19:a8:25:6d:3f:db:2a:1b:d5:
                    67:70:49:77:27:57:96:8d:41:9b:06:0d:81:b3:42:
                    56:34:0a:a9:74:a8:6c:86:15:9f:e7:1b:4f:a9:0a:
                    73:2d:05:ec:c4:b0:f3:2b:ce:5d:c2:53:23:7b:15:
                    25:c6:7c:cc:58:52:b9:8c:2c:8a:f3:f3:43:4e:2c:
                    77:4b:28:90:21:6d:4f:63:bf:92:16:c5:48:f6:48:
                    9e:a0:09:9e:b6:c5:e1:75:54:7e:02:11:2f:2b:a4:
                    de:da:c4:d5:4c:9f:f0:f8:ee:3b:f1:36:4d:62:69:
                    f9:95:9b:9c:b3:c5:a2:e1:3c:33:65:cb:e3:ca:da:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:BA:18:E9:63:35:5C:6D:CB:18:55:A7:57:56:B4:E8:59:69:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/39m6GOljNVxtyxhVp1dWtOhZacM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:0c:4e:76:8f:ba:bf:c7:fb:ab:53:8f:df:59:cd:29:e7:
         29:35:e0:28:6e:54:b9:d2:42:e5:1f:1f:d4:78:b2:20:d3:fc:
         0a:1d:02:2c:67:57:cf:6f:67:38:ff:1e:16:8f:cf:27:de:ea:
         88:ff:d9:85:bd:81:a8:ff:a4:6f:a6:3b:0e:c5:c4:11:cb:db:
         02:b9:a8:db:e6:c8:db:62:51:db:c1:25:85:46:67:40:e2:e3:
         47:b6:21:5f:64:22:36:48:a3:fb:31:d1:dd:82:11:14:c3:98:
         1d:a2:04:55:76:25:a1:d2:99:42:30:80:2b:61:cc:40:8d:6c:
         5e:94:7f:3b:6a:8a:ba:0e:e1:f5:a4:32:c2:be:6b:1e:75:72:
         22:92:63:08:33:ba:17:20:9a:e1:1a:e8:0c:68:14:de:3d:36:
         38:d6:54:db:5f:94:a2:ff:cf:60:e7:02:21:63:50:cb:91:a6:
         7f:2c:15:df:39:28:61:f8:d7:ea:a6:10:74:27:5c:55:3f:44:
         d9:16:36:87:cc:e3:22:b0:a4:68:2d:77:04:9d:26:19:e2:5d:
         3e:f0:4f:0d:84:38:1b:a0:f7:e1:0b:45:dd:b2:53:a3:94:ca:
         a8:57:7f:a7:cc:a5:f0:da:b5:8f:ef:89:cc:09:d1:b9:b5:0e:
         24:c5:95:34
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzA4MzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGRDlCQTE4RTk2MzM1
NUM2RENCMTg1NUE3NTc1NkI0RTg1OTY5QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCooqGf31jSeyEJUjsJcUPfzWUoPdFCbdmYRWwMuEg5cPjte4UM
1XibE159Y4vmyOiU/mbjDWbSsCIrP8bCS9+3jyNPU2AeXJ+kUSELkTIJx783H/7g
VI+3WLTmgeupoXeeY4j3c3VU9kOwFMnzgaiiz/Ep6qQ5NxQl+K1T6BmoJW0/2yob
1WdwSXcnV5aNQZsGDYGzQlY0Cql0qGyGFZ/nG0+pCnMtBezEsPMrzl3CUyN7FSXG
fMxYUrmMLIrz80NOLHdLKJAhbU9jv5IWxUj2SJ6gCZ62xeF1VH4CES8rpN7axNVM
n/D47jvxNk1iafmVm5yzxaLhPDNly+PK2kq7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU39m6GOljNVxtyxhVp1dWtOhZacMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzM5bTZHT2xqTlZ4dHl4aFZwMWRXdE9oWmFjTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABS+8wDQYJKoZIhvcNAQELBQADggEBAF10DE52j7q/x/urU4/fWc0p5yk1
4ChuVLnSQuUfH9R4siDT/AodAixnV89vZzj/HhaPzyfe6oj/2YW9gaj/pG+mOw7F
xBHL2wK5qNvmyNtiUdvBJYVGZ0Di40e2IV9kIjZIo/sx0d2CERTDmB2iBFV2JaHS
mUIwgCthzECNbF6UfztqiroO4fWkMsK+ax51ciKSYwgzuhcgmuEa6AxoFN49NjjW
VNtflKL/z2DnAiFjUMuRpn8sFd85KGH41+qmEHQnXFU/RNkWNofM4yKwpGgtdwSd
JhniXT7wTw2EOBug9+ELRd2yU6OUyqhXf6fMpfDatY/vicwJ0bm1DiTFlTQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:47 2026 by rpki-client