Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3KmOL3xu4FNBRnn9KysGrAtUqeA.roa
File:                     3KmOL3xu4FNBRnn9KysGrAtUqeA.roa (raw, json)
Hash identifier:          6PE6GD28dYp2PplyUFIXlQLvtSVo50WBq/0V7MnY0SQ=
Subject key identifier:   DC:A9:8E:2F:7C:6E:E0:53:41:46:79:FD:2B:2B:06:AC:0B:54:A9:E0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1259
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3KmOL3xu4FNBRnn9KysGrAtUqeA.roa
Signing time:             Sun 01 Mar 2026 03:00:24 +0000
ROA not before:           Sun 01 Mar 2026 03:00:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4697 (0x1259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:00:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DCA98E2F7C6EE053414679FD2B2B06AC0B54A9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:ed:df:69:cd:85:d9:d6:35:f0:a6:12:af:
                    7f:33:ed:85:88:5d:b7:b1:30:76:23:45:50:48:3d:
                    c9:9b:2b:f4:bd:62:2c:07:54:87:70:21:b9:44:45:
                    47:3b:01:1e:ef:d7:c5:95:00:10:d3:78:aa:6c:ba:
                    80:0c:7e:8b:f5:45:ed:57:87:07:76:7c:f2:20:86:
                    7c:e6:a5:13:40:a8:43:ea:4e:93:f2:23:8c:e6:d9:
                    a4:9f:d5:18:64:2a:f3:05:37:ca:7f:75:1b:39:1b:
                    4b:9c:69:c1:ef:49:53:df:17:35:9a:05:70:e1:b3:
                    cb:0f:e0:64:fd:c1:98:01:14:bb:4d:48:5c:4d:e8:
                    c7:9c:18:e8:45:bf:7a:ae:a4:54:46:6f:86:9a:ac:
                    2b:67:44:d0:52:35:2a:fb:ed:06:52:85:d0:dd:e5:
                    c6:d6:e4:d4:23:85:49:ec:9f:db:d3:e2:3c:bc:68:
                    03:05:5e:a3:1c:84:97:46:dd:a5:5a:3d:da:0d:98:
                    a3:fc:cd:f4:80:56:8e:49:f3:ca:0f:d8:47:dd:de:
                    91:67:28:41:8f:8e:4a:ea:2b:18:50:e3:ba:69:2d:
                    ba:cc:ca:ef:6b:69:f8:7c:37:bc:53:9e:29:6b:a0:
                    0d:8a:aa:87:2f:a3:59:02:8f:ab:eb:f0:7a:92:37:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:8E:2F:7C:6E:E0:53:41:46:79:FD:2B:2B:06:AC:0B:54:A9:E0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3KmOL3xu4FNBRnn9KysGrAtUqeA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:f6:ed:15:73:64:67:02:f8:f3:02:ff:c5:46:b1:1d:e4:
         a2:32:6e:be:5c:e3:c2:f1:26:eb:0c:e0:38:f9:78:33:67:32:
         f1:07:01:4b:6c:80:ea:fe:1c:4b:e0:fe:73:bb:1a:f5:55:23:
         2a:1c:81:2c:38:37:c7:01:14:84:cd:68:b0:92:85:77:ea:21:
         46:08:9e:fb:30:e1:67:6f:d1:6c:a9:12:45:6c:3c:45:20:01:
         fa:70:c9:39:43:62:d3:b2:4e:9d:7b:31:9b:37:dc:a0:ec:3f:
         7e:7c:2e:0d:fe:e8:a8:5c:08:d2:60:e5:63:3e:19:3b:ef:6d:
         11:e5:bc:c6:97:b5:a1:9f:a6:6e:e4:d0:98:71:7a:1d:8f:8d:
         7c:23:03:a0:bc:8b:52:51:4d:e5:5a:6e:d2:17:5c:b9:54:5a:
         30:06:e2:a4:42:59:8c:b7:fc:e6:0b:7a:b6:1e:47:05:64:06:
         e1:28:e9:af:83:1c:3a:ae:88:fe:53:4c:36:a7:02:55:bb:23:
         2f:b6:0d:ec:de:1d:58:62:fd:9a:82:e3:7d:b2:2e:57:44:e7:
         18:1a:74:8d:52:ae:3b:8f:a2:47:65:0e:4b:b0:fd:7c:56:a4:
         17:fa:9a:36:89:8f:03:35:ef:b8:1a:07:08:f1:d7:dc:46:02:
         f3:81:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:56 2026 by rpki-client