Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4_nCxsCH4znepkimSqiJl9aAgX4.roa
File:                     4_nCxsCH4znepkimSqiJl9aAgX4.roa (raw, json)
Hash identifier:          yvmkkgM3Ds+NelREoyRehEF7RGzDDGlog69lTUbEXBw=
Subject key identifier:   E3:F9:C2:C6:C0:87:E3:39:DE:A6:48:A6:4A:A8:89:97:D6:80:81:7E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12D5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4_nCxsCH4znepkimSqiJl9aAgX4.roa
Signing time:             Sun 01 Mar 2026 03:16:32 +0000
ROA not before:           Sun 01 Mar 2026 03:16:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4821 (0x12d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:16:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E3F9C2C6C087E339DEA648A64AA88997D680817E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:6e:fb:73:9d:f9:5e:6d:bd:68:3f:51:b5:
                    5f:0d:55:a8:11:00:fb:30:5d:1d:dc:90:78:96:a7:
                    2a:ff:58:64:a6:c8:43:87:08:0c:91:82:c1:ea:70:
                    fd:78:89:26:88:47:4b:b2:1c:a7:88:48:72:bb:24:
                    52:e8:3b:ba:af:4f:cd:b7:cf:a6:bd:2d:a1:38:24:
                    00:f8:ee:bf:3a:42:a1:ea:e5:04:75:49:fe:9e:52:
                    78:ca:43:83:1c:74:b7:78:81:b3:89:4a:db:1c:14:
                    ff:37:d4:e6:9b:e6:3c:58:b1:9b:93:11:7e:40:a5:
                    a7:f7:0c:dd:36:f8:5e:0f:8d:72:8b:0b:3b:8e:58:
                    91:ea:89:bd:ba:cf:9e:ec:39:c2:e2:1e:5a:68:1e:
                    d9:66:66:5f:bf:c2:33:34:ab:1a:6a:5b:11:8b:e0:
                    8f:c7:72:3e:3e:16:70:af:ce:83:85:f4:c3:2f:a3:
                    d9:e7:45:7f:bd:65:94:66:13:05:ed:90:15:c5:10:
                    51:18:69:16:62:de:14:08:68:55:30:55:f0:9c:fa:
                    8f:59:72:7c:ff:65:77:e4:68:44:e8:c7:c1:31:c3:
                    f2:22:65:9e:74:01:43:8c:3a:61:32:8a:74:14:05:
                    4d:2b:9d:d3:8a:2d:bf:04:d5:eb:cc:bc:5d:65:5a:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:C2:C6:C0:87:E3:39:DE:A6:48:A6:4A:A8:89:97:D6:80:81:7E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4_nCxsCH4znepkimSqiJl9aAgX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:5e:51:1e:26:66:b7:e2:48:a9:03:64:13:06:ad:9a:1e:04:
         2d:33:c8:da:2e:5f:7d:3b:fe:b4:65:01:4f:4b:b9:01:e8:f7:
         9e:aa:99:fd:64:2e:df:53:a2:a4:1c:b3:c6:6f:b7:1f:c0:48:
         27:e4:57:44:e5:a4:59:fb:08:dd:c7:d2:04:54:40:d9:3e:a8:
         28:fc:49:9c:c6:a2:92:29:13:07:0d:d8:3b:85:d2:d6:60:5b:
         71:da:da:99:e3:8f:88:9a:19:90:f8:bc:d3:51:dd:0f:0e:ae:
         8b:fa:f0:57:40:3a:65:88:be:21:d2:b6:00:9c:df:3e:85:cf:
         b3:87:a4:a9:01:c4:03:73:55:81:e1:6d:47:e6:ba:e3:b8:e8:
         4f:80:fc:20:01:a4:b5:b7:e4:f9:91:4c:b8:5d:cf:da:4f:9c:
         0f:ad:55:87:22:3b:d8:a5:64:17:d4:df:cd:82:de:83:7e:c3:
         be:66:53:bc:a5:20:d4:13:63:f0:09:a4:50:3f:66:b0:32:5d:
         9e:a1:56:8a:c7:a3:00:14:46:8a:9c:ad:2a:61:50:d7:d9:68:
         c0:13:17:04:27:25:24:18:c4:e4:1f:89:42:38:0f:47:05:38:
         ab:12:ae:23:7e:83:b1:f5:46:f9:68:bc:1f:5b:19:28:f7:e3:
         ad:c8:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:20 2026 by rpki-client