Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5RGw3157aOsPJiBAxFiPLtV8gUk.roa
File:                     5RGw3157aOsPJiBAxFiPLtV8gUk.roa (raw, json)
Hash identifier:          Ac6Ycr5Kh8ukFjVgRtFiGg1rKoKoZ0vMgBdoe2xae4M=
Subject key identifier:   E5:11:B0:DF:5E:7B:68:EB:0F:26:20:40:C4:58:8F:2E:D5:7C:81:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1133
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5RGw3157aOsPJiBAxFiPLtV8gUk.roa
Signing time:             Sun 01 Mar 2026 02:12:40 +0000
ROA not before:           Sun 01 Mar 2026 02:12:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4403 (0x1133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:12:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E511B0DF5E7B68EB0F262040C4588F2ED57C8149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:9d:e2:d2:a9:19:88:eb:5a:43:a5:29:bf:
                    3c:d9:a4:e7:c2:7a:39:a4:f0:db:1e:5b:63:b7:30:
                    7e:b9:c0:00:ad:bd:97:6b:2f:11:e8:ee:a4:cb:7c:
                    87:cf:83:2c:96:45:9f:d2:4f:ca:1a:dc:ac:e8:ac:
                    e2:0b:f2:7f:e2:b6:93:44:9c:b0:73:c3:c9:c6:63:
                    56:d0:e0:37:3f:fa:40:9d:a2:1d:de:8c:15:fc:49:
                    73:62:70:53:4d:24:9b:ac:96:49:f9:20:dd:b9:9b:
                    46:f5:dd:a5:2f:ce:b8:38:e4:94:7a:1d:27:98:e9:
                    9c:0f:06:aa:7f:84:63:65:4c:8a:eb:35:18:36:ef:
                    6c:2e:87:60:78:60:13:2c:d0:22:aa:0d:8e:38:d4:
                    63:21:7c:ad:c5:fb:79:42:d0:71:bd:c0:d1:2e:6a:
                    00:fe:0a:89:ae:01:d6:84:0e:2e:b0:c9:c7:f2:2e:
                    0e:36:81:7b:27:7d:b5:19:cb:9c:d8:54:51:c7:da:
                    61:81:38:8a:b1:27:87:17:12:92:e1:04:4d:c7:ca:
                    d8:98:91:e3:30:fd:a9:24:ed:19:ef:f1:10:38:29:
                    06:7c:d3:b3:93:ae:4a:8c:e7:df:e9:ee:40:c3:42:
                    3f:cb:37:2a:74:66:46:3e:71:5c:e3:18:e8:65:ce:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:B0:DF:5E:7B:68:EB:0F:26:20:40:C4:58:8F:2E:D5:7C:81:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5RGw3157aOsPJiBAxFiPLtV8gUk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:12:18:8f:30:30:a0:99:9b:85:69:1e:06:d6:a8:bb:59:
         a8:20:61:65:e9:8a:32:31:95:b7:61:12:b9:00:9a:5a:f8:e7:
         e4:c1:ee:ab:ef:8d:18:b0:60:c6:0a:92:89:a2:62:7e:0f:29:
         a3:bb:04:35:fe:9c:f5:d6:89:f1:b8:6c:d6:e4:05:a0:fc:57:
         f6:eb:09:ef:9a:08:b4:a1:a6:f0:3d:ce:59:a1:31:2c:35:60:
         74:6c:60:e6:5a:37:f1:c0:35:6a:8d:00:ac:d5:99:ba:89:f0:
         64:fa:fe:90:e6:51:d3:e8:79:33:6d:c7:ad:13:dd:fa:c3:8c:
         cf:a9:cf:80:e8:51:b6:79:2e:61:26:8d:94:d4:50:35:9f:fc:
         6f:e2:54:15:72:90:72:08:44:1d:3e:83:24:ba:10:83:f9:32:
         6f:f4:92:ed:0d:2c:91:27:21:db:94:19:6b:87:0d:2b:63:80:
         89:2a:f1:ca:c7:3e:ca:03:6d:7f:78:b0:d7:5e:eb:98:bf:10:
         13:f7:3d:3c:30:f8:8b:d6:8e:65:b2:6c:a9:00:d0:c6:9e:c1:
         dd:14:4f:83:75:0d:5a:8c:38:90:40:57:36:a8:38:76:7e:ad:
         7e:5b:04:f4:74:23:79:83:cf:15:a9:ae:83:d7:99:68:66:be:
         00:23:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:42 2026 by rpki-client