Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
File:                     5dl7WXiMInYcGmhCDwoYdOB7cp8.roa (raw, json)
Hash identifier:          vz6/elGjAWxnsgSEygkw8AFhExURtNRG7wOWPCUT25M=
Subject key identifier:   E5:D9:7B:59:78:8C:22:76:1C:1A:68:42:0F:0A:18:74:E0:7B:72:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1143
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
Signing time:             Sun 01 Mar 2026 02:12:49 +0000
ROA not before:           Sun 01 Mar 2026 02:12:49 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4419 (0x1143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:12:49 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E5D97B59788C22761C1A68420F0A1874E07B729F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:58:08:cb:10:2f:1d:93:5a:1f:7e:cb:78:
                    2c:18:46:dd:5a:92:22:86:4a:81:75:4c:fc:36:01:
                    79:f4:82:67:fe:c4:b4:01:f8:d9:e7:ef:ef:67:c5:
                    a8:25:78:d6:83:a1:32:f6:8b:e5:bc:35:36:13:dc:
                    44:1c:70:d9:28:fd:10:71:e3:b9:80:ee:5f:fa:c3:
                    09:d6:14:d9:a1:b4:12:46:6c:a3:06:00:81:97:f7:
                    35:23:90:41:88:83:11:6c:bd:58:e7:23:11:80:fd:
                    c9:6d:5b:b9:ef:43:7a:8c:35:8c:aa:c7:aa:ae:9e:
                    a6:10:05:9c:e3:b9:5f:39:2d:d5:a7:c8:56:93:41:
                    58:1f:ec:8a:c9:d4:68:4d:e2:98:3e:a4:e0:ea:4b:
                    44:a4:8c:bc:0a:30:86:7e:ef:2d:22:f1:04:2a:e9:
                    15:59:9d:99:d8:26:b0:e2:b3:51:44:82:b3:c4:92:
                    1b:a4:6e:ba:25:f4:8d:ca:42:6b:c8:be:79:c9:ec:
                    36:7f:86:4f:16:c0:37:13:4f:85:12:e0:f2:51:14:
                    9c:15:1d:aa:0b:1d:e7:3b:0b:9d:79:82:74:b1:4e:
                    8e:23:f7:67:d8:22:0e:b1:3f:8f:84:eb:b7:d8:f4:
                    86:df:bb:5d:9e:df:53:88:99:7c:50:2d:3e:c8:6b:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:7B:59:78:8C:22:76:1C:1A:68:42:0F:0A:18:74:E0:7B:72:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5dl7WXiMInYcGmhCDwoYdOB7cp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:58:1c:11:09:66:2f:93:cb:dd:eb:62:52:21:73:63:6e:
         40:c6:99:88:87:97:b6:bc:3c:93:08:ce:17:ac:92:25:07:9c:
         37:2d:4c:98:51:33:cb:64:5a:cc:76:7c:b0:fc:e4:9c:c6:3f:
         98:be:a6:44:a9:1b:b2:ac:4a:11:3c:a6:30:95:5a:36:23:c3:
         93:a0:fd:04:bc:65:e5:b3:b4:35:2b:95:9e:4b:2b:1e:be:7c:
         7e:7e:9d:20:33:38:c7:65:73:1b:26:d9:35:74:e0:bc:86:74:
         77:63:41:f5:1a:f5:81:b2:ee:d4:8c:98:29:99:cd:de:d3:79:
         f3:15:a9:62:be:38:37:b1:0d:cf:3e:72:98:d6:5e:94:9c:82:
         fd:0f:45:91:f8:f3:0a:f3:78:7d:80:df:31:64:1b:d7:23:07:
         e3:49:1d:c1:ed:3f:59:37:06:37:fc:4e:b6:07:80:32:7c:69:
         75:64:4e:59:d0:3a:a0:47:47:c6:f7:f6:bf:a3:ed:29:cd:9c:
         3e:00:76:c3:8b:98:e5:b3:83:b7:8f:9e:f0:48:fc:80:aa:83:
         0f:93:42:50:94:22:69:4e:ec:e5:a0:c3:3d:28:ed:aa:62:66:
         ab:12:bc:f9:3d:27:ea:aa:d3:69:96:b9:2d:56:16:9e:a3:85:
         c2:8a:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:49:46 2026 by rpki-client