Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6_142euMVWeLAwB4KRmBRdt2Tug.roa
File:                     6_142euMVWeLAwB4KRmBRdt2Tug.roa (raw, json)
Hash identifier:          30hpp59HWXd4xaWfJGizGlfPeJVvnQqzHnHADIYmDeU=
Subject key identifier:   EB:FD:78:D9:EB:8C:55:67:8B:03:00:78:29:19:81:45:DB:76:4E:E8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1125
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6_142euMVWeLAwB4KRmBRdt2Tug.roa
Signing time:             Sun 01 Mar 2026 02:07:36 +0000
ROA not before:           Sun 01 Mar 2026 02:07:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4389 (0x1125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EBFD78D9EB8C55678B03007829198145DB764EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:cf:92:dc:25:8c:a2:c8:88:30:f7:60:29:
                    05:22:af:1e:42:54:ad:0c:f0:1d:e1:e7:50:ef:ce:
                    5e:e7:7e:f4:57:9c:8e:c1:d3:5a:e9:b3:62:22:d3:
                    7b:5c:4b:7e:d8:d3:14:8b:92:2a:7b:64:3e:ac:ef:
                    32:3a:0f:97:d7:16:e1:f9:19:79:71:bf:6c:c6:1b:
                    dc:96:23:5e:34:95:b1:f5:4a:1d:c6:bf:12:1b:eb:
                    28:11:1d:76:ce:ea:82:0c:ad:93:7f:cb:7a:58:63:
                    16:37:d1:d0:7c:4c:8f:72:54:a1:84:0e:04:86:2c:
                    3f:ba:ae:cd:72:5e:f4:41:26:91:da:4a:58:ca:cd:
                    9c:c4:dd:e7:1e:78:ad:e1:33:ff:a0:41:28:3d:86:
                    de:1c:d9:ee:9b:ef:76:b8:2b:70:84:37:d8:e3:fa:
                    ba:d3:7d:4a:fe:87:23:40:70:08:52:5b:a0:4d:61:
                    92:21:ec:bf:94:7a:fd:41:0c:87:7b:f2:1b:6e:ee:
                    4c:10:73:f7:4a:c7:8b:15:4f:ca:7a:61:99:1b:3f:
                    1a:7d:d3:3e:33:47:11:36:59:2c:94:ce:e1:fd:17:
                    af:ff:3b:c4:b0:8e:48:d2:28:92:5b:43:a4:c9:5b:
                    87:fb:1f:ae:cd:31:33:38:06:f5:c4:99:16:bf:07:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:78:D9:EB:8C:55:67:8B:03:00:78:29:19:81:45:DB:76:4E:E8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6_142euMVWeLAwB4KRmBRdt2Tug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:4e:f3:fe:f3:42:41:17:56:72:3b:56:d6:b3:b9:a3:ad:5f:
         a3:a6:61:84:1c:43:e9:c2:b6:fe:ff:ae:f1:70:98:c6:45:09:
         ca:ea:18:06:5c:c3:89:70:91:00:a8:cc:a2:c1:c0:55:0e:83:
         8f:49:2a:61:f4:4c:9a:2c:c7:9a:90:21:6a:09:7f:8d:da:61:
         e2:0d:46:73:9e:d2:17:14:d7:24:02:78:0c:80:35:d6:75:f5:
         d4:ee:ea:eb:af:a4:a9:7e:ac:00:9a:fe:6a:b1:f6:7f:3d:5f:
         98:03:42:55:5f:b5:a3:e7:f9:dc:7e:21:2a:54:bf:29:ff:ab:
         5d:71:a9:0b:b0:8f:21:04:4c:bd:18:88:11:c6:49:69:ae:7d:
         5a:c8:86:85:aa:d8:29:12:0d:7e:fe:74:63:de:3b:45:61:5b:
         0f:68:90:4c:3b:7d:14:95:5e:86:45:b7:36:79:67:f6:5c:b6:
         9a:34:47:96:69:47:77:a5:4f:f0:06:de:b8:7f:6c:af:0a:a5:
         99:6a:6c:20:9e:36:1d:ab:96:c0:7b:7e:82:7e:d2:17:ac:cb:
         f6:db:0e:47:3e:8b:22:4c:f6:63:97:29:ce:17:19:2d:c9:b7:
         19:17:19:a9:8b:96:2e:28:86:80:03:3a:04:34:aa:72:c4:d4:
         78:97:4c:b9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICESUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjA3MzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCRkQ3OEQ5RUI4QzU1
Njc4QjAzMDA3ODI5MTk4MTQ1REI3NjRFRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4ss+S3CWMosiIMPdgKQUirx5CVK0M8B3h51Dvzl7nfvRXnI7B
01rps2Ii03tcS37Y0xSLkip7ZD6s7zI6D5fXFuH5GXlxv2zGG9yWI140lbH1Sh3G
vxIb6ygRHXbO6oIMrZN/y3pYYxY30dB8TI9yVKGEDgSGLD+6rs1yXvRBJpHaSljK
zZzE3eceeK3hM/+gQSg9ht4c2e6b73a4K3CEN9jj+rrTfUr+hyNAcAhSW6BNYZIh
7L+Uev1BDId78htu7kwQc/dKx4sVT8p6YZkbPxp90z4zRxE2WSyUzuH9F6//O8Sw
jkjSKJJbQ6TJW4f7H67NMTM4BvXEmRa/B/r9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6/142euMVWeLAwB4KRmBRdt2TugwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzZfMTQyZXVNVldlTEF3QjRLUm1CUmR0MlR1Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SsAwDQYJKoZIhvcNAQELBQADggEBALNO8/7zQkEXVnI7VtazuaOtX6Om
YYQcQ+nCtv7/rvFwmMZFCcrqGAZcw4lwkQCozKLBwFUOg49JKmH0TJosx5qQIWoJ
f43aYeINRnOe0hcU1yQCeAyANdZ19dTu6uuvpKl+rACa/mqx9n89X5gDQlVftaPn
+dx+ISpUvyn/q11xqQuwjyEETL0YiBHGSWmufVrIhoWq2CkSDX7+dGPeO0VhWw9o
kEw7fRSVXoZFtzZ5Z/Zctpo0R5ZpR3elT/AG3rh/bK8KpZlqbCCeNh2rlsB7foJ+
0hesy/bbDkc+iyJM9mOXKc4XGS3JtxkXGamLli4ohoADOgQ0qnLE1HiXTLk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:29 2026 by rpki-client