Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BIA0-y7l6dOzDOK0uc_Xkrl3G6g.roa
File:                     BIA0-y7l6dOzDOK0uc_Xkrl3G6g.roa (raw, json)
Hash identifier:          Drb0GbqHYfF72pfmknPNkj/Ah2zTSF3Gt3f1szce4TM=
Subject key identifier:   04:80:34:FB:2E:E5:E9:D3:B3:0C:E2:B4:B9:CF:D7:92:B9:77:1B:A8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1243
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BIA0-y7l6dOzDOK0uc_Xkrl3G6g.roa
Signing time:             Sun 01 Mar 2026 02:56:33 +0000
ROA not before:           Sun 01 Mar 2026 02:56:33 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4675 (0x1243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:33 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=048034FB2EE5E9D3B30CE2B4B9CFD792B9771BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:fc:07:3b:e6:d9:06:ea:3c:bf:0b:9a:7b:
                    40:af:ec:68:bf:dd:29:be:89:46:ee:67:ec:d2:b9:
                    d8:fb:c4:20:fd:9a:34:16:5f:0d:ab:66:e9:ff:08:
                    0c:3d:38:e5:7d:f0:7d:35:b3:a3:75:f9:a7:30:c2:
                    bf:0f:fd:a3:b6:b3:88:76:d4:10:18:cb:a0:47:fd:
                    88:eb:5b:74:a0:73:88:ea:4f:a2:de:bc:8d:3a:09:
                    a9:f7:0b:8c:56:d5:09:cb:29:f7:23:72:1c:fb:b1:
                    e3:2d:f5:4d:de:28:76:2f:7d:d6:72:b4:6b:40:e2:
                    e0:63:4b:a0:a3:1b:23:be:7d:79:8d:88:c5:5e:66:
                    d3:d1:e7:82:23:ed:c2:09:52:6e:3b:d3:7f:57:66:
                    4c:bd:c8:26:1e:83:fb:44:7a:00:d2:0a:68:67:54:
                    f4:8c:ec:c6:68:10:fe:12:7a:d1:13:0d:a7:bd:23:
                    4d:07:a9:56:7a:d0:ee:ba:f5:94:87:0d:16:ef:96:
                    6e:5c:0c:ca:8c:b4:f4:3e:fe:92:a8:1e:f2:f2:b4:
                    c2:96:84:b8:e2:37:c3:81:d4:2b:02:54:dc:e8:fd:
                    f8:b7:65:80:36:8d:94:4a:e9:99:04:70:5d:d1:1f:
                    65:26:15:04:e9:ef:e9:7e:e6:e3:30:91:79:05:87:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:34:FB:2E:E5:E9:D3:B3:0C:E2:B4:B9:CF:D7:92:B9:77:1B:A8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BIA0-y7l6dOzDOK0uc_Xkrl3G6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:68:00:f8:df:fc:56:f0:ef:0a:db:d8:38:76:cf:b4:90:dd:
         28:76:12:0b:d0:cb:3f:48:d9:06:fe:24:0f:cb:10:ba:b5:f7:
         ca:35:57:76:9d:b4:d3:df:37:b2:6a:24:16:48:76:ec:45:39:
         28:25:52:a0:f4:b4:04:c4:e8:e9:46:e9:b0:6e:36:28:2c:d9:
         0c:97:dc:99:66:47:aa:27:29:96:37:c0:6b:e6:93:85:dd:45:
         eb:d8:f0:ca:dd:98:29:6f:86:13:24:11:05:42:d0:dd:fe:65:
         78:58:78:88:08:ea:25:01:62:6c:3f:db:50:f5:b3:c7:31:2c:
         7e:17:a9:2a:69:63:a7:01:ec:58:bd:9e:43:09:64:b6:23:e0:
         82:fb:82:3e:f7:50:a3:87:68:f9:42:d9:90:ed:67:e7:1b:76:
         f2:cb:db:86:86:3c:9e:46:17:d3:67:a3:dc:15:a5:9e:db:23:
         f9:04:be:08:2d:10:d7:cc:37:cb:85:77:99:bc:0d:d2:93:87:
         f1:15:2a:cc:8c:56:4b:09:be:1b:34:c5:4f:29:72:8e:2f:c8:
         db:27:21:9e:fa:89:71:b9:e5:77:25:ac:44:fe:fb:2d:ce:b5:
         9b:c3:66:00:a5:e9:c6:75:19:e0:ec:52:c0:91:2b:22:ef:6e:
         5f:9c:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:00 2026 by rpki-client