Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCmZWl9ztXovB-BBLSdxRcJwULU.roa
File:                     DCmZWl9ztXovB-BBLSdxRcJwULU.roa (raw, json)
Hash identifier:          ZTWAD2cvLzz01AUNQcJIpDaw4mOOe+Tk7xeQ2QyMMno=
Subject key identifier:   0C:29:99:5A:5F:73:B5:7A:2F:07:E0:41:2D:27:71:45:C2:70:50:B5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       129F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCmZWl9ztXovB-BBLSdxRcJwULU.roa
Signing time:             Sun 01 Mar 2026 03:08:48 +0000
ROA not before:           Sun 01 Mar 2026 03:08:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4767 (0x129f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0C29995A5F73B57A2F07E0412D277145C27050B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:bc:68:22:a1:35:44:59:68:c4:e0:77:bd:
                    16:05:4f:f6:45:32:0b:f7:31:f9:6c:3c:2b:d6:56:
                    cb:db:d3:46:86:c1:a2:df:b1:6e:85:6c:d0:d9:84:
                    e0:77:1c:b6:81:d0:f6:90:f8:fd:35:f6:23:70:f7:
                    ab:f5:4f:c8:7c:c3:99:8a:54:94:ee:48:94:42:a7:
                    e7:cf:04:a4:4a:23:00:e2:9f:2f:79:24:5f:a8:19:
                    7e:31:72:04:b2:d5:bd:6d:c8:6e:aa:48:75:2f:50:
                    f6:f4:85:f2:42:16:e3:0a:d0:fe:02:ad:a9:8d:01:
                    ba:c3:40:c5:8b:a6:f4:12:13:b0:7c:0b:d0:00:20:
                    1f:08:6c:cc:6a:da:3d:3c:ea:75:da:c0:9f:b1:3d:
                    6e:2f:06:a3:40:97:4c:da:36:4f:6c:42:c9:27:9c:
                    90:00:1b:48:38:a3:b4:b4:f9:2a:97:b2:50:a7:e2:
                    72:df:12:86:e0:9b:91:c9:1f:35:4f:89:ed:81:d8:
                    59:11:ec:b5:ef:bf:6c:33:bf:b6:f1:5e:ad:4c:89:
                    ba:3d:9a:0d:83:c1:14:55:91:ac:cf:ca:71:ce:7e:
                    ef:f0:4e:fd:b7:8a:c4:b8:71:b2:11:d1:27:76:6c:
                    80:a0:63:93:9c:6a:82:74:56:23:45:c8:38:a7:23:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:99:5A:5F:73:B5:7A:2F:07:E0:41:2D:27:71:45:C2:70:50:B5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCmZWl9ztXovB-BBLSdxRcJwULU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:96:0b:15:ae:59:c5:58:51:76:d7:37:f6:ba:fd:14:48:fa:
         1f:9b:36:f5:76:2d:a9:a6:24:84:ae:cb:22:12:45:da:10:4e:
         08:bd:04:ec:f1:50:b2:a7:c3:d4:e1:81:8e:ca:18:af:93:52:
         a3:f2:e2:c6:80:3c:10:1e:c8:f8:ca:22:74:83:1a:4d:d3:c1:
         e8:a9:56:89:ea:2e:83:ce:08:15:77:15:64:f1:b9:c9:ba:14:
         4c:c4:1d:49:d3:3f:49:92:c2:b5:22:1b:b1:1f:0f:b7:bd:e3:
         2b:7a:20:51:62:bb:86:6d:2e:17:fa:c2:26:4e:fb:2f:1f:d1:
         96:a5:aa:e8:52:5e:99:ec:c0:98:d3:5e:a0:92:ac:26:e3:19:
         08:1d:03:4e:d0:57:3b:5d:67:f8:6f:a1:a3:01:25:35:82:14:
         04:71:27:38:81:e1:cc:34:f6:bf:28:f0:ae:e3:e1:5c:0f:13:
         5e:60:60:82:ac:fd:96:36:2b:13:72:d7:18:8f:51:91:5f:b1:
         08:00:c3:09:d4:82:4c:cf:f8:63:fd:e6:9f:a3:c5:4a:53:5e:
         c7:65:47:c0:84:e1:6b:e2:dc:4c:19:ee:3e:bf:57:94:22:b6:
         43:4f:aa:0f:59:1e:90:9e:6c:b9:77:ae:c3:c2:ae:87:74:a3:
         41:4c:52:6a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzA4NDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDMjk5OTVBNUY3M0I1
N0EyRjA3RTA0MTJEMjc3MTQ1QzI3MDUwQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNVrxoIqE1RFloxOB3vRYFT/ZFMgv3MflsPCvWVsvb00aGwaLf
sW6FbNDZhOB3HLaB0PaQ+P019iNw96v1T8h8w5mKVJTuSJRCp+fPBKRKIwDiny95
JF+oGX4xcgSy1b1tyG6qSHUvUPb0hfJCFuMK0P4CramNAbrDQMWLpvQSE7B8C9AA
IB8IbMxq2j086nXawJ+xPW4vBqNAl0zaNk9sQsknnJAAG0g4o7S0+SqXslCn4nLf
Eobgm5HJHzVPie2B2FkR7LXvv2wzv7bxXq1Mibo9mg2DwRRVkazPynHOfu/wTv23
isS4cbIR0Sd2bICgY5OcaoJ0ViNFyDinI74dAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDCmZWl9ztXovB+BBLSdxRcJwULUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0RDbVpXbDl6dFhvdkItQkJMU2R4UmNKd1VMVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQxavAwDQYJKoZIhvcNAQELBQADggEBAHSWCxWuWcVYUXbXN/a6/RRI+h+b
NvV2LammJISuyyISRdoQTgi9BOzxULKnw9ThgY7KGK+TUqPy4saAPBAeyPjKInSD
Gk3TweipVonqLoPOCBV3FWTxucm6FEzEHUnTP0mSwrUiG7EfD7e94yt6IFFiu4Zt
Lhf6wiZO+y8f0ZalquhSXpnswJjTXqCSrCbjGQgdA07QVztdZ/hvoaMBJTWCFARx
JziB4cw09r8o8K7j4VwPE15gYIKs/ZY2KxNy1xiPUZFfsQgAwwnUgkzP+GP95p+j
xUpTXsdlR8CE4Wvi3EwZ7j6/V5QitkNPqg9ZHpCebLl3rsPCrod0o0FMUmo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:28 2026 by rpki-client