Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IFpSEqrd4svMU3yXugJ4srvIK14.roa
File:                     IFpSEqrd4svMU3yXugJ4srvIK14.roa (raw, json)
Hash identifier:          E+4WQzmaVdaCbt1RN7sdwa8i925gt4O+HHx2jTJfcH0=
Subject key identifier:   20:5A:52:12:AA:DD:E2:CB:CC:53:7C:97:BA:02:78:B2:BB:C8:2B:5E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IFpSEqrd4svMU3yXugJ4srvIK14.roa
Signing time:             Sun 01 Mar 2026 02:02:54 +0000
ROA not before:           Sun 01 Mar 2026 02:02:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4351 (0x10ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=205A5212AADDE2CBCC537C97BA0278B2BBC82B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:e4:ca:b8:63:c1:4c:cc:e5:80:21:52:e3:
                    aa:a7:15:57:aa:7d:06:0e:9a:ce:51:ff:49:1d:aa:
                    c7:a1:66:a2:8c:82:25:86:38:66:23:dc:ae:61:3e:
                    5c:a6:c7:a7:09:70:ad:f6:a0:8d:cb:b5:9a:cf:cf:
                    d9:58:3b:33:f0:18:5b:13:9b:2d:9c:4c:d8:0c:69:
                    90:01:76:57:78:24:6b:f7:27:a4:6e:aa:fe:3c:b5:
                    9f:33:50:64:1f:1d:55:ba:19:34:c4:16:b9:cd:de:
                    ed:a4:85:62:19:34:81:52:f6:d6:cc:33:22:e5:c9:
                    e8:0b:bd:18:65:ba:84:95:8a:52:87:e4:f9:86:33:
                    b3:79:f3:45:af:32:b6:44:db:d5:a2:50:d9:3c:a3:
                    c3:26:7f:06:70:0f:99:33:a8:3a:56:b8:bc:c2:86:
                    f8:bb:6d:7a:1f:5e:28:c5:9b:72:57:c3:a8:ec:06:
                    a3:e0:74:21:af:3f:71:de:1c:b7:94:fa:ca:c9:c6:
                    fb:f6:4c:19:75:75:b3:64:91:3b:6c:51:ce:de:3e:
                    9b:6d:82:eb:bf:6e:db:f1:14:a8:85:43:10:6b:0b:
                    ba:bf:c0:93:7b:0b:70:51:00:47:58:89:2f:0e:8d:
                    66:d9:d5:f5:61:76:6d:55:89:c2:0c:cf:7a:3f:81:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:52:12:AA:DD:E2:CB:CC:53:7C:97:BA:02:78:B2:BB:C8:2B:5E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IFpSEqrd4svMU3yXugJ4srvIK14.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:b3:8b:ed:93:f5:60:bd:c6:81:49:0b:10:73:e2:d9:c3:
         c9:33:7a:be:2b:ff:f4:7c:37:72:7a:f0:7b:0e:e9:dd:b0:cf:
         12:ef:38:8e:bf:15:a8:d7:ef:b6:f0:5d:67:98:f2:1c:b8:73:
         56:a4:8e:82:dc:06:dd:5b:f3:75:28:00:57:55:2b:67:ff:db:
         68:a5:48:c1:15:a5:60:ba:d2:95:94:1c:e9:bc:63:89:c7:1c:
         b1:ce:38:64:bc:35:62:06:ad:db:93:15:3e:40:93:91:10:29:
         cd:fe:f2:23:e1:22:b5:04:74:8a:bb:55:49:55:09:76:3f:e8:
         0a:ff:83:63:6a:50:51:92:ab:32:0a:4e:1e:7e:26:0c:d3:41:
         ce:5a:bc:cf:0a:05:1c:f0:0e:a3:2e:10:7b:15:90:6e:04:1d:
         d0:4a:e6:86:ff:06:53:b3:18:99:ff:84:a6:bf:11:0d:95:33:
         b6:59:b7:40:94:90:95:c1:9d:4f:4d:bd:ce:b7:c6:5e:cd:ad:
         37:77:6c:90:9e:85:d6:8d:47:02:f6:6e:fb:66:1d:e2:2c:c0:
         84:09:d4:e9:30:c2:85:d0:73:23:bf:d9:ec:7d:49:a3:6c:f1:
         db:ef:88:57:7d:73:a1:d6:fc:6d:46:4b:58:bc:b3:e6:e7:21:
         00:ab:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:51 2026 by rpki-client