Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IqOze81U1WpXpTdbGIiZyf9BXXc.roa
File:                     IqOze81U1WpXpTdbGIiZyf9BXXc.roa (raw, json)
Hash identifier:          /aNHWvfL3ggWxHzdPn6ZaBdlTX/B9gIk8NNmfWczYfE=
Subject key identifier:   22:A3:B3:7B:CD:54:D5:6A:57:A5:37:5B:18:88:99:C9:FF:41:5D:77
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       129C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IqOze81U1WpXpTdbGIiZyf9BXXc.roa
Signing time:             Sun 01 Mar 2026 03:08:46 +0000
ROA not before:           Sun 01 Mar 2026 03:08:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4764 (0x129c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=22A3B37BCD54D56A57A5375B188899C9FF415D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:ae:2e:b0:c3:eb:ac:12:67:86:55:c9:7c:
                    cf:3f:2c:d4:3e:aa:c1:11:f4:80:75:16:30:b3:48:
                    df:16:f9:76:2e:db:a3:87:2c:9a:ec:98:6c:8a:3d:
                    cc:33:db:c4:c7:a1:35:cb:d2:ca:99:11:ab:7f:52:
                    b8:61:33:c5:2c:d9:17:20:5a:1f:81:55:2a:d7:fc:
                    e8:fc:31:21:b6:2b:79:5c:53:c3:da:ca:83:37:24:
                    0b:91:b2:2d:7b:9e:ad:2a:4f:40:d6:6b:a7:ef:35:
                    82:ad:4a:ca:14:8d:9b:4e:34:28:ca:58:06:68:ba:
                    28:59:6e:1f:18:be:f1:8a:42:07:cf:4c:13:b2:61:
                    e1:45:62:f4:8d:d8:b3:fd:0f:e8:7d:ab:ac:a5:79:
                    d5:1b:57:d1:5f:e0:15:c1:d7:f6:1b:bc:d8:ad:6f:
                    9f:7d:04:47:a6:6d:97:21:96:23:a6:d3:39:b5:89:
                    b9:89:e4:51:d0:44:1b:d8:5d:fc:35:7b:8a:82:e5:
                    b8:b0:84:00:8a:c4:b1:30:38:29:36:65:bc:05:82:
                    ed:74:a7:56:48:93:13:c7:d5:5c:f6:ae:90:e3:ce:
                    c7:76:a6:66:dc:b3:13:95:b4:52:91:7d:97:5c:22:
                    da:35:36:40:a2:93:da:a1:bb:a6:4b:62:97:99:94:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A3:B3:7B:CD:54:D5:6A:57:A5:37:5B:18:88:99:C9:FF:41:5D:77
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IqOze81U1WpXpTdbGIiZyf9BXXc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:e3:d2:cb:6d:60:d0:39:a7:6a:92:22:88:e9:e1:55:f5:
         f7:a3:05:92:b6:31:b3:cb:59:4e:43:3c:f6:f2:5f:41:41:bd:
         73:66:8a:94:b4:d6:0c:4e:df:37:4e:6c:ca:42:9b:a7:f2:99:
         2f:cb:f3:94:3c:a8:55:0d:37:36:d4:f1:d0:69:c0:25:f0:47:
         ab:b5:81:ab:60:ae:ac:d9:76:75:5a:70:b9:51:03:75:8b:cb:
         4e:bc:24:a0:20:fe:e1:4b:1c:88:cf:8e:75:2d:20:12:59:c0:
         7a:46:d9:56:0c:0f:48:b6:b1:cf:8d:62:fb:2f:be:1c:b8:b2:
         18:12:fa:db:0d:97:c6:85:c8:aa:3e:13:f6:05:e5:f3:6d:c7:
         84:0e:a9:fa:b4:b9:df:54:27:61:6e:b1:96:1f:7f:78:29:83:
         89:70:c9:17:8a:30:b2:05:26:f5:6f:2c:08:fd:72:d3:5e:05:
         81:6f:92:2e:a1:52:5b:72:70:f3:09:f2:91:0e:9b:02:bd:27:
         29:df:74:f6:21:95:30:4d:91:de:9b:a3:06:66:41:3c:92:bc:
         86:2e:2b:99:a1:e9:4c:81:3a:83:15:5f:d5:45:29:8b:bc:23:
         d7:24:ca:e9:76:0a:7e:56:3a:62:ca:ab:d6:60:55:1b:32:57:
         ff:8b:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:27 2026 by rpki-client