Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KOX3RbTb4mueGNptlDFrYzx8jQU.roa
File:                     KOX3RbTb4mueGNptlDFrYzx8jQU.roa (raw, json)
Hash identifier:          jtjxKHuBehvKU1DsDe+4dQZp2qQ4ake9/2sHcclwSx0=
Subject key identifier:   28:E5:F7:45:B4:DB:E2:6B:9E:18:DA:6D:94:31:6B:63:3C:7C:8D:05
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       111A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KOX3RbTb4mueGNptlDFrYzx8jQU.roa
Signing time:             Sun 01 Mar 2026 02:07:29 +0000
ROA not before:           Sun 01 Mar 2026 02:07:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4378 (0x111a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=28E5F745B4DBE26B9E18DA6D94316B633C7C8D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:42:f0:d3:60:37:3a:a0:88:2c:a4:76:a8:
                    fc:fe:db:7c:0a:0c:d6:1a:82:e4:b4:f7:6a:26:cb:
                    a4:34:f2:c6:15:d0:ca:a7:21:62:59:99:a6:0e:b8:
                    f7:e2:8b:4b:3a:62:27:ed:86:c4:5c:20:6b:70:0d:
                    b7:59:26:32:84:f0:bf:f2:f5:ff:13:7d:56:ae:52:
                    0d:3f:1c:12:12:b9:91:e5:1d:a8:39:d1:3a:49:58:
                    91:79:f7:e1:f9:e2:d8:fe:a4:18:90:5a:6d:02:a1:
                    3f:42:21:a6:f8:0f:bb:5d:18:38:71:1d:6b:58:37:
                    fc:50:51:9b:ac:2b:7b:8c:67:c8:f0:04:ca:e5:f9:
                    b1:ea:9c:68:c2:4c:4a:86:48:62:91:e0:6b:e1:b7:
                    78:0a:a9:05:c2:11:63:6b:d3:8a:f6:f7:e8:56:db:
                    81:8c:f4:8c:8e:53:ed:e4:39:72:8d:99:c3:20:35:
                    54:ba:3f:d5:02:2b:5f:7f:5d:8e:92:75:90:20:ba:
                    62:a1:0a:2f:02:1a:98:40:48:d7:65:47:c0:40:57:
                    89:50:cb:5c:a1:29:bf:f2:9b:a8:d3:52:7f:a8:b6:
                    8f:8b:12:3f:37:e4:39:14:ec:79:13:46:13:b3:74:
                    01:13:49:60:9c:05:cf:35:be:28:08:a1:6f:ed:e7:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:F7:45:B4:DB:E2:6B:9E:18:DA:6D:94:31:6B:63:3C:7C:8D:05
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KOX3RbTb4mueGNptlDFrYzx8jQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:b5:96:98:0e:6f:34:b1:71:f7:4a:07:46:90:51:23:03:7c:
         c4:d2:77:3e:4e:f8:22:75:92:31:62:54:dc:25:bf:eb:64:8a:
         01:4f:06:b2:21:12:6f:c8:fe:a9:de:9a:0a:2e:31:73:0c:7c:
         5b:f8:d5:78:32:56:03:c7:67:b0:f8:6e:44:8a:e9:9a:9c:5a:
         fe:8b:99:7e:3c:8a:ec:46:69:1d:f5:fc:c5:8e:25:94:a8:07:
         4e:95:45:cc:6d:dc:e1:b2:c1:10:b5:fa:17:fa:f4:c7:7f:e4:
         36:19:d5:bb:11:2a:39:7c:d1:b5:fa:88:47:4b:94:aa:d0:9d:
         ae:b3:f4:1b:5b:2a:57:dc:be:e7:e3:a1:2e:cd:3a:3c:71:f3:
         51:a2:9e:8f:d8:9c:4c:67:8a:5a:02:dc:ff:51:5e:c8:f6:30:
         4d:25:c7:65:8b:36:4d:6a:ac:0c:3a:28:c0:bb:c5:e9:60:6c:
         07:6d:f2:7b:37:69:2c:75:5e:fe:2b:e6:2f:29:bf:b3:c9:99:
         82:43:97:3c:e5:62:f5:79:2b:0f:53:ad:ff:d5:9e:81:68:eb:
         0c:a7:87:e7:4c:b7:99:2e:e0:bc:7c:6a:b2:d3:52:72:4a:3e:
         2a:e2:88:34:fd:d6:04:50:e7:ca:71:3b:a0:15:a8:73:53:41:
         a4:2c:04:73
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICERowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjA3MjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4RTVGNzQ1QjREQkUy
NkI5RTE4REE2RDk0MzE2QjYzM0M3QzhEMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3+ELw02A3OqCILKR2qPz+23wKDNYaguS092omy6Q08sYV0Mqn
IWJZmaYOuPfii0s6YifthsRcIGtwDbdZJjKE8L/y9f8TfVauUg0/HBISuZHlHag5
0TpJWJF59+H54tj+pBiQWm0CoT9CIab4D7tdGDhxHWtYN/xQUZusK3uMZ8jwBMrl
+bHqnGjCTEqGSGKR4Gvht3gKqQXCEWNr04r29+hW24GM9IyOU+3kOXKNmcMgNVS6
P9UCK19/XY6SdZAgumKhCi8CGphASNdlR8BAV4lQy1yhKb/ym6jTUn+oto+LEj83
5DkU7HkTRhOzdAETSWCcBc81vigIoW/t56QZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKOX3RbTb4mueGNptlDFrYzx8jQUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0tPWDNSYlRiNG11ZUdOcHRsREZyWXp4OGpRVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBSfQwDQYJKoZIhvcNAQELBQADggEBAOK1lpgObzSxcfdKB0aQUSMDfMTS
dz5O+CJ1kjFiVNwlv+tkigFPBrIhEm/I/qnemgouMXMMfFv41XgyVgPHZ7D4bkSK
6ZqcWv6LmX48iuxGaR31/MWOJZSoB06VRcxt3OGywRC1+hf69Md/5DYZ1bsRKjl8
0bX6iEdLlKrQna6z9BtbKlfcvufjoS7NOjxx81Gino/YnExniloC3P9RXsj2ME0l
x2WLNk1qrAw6KMC7xelgbAdt8ns3aSx1Xv4r5i8pv7PJmYJDlzzlYvV5Kw9Trf/V
noFo6wynh+dMt5ku4Lx8arLTUnJKPiriiDT91gRQ58pxO6AVqHNTQaQsBHM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:29 2026 by rpki-client