Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OX3K5WyJIvTWhufrezFfKeh0m9w.roa
File:                     OX3K5WyJIvTWhufrezFfKeh0m9w.roa (raw, json)
Hash identifier:          EhwKTl7Hr5uD59uJ2L/hMl5hGXS2nwtipnAsAr1bqGs=
Subject key identifier:   39:7D:CA:E5:6C:89:22:F4:D6:86:E7:EB:7B:31:5F:29:E8:74:9B:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1254
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OX3K5WyJIvTWhufrezFfKeh0m9w.roa
Signing time:             Sun 01 Mar 2026 03:00:21 +0000
ROA not before:           Sun 01 Mar 2026 03:00:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4692 (0x1254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:00:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=397DCAE56C8922F4D686E7EB7B315F29E8749BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:02:d9:66:89:2d:99:da:72:7d:6b:64:74:
                    d3:b6:63:f9:30:70:4f:08:90:be:8d:cc:50:69:db:
                    e2:19:ec:11:29:a6:b3:d1:49:09:5b:60:a4:47:81:
                    ae:ad:5a:16:86:8f:d2:be:f4:69:fc:e9:43:e9:e5:
                    f9:b7:be:55:8c:52:37:00:80:cd:5c:5d:7b:a7:2d:
                    01:15:e9:d5:69:21:52:ba:a8:28:d2:3d:e4:26:3d:
                    72:77:97:43:37:2e:94:b8:0d:f1:93:97:0e:f7:45:
                    da:31:98:50:fd:64:4f:38:30:02:53:8b:a5:91:d3:
                    18:c1:40:14:94:d3:17:11:14:1b:bb:08:f6:21:1a:
                    eb:c3:fe:79:d4:b5:95:33:c7:8f:10:8c:27:65:84:
                    b2:88:46:2f:48:ac:3f:28:13:e8:86:a4:10:7e:ca:
                    68:84:af:e8:30:3a:eb:f9:d8:db:74:48:77:80:c9:
                    25:e2:b1:bb:3d:81:50:03:82:4d:06:18:2f:04:73:
                    c1:37:fe:59:47:a2:50:38:27:ec:a5:ce:e2:4b:46:
                    3a:72:71:61:94:da:72:9b:8c:7b:93:bb:de:85:9e:
                    e8:e4:1e:00:f0:34:48:dd:76:20:b8:ce:d5:c9:be:
                    dd:2e:03:d5:23:68:d6:4a:d1:97:f7:6d:22:5c:56:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:CA:E5:6C:89:22:F4:D6:86:E7:EB:7B:31:5F:29:E8:74:9B:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OX3K5WyJIvTWhufrezFfKeh0m9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:47:d8:ae:77:a0:72:ba:b1:5b:62:7f:bb:8e:ef:89:42:4b:
         07:a2:5b:cc:48:c2:0b:0c:5b:db:ca:e4:07:12:30:d8:fa:9e:
         e1:b2:23:66:6e:ce:23:f2:de:b7:34:5b:a0:8e:e3:75:bd:57:
         1d:b4:30:79:e7:fb:ee:4e:7f:ba:5b:2b:a6:89:d6:fd:ea:23:
         87:dd:81:65:54:5e:d6:c3:75:b9:67:70:3a:7c:fe:fb:eb:40:
         aa:35:31:f7:ee:45:d3:05:2a:1a:2f:93:65:62:5a:0b:29:a0:
         d5:6c:4e:0a:53:86:0d:49:80:63:dc:c3:53:0c:a4:03:43:f4:
         7c:37:18:2f:67:9f:21:aa:ac:2c:31:cf:59:15:9c:3b:50:75:
         24:4b:f7:7f:2b:d1:b2:9e:11:84:87:a6:76:a8:2b:8e:78:c5:
         fb:45:fc:03:3c:97:38:a4:a9:77:91:be:30:c5:94:a2:94:b5:
         c0:77:a8:92:47:85:c2:a7:4d:f5:00:3c:d1:2a:56:e7:6a:21:
         31:4c:b8:1e:8d:47:9b:fd:8d:11:0a:8b:c3:12:f5:5b:72:97:
         4f:ae:59:b6:fe:aa:de:ea:68:fd:21:91:5e:42:e5:24:b4:c3:
         23:f2:ff:41:51:ba:49:17:85:e8:8b:7f:ba:79:28:02:8c:92:
         83:2c:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:45 2026 by rpki-client