Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PCarn8DAtpJaVuRPaLonrRakxj0.roa
File:                     PCarn8DAtpJaVuRPaLonrRakxj0.roa (raw, json)
Hash identifier:          Ho8zcsTz/7c+dBLJhW/8fd0CCGZNUaRc8shX4538fvw=
Subject key identifier:   3C:26:AB:9F:C0:C0:B6:92:5A:56:E4:4F:68:BA:27:AD:16:A4:C6:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PCarn8DAtpJaVuRPaLonrRakxj0.roa
Signing time:             Sun 01 Mar 2026 03:16:32 +0000
ROA not before:           Sun 01 Mar 2026 03:16:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4822 (0x12d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:16:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3C26AB9FC0C0B6925A56E44F68BA27AD16A4C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:f0:bb:68:31:37:fd:0c:97:aa:cb:44:a3:
                    ce:65:17:9d:f7:be:9e:94:a4:80:50:c5:6e:9b:d2:
                    3b:05:8b:2c:20:d8:e6:0a:9b:48:51:c8:3e:9d:46:
                    0e:44:86:72:ff:8d:9c:b3:98:1d:b9:a8:fb:8e:af:
                    13:a6:b9:05:6d:b5:b7:a4:0c:87:ec:3d:33:b4:04:
                    07:a4:3a:76:85:3a:18:f0:83:78:21:83:b6:93:0a:
                    55:07:2f:e5:1d:24:08:6f:f7:4d:17:e8:f5:41:8d:
                    37:1c:3b:6f:69:d4:f0:68:b3:6d:43:b3:4a:9b:3a:
                    61:37:0e:ca:37:2f:42:2e:59:d4:51:46:22:01:45:
                    2a:e5:8d:c0:24:36:d8:88:94:4a:3d:b7:0a:40:bc:
                    97:62:68:24:00:5d:5a:94:49:25:a8:a3:71:58:5f:
                    a3:b4:60:02:16:a6:39:4b:44:97:4c:ce:ef:49:66:
                    ee:f3:3f:70:a3:d5:c1:f4:d1:29:63:d9:87:2f:8b:
                    b2:af:e4:a9:6a:1c:3d:d0:77:52:c9:0b:f2:be:05:
                    e8:28:15:77:ec:73:84:3a:0e:e1:18:6f:2b:9a:cd:
                    05:ac:43:24:5a:14:27:48:76:ab:97:f0:c7:24:98:
                    dd:65:43:fd:74:f3:83:5d:a5:99:c0:70:f1:31:09:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:AB:9F:C0:C0:B6:92:5A:56:E4:4F:68:BA:27:AD:16:A4:C6:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PCarn8DAtpJaVuRPaLonrRakxj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:d7:f3:3d:b6:ff:28:03:9a:eb:13:c3:89:8f:95:eb:2a:8b:
         99:57:c2:bc:ec:b0:93:41:d0:25:20:aa:87:f0:8b:d9:bd:6d:
         c0:5d:08:d3:0d:64:03:d3:54:78:5c:30:2d:bf:d3:64:3e:2c:
         dd:44:f9:9e:cc:4b:bd:50:0e:e2:b2:f7:de:2b:06:89:9c:63:
         c8:96:c7:d5:9f:42:64:51:fa:43:4c:12:de:1f:1f:5a:3b:85:
         37:69:f6:31:42:99:15:87:c1:8a:5e:86:7d:c4:cb:7d:6b:91:
         19:4c:99:4f:a4:6e:d5:77:6a:d2:d8:17:20:78:30:ec:8c:57:
         7f:84:73:7e:9d:2b:c2:02:02:cf:37:13:9c:18:30:e9:7e:cd:
         d1:4f:91:e7:9e:04:fd:51:0e:4b:51:e2:dc:87:d2:bf:73:2c:
         a5:3e:84:04:15:81:f5:ec:16:e5:b1:3a:69:ae:09:68:36:32:
         db:46:96:b3:d3:73:f5:9a:3e:c3:07:60:55:df:19:50:01:19:
         79:10:47:0e:17:ee:3a:d7:fd:97:32:03:38:41:ca:6e:89:e6:
         6d:8a:23:44:56:a4:a6:b4:20:b3:01:69:06:77:82:35:bd:36:
         8c:a2:be:97:12:8e:65:6a:85:2b:e5:b4:1e:e1:13:90:18:6d:
         db:f8:3c:c5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzE2MzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDMjZBQjlGQzBDMEI2
OTI1QTU2RTQ0RjY4QkEyN0FEMTZBNEM2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVUvC7aDE3/QyXqstEo85lF533vp6UpIBQxW6b0jsFiywg2OYK
m0hRyD6dRg5EhnL/jZyzmB25qPuOrxOmuQVttbekDIfsPTO0BAekOnaFOhjwg3gh
g7aTClUHL+UdJAhv900X6PVBjTccO29p1PBos21Ds0qbOmE3Dso3L0IuWdRRRiIB
RSrljcAkNtiIlEo9twpAvJdiaCQAXVqUSSWoo3FYX6O0YAIWpjlLRJdMzu9JZu7z
P3Cj1cH00Slj2Ycvi7Kv5KlqHD3Qd1LJC/K+BegoFXfsc4Q6DuEYbyuazQWsQyRa
FCdIdquX8MckmN1lQ/1084NdpZnAcPExCaUNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPCarn8DAtpJaVuRPaLonrRakxj0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1BDYXJuOERBdHBKYVZ1UlBhTG9uclJha3hqMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaQ4wDQYJKoZIhvcNAQELBQADggEBALTX8z22/ygDmusTw4mPlesqi5lX
wrzssJNB0CUgqofwi9m9bcBdCNMNZAPTVHhcMC2/02Q+LN1E+Z7MS71QDuKy994r
BomcY8iWx9WfQmRR+kNMEt4fH1o7hTdp9jFCmRWHwYpehn3Ey31rkRlMmU+kbtV3
atLYFyB4MOyMV3+Ec36dK8ICAs83E5wYMOl+zdFPkeeeBP1RDktR4tyH0r9zLKU+
hAQVgfXsFuWxOmmuCWg2MttGlrPTc/WaPsMHYFXfGVABGXkQRw4X7jrX/ZcyAzhB
ym6J5m2KI0RWpKa0ILMBaQZ3gjW9NoyivpcSjmVqhSvltB7hE5AYbdv4PMU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:06 2026 by rpki-client