Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
File:                     QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa (raw, json)
Hash identifier:          NDlbk3T7hF1amS26kufchT5sJk8cWRICdvqxSUlpSd8=
Subject key identifier:   41:24:0C:6F:DA:BE:00:C1:43:9D:EC:37:67:54:B5:7C:9A:63:EE:23
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       120E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
Signing time:             Sun 01 Mar 2026 02:48:38 +0000
ROA not before:           Sun 01 Mar 2026 02:48:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4622 (0x120e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=41240C6FDABE00C1439DEC376754B57C9A63EE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:68:e0:d5:91:6e:ec:c3:e6:3e:15:50:41:
                    2e:cd:c7:f2:0b:6f:0a:2d:8f:88:90:6a:6d:51:ec:
                    19:9e:3c:f4:99:c2:1e:32:b4:89:26:70:ca:3e:9b:
                    81:8f:1a:78:28:fd:2c:c0:c0:cb:af:a9:3d:72:a0:
                    0a:06:0d:7b:f0:48:e0:1e:08:b7:ce:58:26:db:44:
                    0d:50:8c:8f:3f:ee:e3:0d:39:5c:f9:55:9c:70:a7:
                    af:7f:29:19:15:1b:c9:2e:0b:d0:ff:d5:9a:ab:cf:
                    dc:aa:65:d1:bf:b9:87:0a:fd:94:76:58:13:d3:9f:
                    d7:d3:19:57:61:ce:6f:e4:2e:a3:5b:14:f9:d0:be:
                    b7:c0:5b:2e:30:81:23:45:a2:d7:02:82:17:49:c2:
                    d7:ee:56:9b:00:6c:f9:fc:19:56:46:c0:d0:70:52:
                    dd:d0:86:58:4e:d5:57:ea:10:2d:55:ea:bc:62:d3:
                    40:0b:9a:4e:d6:46:7b:10:38:ed:c6:43:04:7b:a7:
                    a9:50:53:4d:e7:46:7e:69:84:3a:eb:5d:b1:76:5e:
                    cb:64:51:9f:01:a0:01:b0:28:3c:d4:a8:78:fa:51:
                    78:f2:83:af:b8:e6:45:8a:e3:dc:0a:6e:c0:99:b1:
                    a6:81:96:1e:22:d0:2c:f4:01:54:d8:c6:f8:44:fd:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:24:0C:6F:DA:BE:00:C1:43:9D:EC:37:67:54:B5:7C:9A:63:EE:23
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QSQMb9q-AMFDnew3Z1S1fJpj7iM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:35:1b:f3:63:d8:a4:95:a1:df:50:c1:a1:62:d1:38:5f:
         43:b9:56:44:20:55:fa:41:fc:b6:af:6a:b9:e4:30:56:96:5c:
         08:96:6f:1e:c3:cf:84:cd:19:57:45:9d:8e:2b:2a:fa:10:02:
         cc:76:5f:3a:2e:ec:24:e6:37:20:7d:14:e5:c6:d3:5a:ed:fa:
         cb:7b:f2:de:63:11:ab:81:6c:fe:7e:80:24:e5:57:61:24:3f:
         ff:c9:58:9a:1f:77:75:d2:af:ce:b6:15:51:aa:4d:cb:d7:46:
         1a:fa:47:8f:7f:49:95:d0:f2:2e:78:4c:19:b2:13:10:76:b3:
         da:33:bd:8f:e3:34:73:4c:5f:f2:20:b9:2d:60:a8:87:5c:d5:
         f6:21:63:fd:b4:72:4b:b7:9c:41:8e:0f:e3:2c:17:8e:20:4a:
         c3:c8:7e:de:86:6c:f7:4b:28:9d:29:72:1f:82:26:3f:43:24:
         d7:3d:07:23:6e:70:17:d9:cc:7c:51:10:76:69:f8:8b:1f:43:
         ce:3a:aa:33:7e:30:83:76:cd:b7:2b:68:20:22:0d:19:95:ad:
         71:4b:58:30:7c:4d:99:0e:7c:f8:7b:c6:e3:f2:91:00:7f:20:
         8d:20:cc:f1:38:0e:c5:a2:59:18:b1:c3:4c:fa:11:e8:71:a7:
         a0:02:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:54 2026 by rpki-client