Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
File:                     UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa (raw, json)
Hash identifier:          LvYVpE75/SLwX1/ur8R0fNxzBuQnSZxSd+lTyMpyFcU=
Subject key identifier:   51:09:1B:2A:10:AC:A0:55:19:5C:D3:D9:F9:ED:C0:EF:0D:D4:89:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1311
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
Signing time:             Sun 01 Mar 2026 03:32:30 +0000
ROA not before:           Sun 01 Mar 2026 03:32:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4881 (0x1311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=51091B2A10ACA055195CD3D9F9EDC0EF0DD4896C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:86:33:5b:dd:16:32:7b:03:69:48:ae:a7:
                    ff:d1:f2:2e:cf:eb:14:60:bd:07:b6:da:93:97:fd:
                    1d:e9:f5:e6:5c:9b:d8:49:e4:d4:53:7b:c8:d7:91:
                    29:75:52:fd:97:31:11:e2:3e:97:68:ab:98:c7:fc:
                    0f:13:6f:07:45:e2:0c:57:0c:45:86:49:bc:cc:cb:
                    57:fd:b4:c2:c6:3e:25:d6:6c:c1:7e:b6:85:73:b6:
                    68:b8:f3:1a:b0:9e:c2:2f:04:82:9f:c3:2d:03:e1:
                    56:53:3e:9a:65:32:4f:86:db:79:a7:5c:b0:49:f0:
                    79:0e:3a:10:4f:85:05:a4:a0:e3:a2:81:00:63:12:
                    74:e2:fa:93:23:46:52:bc:98:af:f8:c4:0e:ee:4f:
                    87:a3:9f:95:da:e5:6c:48:85:05:c6:25:69:c0:d2:
                    9e:7f:21:44:8a:53:f2:c0:a0:3e:ff:65:2c:bc:f4:
                    88:cc:f0:7e:ab:3f:a2:05:93:ea:23:03:b7:19:5a:
                    97:d2:e1:5f:47:eb:7b:f7:80:30:24:5a:6b:1f:d0:
                    a7:76:c0:84:a2:70:93:65:e9:54:4d:e0:a2:02:e9:
                    f3:19:22:3d:46:ed:91:7a:ff:94:8a:42:6a:2a:cd:
                    28:7d:61:15:fd:ac:8b:c5:a3:3f:3b:7a:3b:e0:0c:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:1B:2A:10:AC:A0:55:19:5C:D3:D9:F9:ED:C0:EF:0D:D4:89:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UQkbKhCsoFUZXNPZ-e3A7w3UiWw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:16:b0:c0:52:40:b0:03:cd:e2:a0:3d:f1:4e:0b:01:18:
         fa:61:4e:8e:c8:56:71:c6:28:93:31:17:58:ff:89:2a:5b:73:
         77:1a:f3:d0:98:7e:90:29:6b:f5:4c:36:08:07:a3:93:e7:93:
         29:be:21:a8:a2:a4:fa:72:50:e0:83:8d:39:99:19:fb:f9:99:
         fc:09:41:73:c1:75:5d:1c:32:e3:30:75:1d:62:2e:1b:dd:19:
         6a:4d:94:5f:79:17:3b:8b:10:81:79:fa:10:34:5c:0b:e3:52:
         59:00:1e:63:44:09:ba:0a:e1:cb:9e:10:e2:75:1c:aa:ae:60:
         a8:9b:8e:50:76:bc:3d:2f:05:42:69:b4:cb:44:7c:ae:97:ce:
         8a:e2:e4:20:a3:5b:e7:d0:e5:84:28:95:4c:c8:83:94:04:57:
         00:74:4c:f7:48:00:a2:89:7c:24:45:eb:5b:77:8a:d1:aa:04:
         15:bf:4f:b1:07:f1:8e:e7:3e:b4:82:67:c4:14:6e:41:e1:40:
         ee:6b:46:37:e3:18:19:90:98:1b:6d:93:64:2b:4e:9b:03:d8:
         a5:51:4c:36:eb:d7:26:27:fa:b2:64:ed:83:d7:12:6a:48:16:
         61:1f:27:d7:7e:68:37:7a:36:0f:6b:e7:57:7c:5b:4e:2b:62:
         12:fb:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:50 2026 by rpki-client