Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b4Jc7de3zwFWY-cmUko7lH5-i2E.roa
File:                     b4Jc7de3zwFWY-cmUko7lH5-i2E.roa (raw, json)
Hash identifier:          Qcacs68MhCmtwh46Bx0WKpKLCIEZ+1EJXNIiVaH2dnk=
Subject key identifier:   6F:82:5C:ED:D7:B7:CF:01:56:63:E7:26:52:4A:3B:94:7E:7E:8B:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11A5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b4Jc7de3zwFWY-cmUko7lH5-i2E.roa
Signing time:             Sun 01 Mar 2026 02:31:20 +0000
ROA not before:           Sun 01 Mar 2026 02:31:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4517 (0x11a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6F825CEDD7B7CF015663E726524A3B947E7E8B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:48:60:f4:e5:e8:02:f7:36:33:b7:d4:e4:
                    e6:78:e6:62:69:88:cc:96:c4:29:ae:cc:80:e0:f5:
                    b4:a5:d8:c9:85:3d:25:06:45:14:b4:80:08:dd:66:
                    5b:7b:76:55:5d:e8:ac:98:d6:22:29:19:62:17:c2:
                    1c:55:f2:95:8f:fb:f5:0a:30:5d:66:b5:11:27:ee:
                    d0:5a:45:22:11:d8:a0:a2:72:6f:14:21:8b:1e:ae:
                    c4:90:87:b7:00:ce:6b:3a:08:55:27:33:21:86:9f:
                    70:e1:ce:91:48:ef:89:28:34:df:11:05:a4:53:8c:
                    a9:a0:a9:7c:e1:8e:51:e4:07:5d:5a:4b:85:86:2b:
                    da:91:de:e8:87:33:f7:3c:7e:9c:b2:c6:a3:29:e8:
                    60:c6:3c:ad:04:e8:a2:1f:a6:5a:69:75:7b:89:97:
                    52:d0:6a:26:02:c3:22:cc:8a:8d:4f:4a:9c:3c:e7:
                    f6:de:81:03:e6:2c:ee:a2:cc:fa:b0:d1:78:cd:e3:
                    46:8a:e1:26:7a:0f:c1:01:cb:41:69:09:4b:fc:76:
                    c2:e7:80:08:40:68:41:26:45:c4:1c:f5:c0:43:3a:
                    b5:d8:dd:15:0c:7f:09:47:8a:86:ac:c3:22:1b:f3:
                    61:fc:47:38:01:13:7e:76:11:1f:78:9a:53:6b:50:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:5C:ED:D7:B7:CF:01:56:63:E7:26:52:4A:3B:94:7E:7E:8B:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b4Jc7de3zwFWY-cmUko7lH5-i2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:7f:99:78:d3:ef:0f:c5:a5:b7:86:ac:1e:22:f0:4d:c3:d4:
         aa:c0:d8:6a:59:73:df:4b:af:c5:2c:43:a2:69:2b:17:dd:6c:
         a5:65:1f:0c:d3:6d:be:b3:33:df:56:ab:ac:85:27:af:e7:8b:
         b4:0f:45:ee:c3:bd:2c:0f:87:c1:40:cf:1f:2e:64:7b:78:07:
         62:75:a6:66:11:b6:db:40:23:f4:b2:c0:9e:ad:28:1b:89:07:
         18:08:de:00:cb:5e:89:f2:af:3f:bb:86:5d:d3:56:7d:58:fb:
         ef:91:6e:d3:5e:37:77:95:ad:9b:0c:bf:ed:bc:80:56:cc:3c:
         b7:4f:a4:7e:19:55:3d:10:b6:0e:f3:1d:47:fe:a0:e0:66:47:
         be:6d:d8:25:48:27:25:0f:bb:ab:88:9a:99:cf:be:66:cf:8b:
         ed:df:84:8f:34:3b:70:8c:f4:f1:15:97:bc:d0:f9:30:6f:77:
         6a:11:cc:19:d0:c0:4d:a9:c5:f2:ae:f3:d3:7c:f6:b6:72:d8:
         e6:94:25:5f:3a:34:e4:ef:39:37:c9:0d:fb:00:88:9f:6c:d9:
         06:42:7a:65:26:f2:7e:ca:1d:5c:57:43:76:0b:6b:49:38:7d:
         46:66:f4:6a:70:54:ee:77:1e:55:84:8f:8a:65:76:82:f3:d5:
         cd:55:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:18 2026 by rpki-client