Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
File:                     dZmbQX7RSZgGRBHmR485rwFXCFE.roa (raw, json)
Hash identifier:          f7p8cmiUjMCsr1XDM+QxvpyTyI3emonSdA6AGK2rKrc=
Subject key identifier:   75:99:9B:41:7E:D1:49:98:06:44:11:E6:47:8F:39:AF:01:57:08:51
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1112
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
Signing time:             Sun 01 Mar 2026 02:07:26 +0000
ROA not before:           Sun 01 Mar 2026 02:07:26 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4370 (0x1112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:26 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=75999B417ED14998064411E6478F39AF01570851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:7d:81:8c:d9:92:5c:d7:02:71:d2:90:26:
                    7d:4c:96:41:83:0f:0a:86:71:35:68:36:e8:b3:23:
                    77:fe:fe:90:b8:91:b1:ad:19:94:a0:15:ed:cb:c4:
                    b0:c8:a6:80:47:72:79:22:c7:14:c4:4b:a1:f4:42:
                    62:a8:20:b8:10:86:b2:52:dc:bd:1b:62:ee:4f:7f:
                    fd:83:57:e7:b3:03:81:83:5a:33:35:c8:b5:c9:c8:
                    05:eb:6f:27:03:57:3f:10:19:c5:01:d7:81:a4:2f:
                    7d:1c:1c:1c:00:30:c4:55:5b:53:a5:2e:4e:eb:78:
                    74:34:0e:49:3d:55:a7:41:3d:88:05:3d:bf:1a:c6:
                    11:d6:13:e0:e1:89:01:83:d8:a9:9d:be:3c:0e:27:
                    d7:f8:b7:f3:2d:e3:c2:49:b7:7b:1b:bb:8a:5d:4c:
                    df:df:fd:55:37:24:80:3b:8e:fd:66:6f:ad:14:37:
                    52:48:fc:28:71:9c:85:7f:23:aa:54:96:a3:05:23:
                    0a:60:ea:bd:81:15:b6:0b:94:4b:13:08:66:73:1c:
                    a6:f0:b6:2b:da:6f:a5:5c:b9:60:be:bf:04:e5:91:
                    6e:e7:bb:46:bd:57:87:ed:e1:05:2b:1f:91:8f:b1:
                    dd:90:27:1e:3e:78:50:58:49:88:ea:0b:3b:54:56:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:9B:41:7E:D1:49:98:06:44:11:E6:47:8F:39:AF:01:57:08:51
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZmbQX7RSZgGRBHmR485rwFXCFE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:14:d2:83:7d:57:5e:f5:36:c4:09:b2:e5:e8:11:93:4f:
         2c:c5:c4:74:e4:b9:20:ce:aa:38:6e:97:5e:f3:d5:04:0f:3e:
         f1:c7:27:35:2b:77:85:4b:9a:fb:98:61:84:86:3d:e8:06:4d:
         7e:4f:86:6c:6e:21:e3:59:af:04:58:04:9e:34:cf:19:db:a6:
         30:86:2b:38:31:a7:11:a1:cb:8d:7c:00:7f:a2:06:54:f9:7b:
         ee:b2:8b:da:a4:fc:1c:44:34:de:af:16:49:73:1e:c2:74:d5:
         56:ec:28:92:cd:ec:b2:45:b1:25:ed:bd:ef:b2:ed:15:dd:23:
         f3:34:bd:29:7a:cb:8a:0e:f8:e5:f6:62:70:cf:8a:07:ea:b8:
         97:eb:39:fc:18:5e:c8:ff:40:29:35:21:2a:79:19:1f:64:e7:
         a2:17:bf:c1:f7:da:7f:75:7b:cc:0d:0d:8f:38:23:f2:fc:cb:
         7c:07:dc:ee:bf:86:0b:66:c6:a4:93:21:fd:fe:4e:18:74:64:
         0e:17:05:01:cb:fb:95:22:6e:98:94:e8:13:38:65:2a:13:e5:
         b8:f5:c5:77:27:a9:e4:6d:81:b0:e4:9a:c4:db:34:0d:bd:ee:
         44:ee:44:af:2e:26:39:67:05:16:04:d9:68:da:ac:7f:2a:e8:
         21:16:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:16 2026 by rpki-client