Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dhh1cXh4sW9BVhb2zwB2Sm7-ZcQ.roa
File:                     dhh1cXh4sW9BVhb2zwB2Sm7-ZcQ.roa (raw, json)
Hash identifier:          Kd3sZXD6WAvdy2Z5CzErbmM0LHllEt9f6JCC5yd6XVg=
Subject key identifier:   76:18:75:71:78:78:B1:6F:41:56:16:F6:CF:00:76:4A:6E:FE:65:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dhh1cXh4sW9BVhb2zwB2Sm7-ZcQ.roa
Signing time:             Sun 01 Mar 2026 01:58:35 +0000
ROA not before:           Sun 01 Mar 2026 01:58:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4316 (0x10dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:58:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=761875717878B16F415616F6CF00764A6EFE65C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:0e:9c:43:ba:37:d2:9d:f8:14:66:b7:d3:
                    4f:58:b1:65:a3:b6:bd:57:d2:52:75:0b:14:e6:ef:
                    f3:ef:d0:e4:8d:e0:65:34:c6:07:32:4f:4f:14:28:
                    74:bf:cd:3d:b3:84:a4:93:d3:0b:62:89:66:c3:39:
                    db:95:2c:76:1a:2a:9e:ad:83:32:39:07:45:03:16:
                    4c:1e:eb:9f:6c:8e:58:6a:0b:d4:99:e6:cf:c8:0a:
                    c8:88:43:10:4c:30:1a:19:b0:45:d5:5e:54:b3:9a:
                    d8:63:65:88:b8:6e:a1:45:c8:d4:c9:2c:73:e5:9e:
                    10:85:00:e3:03:41:73:c7:a2:eb:ff:65:ad:87:d7:
                    64:12:5d:0b:98:3d:2e:91:b9:45:14:57:12:3e:df:
                    0f:04:5d:59:0a:5f:be:79:52:01:50:20:27:bb:58:
                    27:00:a2:21:0e:be:81:ed:fc:92:f4:f9:8c:4d:2e:
                    90:3f:e7:40:28:01:d4:5c:37:41:c0:41:e8:b3:f7:
                    76:8f:ba:e0:2a:dc:d2:d1:e1:ec:60:9a:bd:18:68:
                    3d:c6:e9:fe:e7:fd:61:f0:93:b1:a6:fd:a6:62:f2:
                    79:45:57:a2:17:e0:14:2b:c6:88:d2:c4:e3:74:30:
                    89:14:ed:34:e0:fb:a6:b1:43:ca:0b:49:3e:18:62:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:75:71:78:78:B1:6F:41:56:16:F6:CF:00:76:4A:6E:FE:65:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dhh1cXh4sW9BVhb2zwB2Sm7-ZcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:2b:7b:03:36:35:6d:45:f8:f9:31:5d:d1:87:b6:5c:75:
         64:d0:9b:4e:7c:42:53:68:8f:fb:3a:41:c9:2b:a9:75:27:3a:
         36:75:c0:95:1b:15:13:81:0f:0a:b5:e1:ff:3f:ad:9a:40:f9:
         77:b6:4e:de:10:28:30:02:6b:fa:88:3e:e5:5c:d6:ab:ee:5b:
         d5:e3:be:59:e3:31:fc:c7:8c:ab:04:2a:28:9f:04:c9:c1:66:
         7e:9d:cd:84:0d:30:05:c7:6a:c7:43:c3:01:c1:25:a7:e3:7b:
         4d:e6:e0:d2:0c:79:e5:62:11:37:c9:f1:53:9a:2b:2f:97:2e:
         b9:b8:3f:1b:99:8b:1e:e9:d7:ee:86:26:62:68:fc:44:4d:93:
         89:17:83:32:6e:fc:9a:66:4a:2b:d2:8a:d1:86:4f:58:6f:12:
         5f:df:31:42:4d:8b:b8:db:50:44:8c:da:8f:20:71:ea:38:78:
         f5:7b:10:e0:46:66:48:13:3f:29:e3:2d:be:3e:d3:04:4e:b3:
         e0:4d:af:58:ee:95:50:32:8b:5f:b6:00:4f:8b:f5:9c:a8:a9:
         25:a6:fd:7a:0d:c7:bf:fc:ce:b6:c2:17:0b:b6:e7:36:56:da:
         69:f0:ec:5c:8f:a9:fe:4d:58:8b:6c:c8:9c:7f:1e:e7:02:43:
         04:57:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:25 2026 by rpki-client