Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eiSRnvXYry4hd2s-squyjkkbF1c.roa
File:                     eiSRnvXYry4hd2s-squyjkkbF1c.roa (raw, json)
Hash identifier:          IPgogJRQc/QgX7iuXx7f7maZuSgIJfxlDQmSYBH/IVw=
Subject key identifier:   7A:24:91:9E:F5:D8:AF:2E:21:77:6B:3E:B2:AB:B2:8E:49:1B:17:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eiSRnvXYry4hd2s-squyjkkbF1c.roa
Signing time:             Sun 01 Mar 2026 03:20:51 +0000
ROA not before:           Sun 01 Mar 2026 03:20:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4850 (0x12f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7A24919EF5D8AF2E21776B3EB2ABB28E491B1757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:87:c7:a9:3a:8a:5d:59:30:a9:1b:e6:80:
                    92:81:31:20:e8:4f:50:43:25:56:3b:fa:4e:c3:65:
                    c6:b4:9c:94:d1:ed:12:36:8b:93:d4:6e:0b:43:b1:
                    0a:73:76:67:9b:d1:44:e4:f0:a4:9c:08:30:bb:d1:
                    f3:bb:16:4d:6a:5c:49:f2:4c:7c:6e:fc:c5:80:cc:
                    22:7c:55:0e:22:7b:16:f1:23:65:63:58:1e:73:70:
                    31:26:f6:ed:6a:c1:0b:fb:21:e8:f8:d2:2b:c9:af:
                    b2:7e:47:3f:7c:9c:f1:df:e5:be:3e:df:0f:7e:71:
                    d7:67:ee:d6:40:9e:60:54:38:e8:11:ea:aa:64:c9:
                    af:24:8e:23:71:22:db:d6:6e:04:1a:cd:30:27:3e:
                    56:0b:68:33:df:e6:2b:26:65:ca:45:93:fa:bb:44:
                    fa:60:04:14:b7:2c:9f:85:72:86:f3:0e:c3:dd:af:
                    c2:de:02:a9:d6:dc:48:28:fe:7a:a5:9d:4a:6f:ac:
                    10:dd:9e:c0:ca:51:d7:ad:28:27:5f:e2:77:4f:42:
                    71:eb:cc:8d:f3:b2:39:18:53:88:7a:5d:ae:4a:7e:
                    ca:e8:fe:52:f1:a0:09:6d:11:8e:f2:88:3b:f7:9a:
                    7d:59:11:30:af:28:f7:32:32:6a:e0:92:4c:5c:d3:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:91:9E:F5:D8:AF:2E:21:77:6B:3E:B2:AB:B2:8E:49:1B:17:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eiSRnvXYry4hd2s-squyjkkbF1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:1b:b5:38:db:ab:73:b0:04:08:6a:09:b4:4b:41:50:16:
         3e:ca:85:99:03:24:b8:c9:22:91:a8:59:3a:86:0a:18:c3:2e:
         a8:6b:be:fe:8b:94:2b:d1:dd:91:ad:89:02:b5:74:a7:9c:36:
         4d:c1:a2:e1:a9:40:5d:c1:b0:9a:ce:44:63:1a:3a:4d:a1:a9:
         ae:75:84:a3:f5:15:af:ea:d8:f0:d2:17:56:39:7c:66:4a:dc:
         b4:2c:c4:8d:a3:90:1a:73:19:c3:0b:3c:c1:96:df:14:ea:c3:
         79:34:59:69:04:4a:62:91:27:11:c1:1e:7d:79:ea:b2:1f:03:
         25:4e:40:9e:a7:f7:75:fd:65:2e:05:46:82:2d:8b:0c:c9:40:
         bc:e4:ff:23:eb:21:27:28:c1:96:02:4c:0d:7b:fc:5d:44:47:
         83:ca:b3:f5:43:da:9e:8f:ac:6a:f7:27:01:0d:9d:e8:74:b4:
         9c:14:27:2f:5e:28:96:ab:a3:4a:fd:2f:7b:d2:c0:68:3c:b8:
         e1:6e:a8:78:5a:5a:6a:df:e2:35:cb:ce:4b:08:da:c7:89:ba:
         48:72:80:d5:65:2c:90:be:9a:cc:ec:9a:15:e1:ff:70:43:3a:
         4b:87:be:77:69:66:69:bf:72:04:f9:11:4c:e3:94:6b:22:69:
         3b:be:9d:30
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzIwNTFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBMjQ5MTlFRjVEOEFG
MkUyMTc3NkIzRUIyQUJCMjhFNDkxQjE3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaRYfHqTqKXVkwqRvmgJKBMSDoT1BDJVY7+k7DZca0nJTR7RI2
i5PUbgtDsQpzdmeb0UTk8KScCDC70fO7Fk1qXEnyTHxu/MWAzCJ8VQ4iexbxI2Vj
WB5zcDEm9u1qwQv7Iej40ivJr7J+Rz98nPHf5b4+3w9+cddn7tZAnmBUOOgR6qpk
ya8kjiNxItvWbgQazTAnPlYLaDPf5ismZcpFk/q7RPpgBBS3LJ+FcobzDsPdr8Le
AqnW3Ego/nqlnUpvrBDdnsDKUdetKCdf4ndPQnHrzI3zsjkYU4h6Xa5Kfsro/lLx
oAltEY7yiDv3mn1ZETCvKPcyMmrgkkxc0wmRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeiSRnvXYry4hd2s+squyjkkbF1cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2VpU1JudlhZcnk0aGQycy1zcXV5amtrYkYxYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxaEAwDQYJKoZIhvcNAQELBQADggEBAHoXG7U426tzsAQIagm0S0FQFj7K
hZkDJLjJIpGoWTqGChjDLqhrvv6LlCvR3ZGtiQK1dKecNk3BouGpQF3BsJrORGMa
Ok2hqa51hKP1Fa/q2PDSF1Y5fGZK3LQsxI2jkBpzGcMLPMGW3xTqw3k0WWkESmKR
JxHBHn156rIfAyVOQJ6n93X9ZS4FRoItiwzJQLzk/yPrIScowZYCTA17/F1ER4PK
s/VD2p6PrGr3JwENneh0tJwUJy9eKJaro0r9L3vSwGg8uOFuqHhaWmrf4jXLzksI
2seJukhygNVlLJC+mszsmhXh/3BDOkuHvndpZmm/cgT5EUzjlGsiaTu+nTA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:55 2026 by rpki-client