Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ekADedIFhz2yW_43k8EIM3mn4g4.roa
File:                     ekADedIFhz2yW_43k8EIM3mn4g4.roa (raw, json)
Hash identifier:          JgyaaHJOfRBh4vESobRa1eDr8yV+CzBe5yGmXZAWLWg=
Subject key identifier:   7A:40:03:79:D2:05:87:3D:B2:5B:FE:37:93:C1:08:33:79:A7:E2:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1194
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ekADedIFhz2yW_43k8EIM3mn4g4.roa
Signing time:             Sun 01 Mar 2026 02:31:11 +0000
ROA not before:           Sun 01 Mar 2026 02:31:11 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4500 (0x1194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:11 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7A400379D205873DB25BFE3793C1083379A7E20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:fa:04:47:dd:f4:b2:d9:e0:d2:b2:70:6b:
                    9d:19:5d:63:17:6a:57:62:55:be:49:9b:64:59:73:
                    86:b2:09:37:44:6e:60:30:c5:4c:d1:99:b5:a0:79:
                    29:7b:28:7d:ea:14:79:ea:69:7b:54:59:ad:f2:82:
                    b1:c6:17:d9:7e:7b:35:2c:3d:ab:32:2e:95:47:35:
                    04:1f:26:d1:b4:5b:18:64:3f:f2:89:6d:5b:0f:cd:
                    39:9b:5f:e3:cb:3d:8c:90:44:17:17:9e:e5:3e:6f:
                    71:28:0a:a7:41:dd:36:de:2c:99:05:bf:57:3f:df:
                    f9:33:09:83:7e:cb:e8:f9:bf:17:0c:62:38:29:ca:
                    cf:38:4d:14:b6:ad:15:b9:2b:6a:02:7d:7a:37:82:
                    4c:d0:74:6d:ef:91:ef:b1:e9:9b:ec:8d:6a:28:12:
                    31:5e:38:71:4f:4c:80:1c:74:a8:a1:c0:74:c9:74:
                    68:1f:dd:1c:eb:e1:6c:ab:09:b8:7b:ff:be:98:b9:
                    00:19:b9:3c:c9:fb:b2:c2:77:4f:09:f1:53:17:e3:
                    c6:c7:a6:c0:c9:4f:5d:4b:02:33:93:fb:93:f9:1a:
                    1c:66:4e:55:0c:bc:73:8f:57:27:9b:66:fc:31:01:
                    e2:ed:ff:9a:a6:e9:ff:81:4e:f7:c8:76:c0:d5:1b:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:03:79:D2:05:87:3D:B2:5B:FE:37:93:C1:08:33:79:A7:E2:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ekADedIFhz2yW_43k8EIM3mn4g4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:f5:ce:7a:81:98:16:ae:ca:5c:4d:68:e3:2d:69:2e:de:
         a3:4d:f7:d0:99:73:32:f7:2c:71:4b:31:85:c3:57:6b:0b:c7:
         bc:ad:d5:0b:ab:00:9c:af:7a:27:4a:30:24:fc:af:17:f7:42:
         84:c5:c4:fa:51:a3:28:89:42:d4:4c:98:23:f4:f5:2c:f3:0b:
         ea:ff:df:0f:79:e8:db:4c:ef:a2:4a:9d:00:50:ad:44:37:04:
         56:13:56:f3:f3:34:fe:2c:83:b1:2e:34:e9:63:4f:71:f5:88:
         ac:85:fd:4a:62:bf:1b:48:0d:53:16:30:58:3f:37:56:fd:50:
         99:b2:39:c2:79:60:c8:49:22:e8:b7:91:cf:6d:cd:07:4e:b5:
         02:74:e2:00:85:7f:b5:aa:2a:c9:5f:66:b8:64:eb:de:6c:35:
         a7:32:be:1c:da:be:0b:fa:20:a5:dd:5e:c9:c1:4d:32:64:b3:
         ea:c7:fd:c0:95:67:d1:04:ff:d9:f9:d0:41:1b:a4:a7:23:43:
         a6:cf:6c:e1:4f:cd:a1:64:5d:99:ef:6e:e2:cb:c5:d7:52:23:
         a5:e0:f1:69:ac:09:03:04:f8:73:7b:43:a4:33:d3:f3:30:f3:
         2a:06:9a:bd:6f:b2:3c:54:8f:31:1a:36:56:a2:d5:58:9b:2e:
         6a:c3:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:23 2026 by rpki-client