Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gVVNTEEidxPrpOzAHu-z0pJzsyo.roa
File:                     gVVNTEEidxPrpOzAHu-z0pJzsyo.roa (raw, json)
Hash identifier:          DJ4URoBzoDoyM9LKbGAkX5GTEFpjnECxXCKLRS9//0I=
Subject key identifier:   81:55:4D:4C:41:22:77:13:EB:A4:EC:C0:1E:EF:B3:D2:92:73:B3:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1110
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gVVNTEEidxPrpOzAHu-z0pJzsyo.roa
Signing time:             Sun 01 Mar 2026 02:03:05 +0000
ROA not before:           Sun 01 Mar 2026 02:03:05 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4368 (0x1110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:03:05 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=81554D4C41227713EBA4ECC01EEFB3D29273B32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:38:19:c8:3f:8d:b8:11:cf:9e:61:17:9f:
                    9e:54:f5:03:48:42:c5:de:dd:8b:eb:49:98:7a:b4:
                    98:f4:5d:c7:68:59:80:92:aa:89:9e:e5:8e:b2:b1:
                    ad:88:8d:30:b0:3e:47:c2:e1:15:1a:d9:db:06:0d:
                    96:16:7f:dc:91:d1:d2:00:7c:e7:2a:f1:37:09:10:
                    86:f2:c7:98:19:4e:20:27:c5:41:9d:a4:cf:37:66:
                    4e:cd:c4:bd:66:85:a7:d1:21:49:9f:a0:49:bc:34:
                    4a:9a:f5:c9:fb:58:a3:cc:4a:d6:04:16:9e:44:d9:
                    a9:cd:76:ad:f7:93:3b:cf:7a:65:af:fd:8d:58:68:
                    c3:32:85:cd:35:53:85:1f:55:52:4e:0e:5d:85:e4:
                    de:0e:e0:35:81:19:42:02:35:b7:13:33:30:ae:54:
                    13:c8:8d:5c:74:44:49:fd:53:e5:e9:42:15:50:9b:
                    87:c6:7a:85:18:77:a8:cb:e0:23:39:3c:d5:d7:10:
                    75:32:29:3b:7e:d2:ed:04:bd:f3:65:90:0f:f1:fe:
                    78:15:00:5d:08:a6:68:85:d3:b4:55:4d:e5:21:cc:
                    f9:77:a6:22:bf:b9:f8:de:fa:29:a5:43:6f:50:bf:
                    7c:18:61:72:e8:28:0f:41:5f:6b:f5:3a:dd:8f:95:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:55:4D:4C:41:22:77:13:EB:A4:EC:C0:1E:EF:B3:D2:92:73:B3:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gVVNTEEidxPrpOzAHu-z0pJzsyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:f1:71:7d:9e:85:e5:b7:00:69:7d:e6:31:40:a2:f3:f6:
         7e:5a:e5:93:8c:79:86:96:2a:30:17:11:f7:e6:3b:c8:5e:e2:
         8d:4a:78:23:dc:2f:f6:a1:bf:43:e3:49:8e:88:41:e8:f0:a4:
         39:6f:f8:33:8a:0c:84:47:2a:94:f7:98:d0:4e:67:83:05:49:
         18:3b:a9:ba:3c:c9:1f:e9:bc:0b:14:84:f8:d9:3c:42:51:00:
         ac:25:18:92:dc:68:e4:73:94:c3:7f:d5:13:6c:d2:46:87:23:
         44:42:6f:b3:ff:7a:e3:9a:f8:93:c1:d0:20:79:f8:e2:af:25:
         dc:a2:54:46:c3:7f:14:9f:58:9b:ac:a4:2b:37:03:85:87:6d:
         25:a2:d2:a9:fd:92:5c:76:dc:4a:73:51:0e:74:fb:1c:4f:db:
         35:4e:41:49:57:06:94:d1:3c:02:4a:ef:e5:ff:39:ab:0e:6b:
         e0:3c:e3:20:5b:b1:82:c4:ad:1a:47:13:19:09:b2:d5:b2:68:
         c8:7a:bb:86:4d:71:66:26:9d:24:12:b4:13:3b:1d:6f:68:22:
         40:d7:43:4e:64:fc:b7:5b:f7:4c:55:6a:02:c1:ad:87:24:bd:
         f4:b2:4a:0d:ee:1e:24:99:d3:da:92:b4:4c:05:d9:0f:b5:39:
         78:74:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:05 2026 by rpki-client