Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnNWR9ty3VPQRmlW9UhOW3Trsj0.roa
File:                     hnNWR9ty3VPQRmlW9UhOW3Trsj0.roa (raw, json)
Hash identifier:          pmjltDt1i3zgeL6rDFzHi68fP4q04XALbMFeAKqrcBc=
Subject key identifier:   86:73:56:47:DB:72:DD:53:D0:46:69:56:F5:48:4E:5B:74:EB:B2:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnNWR9ty3VPQRmlW9UhOW3Trsj0.roa
Signing time:             Sun 01 Mar 2026 02:36:30 +0000
ROA not before:           Sun 01 Mar 2026 02:36:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4546 (0x11c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=86735647DB72DD53D0466956F5484E5B74EBB23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:b5:ee:98:cd:1e:d1:aa:4d:8f:fe:56:d1:
                    be:c9:54:12:0e:e2:95:17:75:61:9e:ba:e2:ee:9c:
                    48:a2:ae:92:c4:9d:f6:c2:6f:ea:71:1f:73:e8:81:
                    1b:81:1f:50:81:b6:f0:a0:0d:a9:69:67:c0:02:95:
                    7b:b6:6f:42:c1:ce:72:ae:23:05:9a:67:5b:c8:ff:
                    be:71:ff:0d:58:18:51:35:2f:31:36:01:96:c0:84:
                    ec:17:f9:3f:fd:c6:72:16:1f:be:82:e5:d0:0a:f6:
                    c5:73:6d:3a:cf:40:58:c0:9a:e8:5a:1a:d8:f1:3a:
                    e0:42:a9:c0:8c:4c:3a:c5:22:d2:47:d8:05:dc:aa:
                    00:50:09:62:f7:73:d7:7a:53:e5:04:9a:e9:05:f8:
                    16:82:e0:2b:a1:f8:e5:db:f0:a1:05:34:4a:5d:c0:
                    37:7f:54:db:ce:6a:50:ba:43:2f:37:31:ee:f6:5f:
                    33:07:02:b3:e3:de:f2:c6:f8:d8:10:a3:ed:cd:20:
                    ff:2f:ef:ab:90:c9:91:1d:58:56:cc:cc:ff:05:5a:
                    b5:fb:9f:66:8e:cc:6c:00:52:8f:0a:13:62:0c:c7:
                    75:ef:38:56:23:b3:45:73:46:07:3e:5a:e9:d0:fc:
                    e2:2a:48:a5:d4:4a:f1:4f:d8:28:a6:5c:f8:7f:11:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:73:56:47:DB:72:DD:53:D0:46:69:56:F5:48:4E:5B:74:EB:B2:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hnNWR9ty3VPQRmlW9UhOW3Trsj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:b5:f3:a1:ba:d0:3c:ce:10:f3:34:88:c0:32:33:e6:0e:d6:
         52:de:1e:fd:2d:2b:7e:61:9c:f6:a6:53:86:57:c2:3a:d9:d7:
         be:ba:36:5e:6e:6a:ef:8a:65:cf:cf:e7:b8:a5:f3:0a:1f:93:
         3b:4d:96:3d:53:4b:4f:84:55:97:cf:77:d6:df:36:98:94:bc:
         fb:ad:26:43:26:f0:08:9f:c7:0c:1f:93:fc:e1:29:55:d0:3a:
         ef:56:6a:fa:68:0b:eb:5d:b9:f0:83:65:7d:7f:17:a0:46:58:
         09:1b:99:5b:19:4c:49:ae:8f:7f:88:16:e9:7c:04:2d:51:43:
         a8:66:60:e2:d0:64:a1:46:d2:0e:ad:8c:e2:4c:c7:f2:da:ae:
         d6:a9:a9:18:f6:a6:04:f3:48:50:1a:22:dd:4f:2f:ba:a9:72:
         ed:2f:4e:3f:39:d7:ff:ae:99:8a:56:7e:bd:dc:26:b1:88:3b:
         7c:fe:2b:3f:5c:e3:66:03:0d:fd:e2:37:82:a1:6e:29:3e:8f:
         70:24:61:e7:b9:2a:37:dd:d3:25:e5:3f:11:51:86:c0:93:e4:
         96:f0:84:d7:92:8d:6c:25:13:0a:62:7e:17:98:15:7b:8c:15:
         44:fa:80:83:05:ae:cb:87:5a:f7:7d:7d:45:35:b7:e0:ad:1d:
         b6:17:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:33 2026 by rpki-client