Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jB8pmDzyA3ULB_H7jIf9JiTa7RU.roa
File:                     jB8pmDzyA3ULB_H7jIf9JiTa7RU.roa (raw, json)
Hash identifier:          Vb84HtfZ+fHrLdEvN/d3iYMjegkQzOTqY1qFWJ9FTTA=
Subject key identifier:   8C:1F:29:98:3C:F2:03:75:0B:07:F1:FB:8C:87:FD:26:24:DA:ED:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       117B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jB8pmDzyA3ULB_H7jIf9JiTa7RU.roa
Signing time:             Sun 01 Mar 2026 02:26:57 +0000
ROA not before:           Sun 01 Mar 2026 02:26:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4475 (0x117b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:26:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8C1F29983CF203750B07F1FB8C87FD2624DAED15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:ae:c1:67:94:e1:58:1c:2b:b0:ed:d1:fb:
                    6f:97:8d:3a:8d:d8:c8:8b:64:22:af:79:5c:25:16:
                    a0:4e:f1:02:70:25:c1:bc:1d:f1:a6:7d:b6:d8:91:
                    36:1b:a3:21:ae:70:00:e0:f9:07:d9:ed:f4:85:dc:
                    0b:20:a4:a7:17:cb:82:2a:c1:7a:a4:4d:f7:25:63:
                    8d:50:f4:1c:d5:a8:fd:44:e0:dd:ef:6e:c1:2e:42:
                    63:da:66:18:cd:f5:65:89:31:bb:4a:7d:a6:54:4d:
                    99:ce:d8:55:af:3d:c2:64:97:96:cd:ab:63:13:d8:
                    f3:4b:cd:f1:ac:c4:03:f0:3f:34:1a:96:d4:e4:47:
                    c2:d8:f9:58:ed:68:cf:0b:50:0a:90:3a:9b:eb:b4:
                    78:1d:07:0f:0a:ba:86:74:16:0d:cd:b4:0d:9c:bc:
                    56:57:28:f5:49:15:9b:e0:f6:2e:f7:a2:28:6e:0f:
                    69:c1:43:32:35:af:28:ad:16:ae:3f:30:d5:89:56:
                    90:3a:d7:98:64:07:78:0e:94:39:5d:b8:f1:f6:a1:
                    8f:0d:44:aa:60:b4:91:45:2a:c8:db:e0:ea:97:75:
                    4d:02:32:9c:fa:9a:33:5d:3a:bb:80:c3:b9:60:be:
                    71:ee:31:84:12:9b:42:c4:8c:63:29:53:2e:fa:87:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1F:29:98:3C:F2:03:75:0B:07:F1:FB:8C:87:FD:26:24:DA:ED:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jB8pmDzyA3ULB_H7jIf9JiTa7RU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:a4:8d:ea:7a:6b:5c:e7:0f:0a:c1:42:43:86:42:67:1a:13:
         f5:d3:41:30:df:30:38:18:c9:1c:c2:ed:87:65:dc:40:d1:4d:
         45:3a:90:dd:6a:a9:6a:f6:7e:39:64:f9:fe:56:9e:90:9a:f3:
         14:01:a3:9e:ea:ee:9a:79:d8:bb:7c:8f:71:00:85:94:46:66:
         7b:ca:40:73:9f:85:2f:1b:40:e0:14:f2:65:fb:ab:66:55:c6:
         15:11:e0:11:19:4b:07:82:dd:53:99:45:a8:f6:7e:d3:e3:64:
         9e:e2:4b:c3:d7:86:88:1b:db:10:46:04:02:1a:0a:79:5d:de:
         09:ea:2e:54:5b:5e:b0:a2:1e:e2:e2:65:4b:0e:c3:ed:82:0f:
         09:01:13:ee:0f:9d:4c:e0:d0:1c:63:e9:04:9e:14:7f:3f:76:
         71:e0:54:1d:76:ae:06:fe:f3:98:e5:ce:98:fa:47:78:98:27:
         a5:97:e9:c2:4a:5b:bd:5d:cf:6a:d9:dc:7b:7f:90:94:be:b4:
         2d:18:84:06:34:2d:64:f6:f5:ee:95:fe:a0:a4:98:35:c3:a8:
         50:59:24:06:24:3f:8f:da:34:51:de:50:dd:b9:82:2f:f0:66:
         2d:46:f7:dc:79:88:34:10:75:77:4d:94:15:f5:05:9c:46:92:
         4c:c9:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:23 2026 by rpki-client