Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/obPATdaZQU__fmYmxNSacqFnj7o.roa
File:                     obPATdaZQU__fmYmxNSacqFnj7o.roa (raw, json)
Hash identifier:          0FmFO0WY1338dNeBdarYeVsTbEInoH51gT0k6c2BcV8=
Subject key identifier:   A1:B3:C0:4D:D6:99:41:4F:FF:7E:66:26:C4:D4:9A:72:A1:67:8F:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/obPATdaZQU__fmYmxNSacqFnj7o.roa
Signing time:             Sun 01 Mar 2026 02:36:32 +0000
ROA not before:           Sun 01 Mar 2026 02:36:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4552 (0x11c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A1B3C04DD699414FFF7E6626C4D49A72A1678FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:46:93:a4:46:d6:d8:bb:06:68:6d:52:b3:13:
                    7d:4e:5b:f0:67:07:fd:3b:6f:6f:e5:4a:f7:1a:1a:
                    b6:86:47:3f:87:83:3a:93:2c:77:a3:57:14:99:22:
                    5b:6e:0f:27:2b:8b:8b:a6:e9:35:9b:aa:28:46:41:
                    35:8c:f0:6c:16:a2:39:1a:7e:b4:d1:7a:77:9d:78:
                    aa:57:c9:a0:f5:2e:17:a8:7a:d6:90:dd:e0:d8:a9:
                    cd:41:a6:e0:50:51:73:38:24:23:30:05:97:c3:07:
                    b3:a5:b7:9c:74:31:97:dc:c5:be:1c:53:50:67:6a:
                    db:bc:0b:b8:23:60:7c:72:be:7e:6d:04:cd:f9:ba:
                    90:36:ac:fe:a3:dc:76:2b:24:e1:02:84:45:47:aa:
                    19:1b:8c:be:98:e0:fb:0e:a9:51:4f:da:8e:7e:42:
                    43:ab:7c:74:b9:5b:8e:c1:f5:5e:b7:fc:9c:7e:6f:
                    b3:3a:3f:44:18:b6:9f:9a:3c:5f:72:d1:c6:67:f7:
                    19:57:df:dc:7d:02:b4:a5:05:77:9d:c2:6a:1d:d9:
                    cc:9c:60:b7:e8:b0:d2:c1:b7:ad:82:19:f6:ae:02:
                    44:db:c0:8d:ba:ac:6e:bc:98:13:22:78:7b:d4:d0:
                    5c:ff:d4:52:39:41:b2:41:ed:23:5b:4e:b4:fa:88:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:C0:4D:D6:99:41:4F:FF:7E:66:26:C4:D4:9A:72:A1:67:8F:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/obPATdaZQU__fmYmxNSacqFnj7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:c7:0e:46:b0:fd:fe:d5:45:b9:98:d0:9a:87:c2:33:49:
         30:e0:21:07:e8:e4:48:5b:4d:8d:f9:51:22:0d:eb:8a:22:1c:
         b0:34:f7:e9:85:6f:37:91:f6:d1:64:8d:27:7e:0d:1e:1b:0e:
         c9:07:7e:2f:e5:ee:a8:8f:8d:2c:7f:8c:37:e1:dc:86:b1:21:
         f8:57:e5:a7:4d:c7:1b:c0:53:3b:47:41:6d:3f:ba:36:c4:b8:
         0f:ef:4f:d1:59:aa:f5:12:84:34:3d:08:08:ae:98:8b:b5:a8:
         79:4e:d2:8c:1b:94:9c:f1:e7:0b:78:a2:56:56:1c:9f:c7:bd:
         ae:9c:fe:98:4b:d0:79:fe:a3:db:ee:6a:26:fa:bd:89:7b:64:
         14:fc:a4:e1:f4:d1:3c:5e:a0:fe:12:e3:74:18:51:e6:44:20:
         71:a2:40:86:5c:ff:ff:ff:4d:0f:3d:2a:0c:42:22:fd:ef:22:
         2b:14:34:01:88:32:01:7e:c8:bd:e6:d0:c1:87:19:62:42:13:
         60:8b:52:15:ef:61:c3:9b:8b:ef:56:09:40:86:ca:07:e3:9a:
         6f:84:2e:8f:f4:83:42:f0:73:18:55:19:48:7b:1f:e7:75:68:
         4f:df:3e:c9:c0:a7:68:02:be:8c:a5:81:82:b7:f1:05:e9:6f:
         2c:8c:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:48 2026 by rpki-client