Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
File:                     qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa (raw, json)
Hash identifier:          7rLpnzFDbLGEUM1lnJb5e9qUyANOY8Gp3AW2jpmbGmI=
Subject key identifier:   AA:58:36:3D:A0:EF:31:38:C6:18:31:4E:C5:0E:AC:3A:45:F2:37:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       130C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
Signing time:             Sun 01 Mar 2026 03:32:26 +0000
ROA not before:           Sun 01 Mar 2026 03:32:26 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4876 (0x130c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:26 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AA58363DA0EF3138C618314EC50EAC3A45F2373B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:b3:50:75:a5:86:07:65:5b:00:12:ef:aa:
                    ed:90:74:f4:ec:c2:ef:37:03:50:5a:78:54:db:8c:
                    0c:86:4b:37:d5:66:73:e3:e7:ab:6f:a9:fe:b5:b1:
                    a3:20:61:b0:da:aa:19:f2:f4:6b:6c:1e:29:37:86:
                    59:11:6c:15:6b:a8:76:81:37:c1:c2:a0:3b:b0:38:
                    ec:2c:5d:19:0d:c9:fd:38:d0:33:a7:2b:ea:51:58:
                    d2:8a:b6:99:a8:51:f1:f1:0d:9a:d8:a3:da:34:79:
                    7b:89:a1:0b:ce:9a:13:02:b3:63:04:81:a1:83:7f:
                    60:2f:fe:93:ec:62:da:ee:83:af:b0:a4:7d:fa:74:
                    a1:9d:dc:fc:46:78:86:ac:d1:15:27:8e:41:ec:37:
                    c7:cd:9f:d5:d2:4c:de:03:64:cd:52:f5:a5:96:6b:
                    24:29:1b:eb:4a:a4:c7:94:c0:e6:89:91:9b:5c:1b:
                    57:a3:1f:e9:bb:74:ad:e9:4e:83:8d:fc:8b:3b:67:
                    ca:0c:2b:f4:ec:49:13:11:a5:7d:62:a9:0b:96:55:
                    77:60:9f:e9:4f:1f:f7:e1:36:08:66:85:f7:24:d5:
                    b3:5f:47:3e:a6:5f:f7:70:f1:a7:ca:2f:95:2e:94:
                    fd:59:b7:4a:f2:cc:f1:9a:69:d0:0e:42:e1:c1:c8:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:36:3D:A0:EF:31:38:C6:18:31:4E:C5:0E:AC:3A:45:F2:37:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qlg2PaDvMTjGGDFOxQ6sOkXyNzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:5b:6a:2a:a4:3a:c0:72:ad:01:14:4e:89:61:c1:12:39:
         18:b5:ff:82:7e:37:b4:d1:a3:5d:e6:54:d7:af:9a:c0:08:b7:
         ee:d1:66:59:c0:9a:3c:1e:51:92:a4:3f:25:ed:c0:26:88:6f:
         e5:a3:44:47:1e:bd:9d:87:b8:01:72:f8:a5:88:7c:ff:34:f3:
         ac:6e:5d:35:54:39:54:9e:06:d9:ad:0f:ec:8f:83:a4:0f:29:
         2b:b0:2d:75:bb:e2:ae:93:c3:e0:31:1b:03:5e:a6:e5:16:5a:
         0c:79:5b:a6:3f:7c:7c:b9:4f:c9:92:88:b2:31:f7:9d:8d:81:
         f0:2d:a5:91:42:77:d9:39:d8:02:6b:db:9d:7a:66:b1:0e:02:
         45:9c:2d:0d:cf:66:43:bd:58:2d:52:31:30:45:3c:90:aa:2d:
         39:aa:b1:ac:23:46:a5:80:e1:40:84:f6:c6:d6:19:8d:cf:96:
         06:e2:80:a7:0e:d8:3e:f1:28:2f:f7:b8:34:6b:97:12:93:b5:
         22:19:3a:b7:5c:4f:a0:57:91:bf:b5:e4:60:cc:cd:d5:de:7c:
         c2:f6:03:fe:6f:38:a5:a9:02:7d:61:e5:b6:20:7d:c1:ac:74:
         58:26:ad:1e:b8:09:54:d0:67:a8:89:37:1f:4d:6a:80:6a:61:
         9a:e1:cb:d9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzMyMjZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBNTgzNjNEQTBFRjMx
MzhDNjE4MzE0RUM1MEVBQzNBNDVGMjM3M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJZLNQdaWGB2VbABLvqu2QdPTswu83A1BaeFTbjAyGSzfVZnPj
56tvqf61saMgYbDaqhny9GtsHik3hlkRbBVrqHaBN8HCoDuwOOwsXRkNyf040DOn
K+pRWNKKtpmoUfHxDZrYo9o0eXuJoQvOmhMCs2MEgaGDf2Av/pPsYtrug6+wpH36
dKGd3PxGeIas0RUnjkHsN8fNn9XSTN4DZM1S9aWWayQpG+tKpMeUwOaJkZtcG1ej
H+m7dK3pToON/Is7Z8oMK/TsSRMRpX1iqQuWVXdgn+lPH/fhNghmhfck1bNfRz6m
X/dw8afKL5UulP1Zt0ryzPGaadAOQuHByCorAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqlg2PaDvMTjGGDFOxQ6sOkXyNzswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3FsZzJQYUR2TVRqR0dERk94UTZzT2tYeU56cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaAQwDQYJKoZIhvcNAQELBQADggEBAFfwW2oqpDrAcq0BFE6JYcESORi1
/4J+N7TRo13mVNevmsAIt+7RZlnAmjweUZKkPyXtwCaIb+WjREcevZ2HuAFy+KWI
fP8086xuXTVUOVSeBtmtD+yPg6QPKSuwLXW74q6Tw+AxGwNepuUWWgx5W6Y/fHy5
T8mSiLIx952NgfAtpZFCd9k52AJr2516ZrEOAkWcLQ3PZkO9WC1SMTBFPJCqLTmq
sawjRqWA4UCE9sbWGY3PlgbigKcO2D7xKC/3uDRrlxKTtSIZOrdcT6BXkb+15GDM
zdXefML2A/5vOKWpAn1h5bYgfcGsdFgmrR64CVTQZ6iJNx9NaoBqYZrhy9k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:24 2026 by rpki-client