Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
File:                     s1iupkBKioxqi3YEZBfOfba3b_Y.roa (raw, json)
Hash identifier:          ENj4YCClHYqifNv0IiGrpy8QJGc0XrBQh89ozGY9Dn4=
Subject key identifier:   B3:58:AE:A6:40:4A:8A:8C:6A:8B:76:04:64:17:CE:7D:B6:B7:6F:F6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10DF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
Signing time:             Sun 01 Mar 2026 01:58:36 +0000
ROA not before:           Sun 01 Mar 2026 01:58:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4319 (0x10df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:58:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B358AEA6404A8A8C6A8B76046417CE7DB6B76FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:ef:1f:21:e2:39:00:e7:6a:ce:ad:da:34:
                    d1:11:ec:32:77:d0:87:e8:dd:86:76:42:1b:5b:1f:
                    0d:54:9b:f0:37:03:3e:40:d2:bd:d8:66:5f:9e:8f:
                    48:00:3c:a5:a1:15:2e:52:80:4d:79:9c:93:d7:39:
                    b3:ff:84:4d:1a:e3:a2:94:83:1a:5a:6f:e3:2e:b1:
                    43:ea:18:42:48:dd:2c:18:ed:70:4d:1b:22:83:d2:
                    60:86:97:6c:55:14:9f:43:bc:42:fe:cd:03:dc:c8:
                    cc:6d:16:dc:df:8c:d6:f7:1f:cf:82:56:61:45:aa:
                    30:00:81:7a:26:bc:5e:63:12:4d:21:f3:cc:36:94:
                    65:29:d7:c8:ff:8b:07:8f:28:04:7f:8c:9c:f8:a8:
                    93:95:0e:59:0c:c2:e0:87:38:2b:b6:1f:77:6c:00:
                    5c:f4:2a:c4:c4:72:8e:33:ca:0b:6a:2a:40:f6:a1:
                    23:e7:bc:ab:11:af:9b:1b:8f:8a:6f:23:94:7c:38:
                    83:0b:02:ea:1d:df:ea:27:3f:6a:19:c1:e7:a5:51:
                    60:0b:b4:90:61:07:ce:98:f4:15:2f:eb:ca:6a:e5:
                    a4:99:e6:48:1b:ff:63:09:fb:4d:98:d0:f9:a0:cd:
                    19:df:b2:47:df:10:8d:24:7f:0b:c1:e1:3a:54:ca:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:AE:A6:40:4A:8A:8C:6A:8B:76:04:64:17:CE:7D:B6:B7:6F:F6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1iupkBKioxqi3YEZBfOfba3b_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:1d:40:c9:88:be:fb:92:87:31:4a:72:46:59:04:2d:3e:
         b8:f0:34:eb:24:d2:40:e7:58:88:ce:39:5a:4e:cc:97:bb:d8:
         ae:5b:88:2a:6c:7a:e8:b8:e8:89:1f:45:b0:85:67:f3:25:e2:
         3c:9c:5b:bc:dd:10:73:5e:79:8a:40:12:28:be:40:53:27:e9:
         40:eb:44:0c:79:f5:19:5c:b0:a1:05:6a:18:6f:dc:69:e6:bf:
         66:1c:3b:91:ed:cb:a7:ac:60:23:09:06:4a:8c:57:e9:cc:31:
         03:63:23:ad:47:35:5a:c2:f4:47:aa:1e:0d:38:9d:1b:d9:82:
         6e:8e:10:2b:84:c7:3e:2f:88:59:81:b2:08:a4:30:ba:44:2d:
         33:0e:ad:67:a4:90:4c:bb:43:27:13:5c:33:25:36:ed:e1:b2:
         29:2b:ac:7d:bd:24:98:03:c2:70:29:5b:b5:8a:12:ca:f0:f9:
         09:3d:61:c5:a4:6d:b8:e4:b8:bc:ad:33:40:df:3f:c8:81:c3:
         40:c1:3a:14:60:9d:cf:3d:70:02:8c:bb:81:b3:16:d4:56:b4:
         5d:3d:44:6d:fe:af:67:f3:db:31:c7:30:7d:f6:a8:84:ca:ef:
         21:04:8d:7f:ae:3e:31:8c:27:f3:c1:40:0c:75:c5:2c:56:9d:
         37:af:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client