Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/swsiITAmcCrfJr7DzEpj1F9ojAI.roa
File:                     swsiITAmcCrfJr7DzEpj1F9ojAI.roa (raw, json)
Hash identifier:          JWo16ZGG9zzrSdDVaxHOvUnI+V0+K/LNMS6xEcg8NAc=
Subject key identifier:   B3:0B:22:21:30:26:70:2A:DF:26:BE:C3:CC:4A:63:D4:5F:68:8C:02
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1330
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/swsiITAmcCrfJr7DzEpj1F9ojAI.roa
Signing time:             Sun 01 Mar 2026 03:36:24 +0000
ROA not before:           Sun 01 Mar 2026 03:36:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4912 (0x1330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B30B22213026702ADF26BEC3CC4A63D45F688C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:69:18:51:5c:dd:55:52:9b:1f:8b:95:44:
                    28:bf:51:d1:7a:23:20:69:fb:f0:91:b4:5e:a6:96:
                    26:f4:5f:4e:69:b9:35:53:05:25:c4:77:08:4f:d6:
                    85:18:20:2b:b6:5b:ea:76:b3:b0:12:8a:02:95:25:
                    7d:bd:0c:47:97:d3:ef:b7:1e:00:aa:20:58:ee:7c:
                    6e:7f:52:4f:01:13:6c:bf:61:b9:d8:83:35:fc:fb:
                    c5:78:55:2c:92:2b:0c:49:26:09:3f:7f:c0:85:3d:
                    68:e9:9f:59:3f:70:76:d3:7b:14:de:85:cd:83:69:
                    82:e5:f7:62:2d:6f:fc:2a:7f:e4:bd:0e:2a:03:f3:
                    b6:ba:a0:be:68:c3:cd:cd:7e:29:a8:81:a2:d9:5e:
                    2a:b1:42:77:b9:90:d4:cb:a9:6d:f3:5f:ce:1f:ae:
                    89:ea:98:70:ef:1d:72:e7:c4:22:5a:12:e4:b5:90:
                    f4:33:e6:64:08:75:5e:f7:04:81:2f:6e:70:6d:75:
                    11:fe:da:38:24:3a:45:5c:5d:c5:90:a7:61:08:0b:
                    13:53:90:dd:61:82:2b:e1:a0:b2:81:99:ba:a1:82:
                    75:93:07:a6:9f:16:79:1a:f0:a4:51:c2:bf:f0:be:
                    da:d7:09:85:ab:9b:bf:85:5a:34:64:5b:f7:04:5a:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:22:21:30:26:70:2A:DF:26:BE:C3:CC:4A:63:D4:5F:68:8C:02
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/swsiITAmcCrfJr7DzEpj1F9ojAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:a1:b7:a5:df:69:34:ea:3a:6c:81:bb:cc:bb:b0:bd:e5:e0:
         00:9f:c2:9b:da:a8:c2:8a:db:19:4e:22:7b:71:8f:37:5e:7a:
         3d:91:4d:6d:f0:dd:4d:e1:29:af:f4:77:fc:e0:90:84:27:be:
         63:cf:4a:33:3e:7e:0c:b4:6c:b3:ed:37:3c:1a:77:9f:f8:bb:
         8a:f0:e5:7e:07:ba:3d:71:bd:b6:31:0a:93:cd:1b:ae:2f:77:
         b1:94:a9:47:48:e9:a4:62:22:6a:58:e2:28:71:a6:89:af:22:
         f8:ca:6f:26:ed:9e:23:f3:4f:60:e0:20:08:6a:b2:fe:b2:56:
         94:90:bc:53:15:1d:36:37:75:90:35:c5:71:82:5c:89:40:44:
         af:ff:23:9c:9a:ee:b9:cb:2d:c9:cb:8e:23:00:17:a0:4b:f9:
         7f:97:68:80:ac:72:0b:36:c0:f4:5e:2b:eb:71:c0:15:6b:f7:
         dd:8c:e5:d8:de:3d:b1:da:ca:78:3e:b0:f4:85:9b:bd:1c:d4:
         ff:21:a9:66:f5:ae:e1:c7:76:5e:4c:0c:81:15:79:fc:df:a3:
         9b:3d:7c:c9:b4:ef:9d:01:a7:8d:b3:92:4c:ca:82:44:3c:d4:
         c0:d0:37:d3:4a:67:e8:0a:0f:c4:3f:55:4e:96:ae:1b:75:ea:
         84:0b:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:53 2026 by rpki-client