Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQHSK3KzGB0Fj7q8_2s-3PV2kfc.roa
File:                     uQHSK3KzGB0Fj7q8_2s-3PV2kfc.roa (raw, json)
Hash identifier:          zVzFCSGe/RBhmpHx1jAfcJ+iwaO2kPLCXjzKZ/t3kWA=
Subject key identifier:   B9:01:D2:2B:72:B3:18:1D:05:8F:BA:BC:FF:6B:3E:DC:F5:76:91:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1164
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQHSK3KzGB0Fj7q8_2s-3PV2kfc.roa
Signing time:             Sun 01 Mar 2026 02:21:52 +0000
ROA not before:           Sun 01 Mar 2026 02:21:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4452 (0x1164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:21:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B901D22B72B3181D058FBABCFF6B3EDCF57691F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:a3:9f:19:b0:d4:c7:5d:82:a2:b8:e2:b6:
                    59:b4:dd:24:83:06:3c:eb:bc:2f:45:15:1d:71:f2:
                    23:e8:2d:92:42:c8:62:5e:4e:d3:cc:13:ce:74:b9:
                    1f:8e:e2:5b:93:e4:45:4a:34:95:a1:63:af:f6:9e:
                    69:39:09:95:15:db:82:3b:3e:ed:4f:f6:a2:fe:5b:
                    08:aa:8c:1b:38:af:1f:22:68:67:df:b7:19:21:f7:
                    4b:fe:ef:ac:4f:73:a1:d6:ce:70:84:c9:68:bc:e7:
                    71:a6:06:36:12:1a:56:15:96:2e:bf:23:20:1c:38:
                    08:ca:eb:86:0f:c0:1f:1a:ad:3d:63:a8:bc:c5:24:
                    3d:7c:a3:b8:e5:92:d0:fe:ce:bc:de:e9:ff:c3:d8:
                    f4:b1:ea:43:51:08:ce:c2:ef:34:fc:78:88:46:07:
                    80:3c:fb:88:a5:82:83:83:0b:1a:0d:e2:d3:69:44:
                    9a:14:39:b2:91:2d:40:98:89:05:2b:f0:ea:5c:6f:
                    27:41:1a:e4:d0:04:2c:d0:45:31:bb:67:84:96:2a:
                    75:d0:22:79:9b:a7:d1:42:db:a8:ce:31:3d:7b:a3:
                    64:8d:e9:b5:17:ae:17:3e:99:41:e8:de:ae:89:4b:
                    43:cb:77:5b:7a:9d:12:15:58:80:ab:d8:a6:3a:20:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:01:D2:2B:72:B3:18:1D:05:8F:BA:BC:FF:6B:3E:DC:F5:76:91:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQHSK3KzGB0Fj7q8_2s-3PV2kfc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:ca:c8:d1:2f:52:bf:64:7c:94:4c:da:b9:79:ac:5a:b5:
         0f:2c:29:52:49:22:53:85:a1:50:ab:36:13:98:ef:66:ea:5c:
         b7:e6:2a:bd:9c:71:60:7b:e7:bd:6d:0f:36:dd:dc:c2:35:50:
         11:1d:1c:be:87:3f:a7:48:29:6c:05:82:d4:89:4e:74:5b:dc:
         0a:ef:b9:f1:5f:a1:ca:95:71:69:b8:0d:98:dd:e3:49:15:da:
         6d:25:07:0f:60:8a:84:82:af:ac:cd:b9:fd:42:8b:12:d0:e3:
         15:9e:b8:7a:12:44:36:04:42:2a:5b:bb:bf:96:fa:51:9e:27:
         b5:a3:7c:ab:e8:c6:64:14:bc:00:59:0c:58:d3:3e:06:22:a1:
         ce:b2:bb:24:a9:78:4a:7b:5f:7f:4d:d5:14:da:ac:28:54:2d:
         f0:1e:4e:60:76:54:82:52:34:ab:25:b9:dd:ea:0f:71:f5:20:
         a3:63:52:db:5e:58:c1:60:62:76:27:40:ea:b7:c5:fd:c3:24:
         7c:b5:98:f6:11:86:9f:c8:2c:ed:1d:9f:88:7d:62:34:0f:96:
         1a:dd:dd:ab:26:db:ef:b0:dc:60:d2:e2:b5:4b:83:ef:dc:d8:
         16:d5:d3:84:6e:b2:83:a9:cd:6e:49:79:2e:76:6d:6f:02:a8:
         06:10:00:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjIxNTJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI5MDFEMjJCNzJCMzE4
MUQwNThGQkFCQ0ZGNkIzRURDRjU3NjkxRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6zaOfGbDUx12Corjitlm03SSDBjzrvC9FFR1x8iPoLZJCyGJe
TtPME850uR+O4luT5EVKNJWhY6/2nmk5CZUV24I7Pu1P9qL+WwiqjBs4rx8iaGff
txkh90v+76xPc6HWznCEyWi853GmBjYSGlYVli6/IyAcOAjK64YPwB8arT1jqLzF
JD18o7jlktD+zrze6f/D2PSx6kNRCM7C7zT8eIhGB4A8+4ilgoODCxoN4tNpRJoU
ObKRLUCYiQUr8OpcbydBGuTQBCzQRTG7Z4SWKnXQInmbp9FC26jOMT17o2SN6bUX
rhc+mUHo3q6JS0PLd1t6nRIVWICr2KY6IIOhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuQHSK3KzGB0Fj7q8/2s+3PV2kfcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3VRSFNLM0t6R0IwRmo3cThfMnMtM1BWMmtmYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABTn8wDQYJKoZIhvcNAQELBQADggEBAIylysjRL1K/ZHyUTNq5eaxatQ8s
KVJJIlOFoVCrNhOY72bqXLfmKr2ccWB7571tDzbd3MI1UBEdHL6HP6dIKWwFgtSJ
TnRb3ArvufFfocqVcWm4DZjd40kV2m0lBw9gioSCr6zNuf1CixLQ4xWeuHoSRDYE
Qipbu7+W+lGeJ7WjfKvoxmQUvABZDFjTPgYioc6yuySpeEp7X39N1RTarChULfAe
TmB2VIJSNKslud3qD3H1IKNjUtteWMFgYnYnQOq3xf3DJHy1mPYRhp/ILO0dn4h9
YjQPlhrd3asm2++w3GDS4rVLg+/c2BbV04RusoOpzW5JeS52bW8CqAYQAHk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:03 2026 by rpki-client