Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7y5sywnbQ-uADAYfQXXaziXGdg.roa
File:                     w7y5sywnbQ-uADAYfQXXaziXGdg.roa (raw, json)
Hash identifier:          ZlGl2xfOCmZL1Bak3So4rJDBttylpDoRM4ji8gR49lg=
Subject key identifier:   C3:BC:B9:B3:2C:27:6D:0F:AE:00:30:18:7D:05:D7:6B:38:97:19:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1080
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7y5sywnbQ-uADAYfQXXaziXGdg.roa
Signing time:             Sun 01 Mar 2026 01:39:57 +0000
ROA not before:           Sun 01 Mar 2026 01:39:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4224 (0x1080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:39:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C3BCB9B32C276D0FAE0030187D05D76B389719D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:f8:ca:4c:a6:9b:38:29:69:ce:68:90:2e:
                    c1:75:7f:48:56:de:3c:61:c3:a2:0d:69:b8:e9:84:
                    82:db:48:29:c8:af:f7:7b:91:fc:22:c9:70:42:63:
                    df:3d:94:f8:1c:0a:49:46:e1:ad:65:df:df:cb:55:
                    87:92:71:6a:19:b8:31:f9:d0:2e:01:81:49:99:aa:
                    56:e4:ff:47:c3:b3:f7:94:67:b4:26:5e:31:96:95:
                    be:f3:e8:05:18:b8:ce:dd:06:48:bc:59:d6:89:e3:
                    52:2d:08:9f:57:04:2f:d0:38:fc:34:d4:e3:54:c4:
                    26:bc:04:8a:41:c7:25:ef:a5:5f:9b:df:9b:8b:5b:
                    2e:ae:f5:38:bc:5a:93:d5:c4:34:3a:f0:95:57:46:
                    7f:b2:f1:73:59:1f:50:76:f4:e2:01:a8:8a:ea:38:
                    75:1f:c6:06:82:3f:de:0d:0c:36:ae:e1:f8:3b:85:
                    cc:f9:e5:0f:bc:39:bc:a5:07:f9:fb:da:0e:4b:05:
                    09:9e:38:62:ac:ad:b6:3d:53:31:fb:aa:b9:4f:78:
                    2e:c8:78:63:c2:64:05:f1:88:2a:6d:c1:ae:13:bc:
                    8a:fe:8f:dd:cc:ea:09:76:e4:bb:14:f6:ba:48:9f:
                    2f:3a:e4:55:e3:95:fc:dc:a0:5a:03:49:01:ba:1f:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:B9:B3:2C:27:6D:0F:AE:00:30:18:7D:05:D7:6B:38:97:19:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7y5sywnbQ-uADAYfQXXaziXGdg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:28:e6:b0:35:a4:fe:96:3b:33:25:f4:d9:7c:4a:79:fa:85:
         af:12:af:a3:c5:3a:bf:b0:d5:7c:5b:b9:80:4b:bb:04:0f:cc:
         d7:ba:3c:ec:06:da:c2:59:2e:c9:72:6f:8c:67:d5:0e:11:f6:
         15:6d:fe:b2:87:78:dd:97:1a:6d:60:e4:a6:be:1e:0e:ed:9f:
         d8:ed:a1:43:10:74:31:af:22:24:1d:37:e4:72:71:88:4a:cc:
         4b:12:d0:d9:63:80:88:d1:e2:17:fc:93:70:56:24:35:e7:c4:
         1f:44:e5:1e:a9:66:f8:17:18:44:b8:ef:e2:8a:a2:43:4b:a0:
         2b:e9:f0:d6:91:98:14:98:21:b4:b5:4f:f3:7f:4c:7a:3b:93:
         01:89:27:df:9e:73:7f:70:7e:b0:6b:65:33:48:72:f4:f6:6d:
         be:96:cd:3e:a0:73:a5:89:90:2d:9d:7d:7d:09:73:57:d1:d9:
         91:1e:48:6a:96:7b:ac:9e:e0:d3:62:1e:f9:27:91:cd:f5:a1:
         59:34:ff:4b:5f:92:7e:f7:11:4e:70:3d:34:45:fd:7d:8c:ca:
         42:7d:fe:6b:5c:b1:3c:86:08:cd:dd:a2:2a:d1:45:17:25:fe:
         a6:a3:d1:cf:62:81:c3:7c:bb:a8:a6:be:c1:60:55:69:44:ae:
         0a:7d:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:58:25 2026 by rpki-client