Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydYSv6lA_fbjUDRChXcSzt-ueN8.roa
File:                     ydYSv6lA_fbjUDRChXcSzt-ueN8.roa (raw, json)
Hash identifier:          UXq8CPS9E4CAKQetwUyYlEq6J+PlM79GB5gMg0A5p5Y=
Subject key identifier:   C9:D6:12:BF:A9:40:FD:F6:E3:50:34:42:85:77:12:CE:DF:AE:78:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       118F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydYSv6lA_fbjUDRChXcSzt-ueN8.roa
Signing time:             Sun 01 Mar 2026 02:31:09 +0000
ROA not before:           Sun 01 Mar 2026 02:31:09 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4495 (0x118f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:09 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C9D612BFA940FDF6E3503442857712CEDFAE78DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:88:5d:80:3a:f8:59:97:e1:5f:15:3f:fc:
                    ec:31:b7:bc:c7:86:7d:42:6a:4e:26:f3:fb:91:f4:
                    3b:37:7a:81:60:fb:62:e6:c6:e5:aa:39:0b:bc:8b:
                    73:52:79:47:28:d4:67:c6:21:bd:de:b4:d7:47:a6:
                    f0:6a:23:dc:91:aa:16:49:5c:0b:90:df:f3:51:bb:
                    ea:15:41:4d:a4:b6:e2:36:28:3a:8d:96:07:5c:08:
                    76:69:a0:05:f5:fc:5c:ee:2e:17:0a:8b:89:d9:af:
                    5b:57:71:6a:af:84:9c:17:ca:0d:f7:85:1f:3f:1f:
                    42:91:d9:1d:58:e6:55:74:bc:80:00:54:2e:e1:7a:
                    53:de:7f:d0:b1:53:ec:f3:c2:95:28:0b:cd:c7:da:
                    1d:a0:5d:98:c3:c6:75:2d:15:29:d8:fa:19:44:8d:
                    c0:3d:a8:c2:87:75:e3:c1:e6:5c:bc:30:cb:18:1d:
                    6c:05:1c:3e:d4:b3:9a:3a:c8:87:a2:23:1f:e4:99:
                    da:af:b4:6b:63:71:6f:d6:23:9b:d9:cd:18:76:e2:
                    f4:a0:3a:ec:03:04:06:af:d0:97:57:79:9e:94:b1:
                    19:2c:26:f9:c8:53:e7:a8:16:9e:e3:66:3e:2d:8d:
                    59:5b:a7:67:48:60:43:95:b5:0e:8a:68:a4:2d:c4:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:12:BF:A9:40:FD:F6:E3:50:34:42:85:77:12:CE:DF:AE:78:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydYSv6lA_fbjUDRChXcSzt-ueN8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:f1:12:76:88:e1:c5:0d:cd:5d:58:24:19:df:a2:e3:a6:75:
         e5:b9:86:d9:85:69:68:1a:fb:5a:eb:d2:8b:be:9d:2a:71:61:
         b6:1a:26:b0:d0:7f:5e:a8:df:ff:28:e8:33:97:b6:90:60:82:
         8b:29:43:a0:fd:a8:9a:e5:5a:e0:80:98:cb:7c:4f:14:aa:a9:
         f5:d2:ef:d4:05:5a:2b:51:8d:10:c8:7d:e8:36:f0:61:d0:a0:
         49:66:55:75:48:03:59:cc:78:f2:e3:1b:cf:d3:b2:35:5b:97:
         fe:a7:f8:6f:3d:03:a4:e2:38:c3:3d:0f:c8:e2:c6:4c:6b:ad:
         e4:6e:dd:ae:a2:f7:e6:4c:2c:ec:34:7d:13:0e:8b:68:87:12:
         23:48:23:07:58:22:5e:88:51:78:99:5a:83:9e:51:b2:b5:a9:
         73:9c:22:32:7b:62:64:09:10:18:29:26:95:27:2d:cd:77:5f:
         f7:52:5a:9c:ff:36:7a:48:ad:dd:d0:e1:e4:12:96:c5:90:ba:
         42:a1:7e:55:2f:15:12:34:47:90:9f:b8:fc:ef:6e:6d:a7:12:
         cd:19:2a:6a:25:bb:9f:7c:db:d9:99:73:a3:fe:8e:ee:14:77:
         47:2d:86:6f:59:c4:d5:f1:14:06:0d:b0:32:e2:2d:aa:5f:08:
         d3:c1:46:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:08 2026 by rpki-client