Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/06u_oa1BLL3yePUE53VO2dDK0PU.roa
File:                     06u_oa1BLL3yePUE53VO2dDK0PU.roa (raw, json)
Hash identifier:          sxas82g0fc2Mjd+SNJMhdHfbP/c3u7naygjrY5WJRlc=
Subject key identifier:   D3:AB:BF:A1:AD:41:2C:BD:F2:78:F5:04:E7:75:4E:D9:D0:CA:D0:F5
Certificate issuer:       /CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Certificate serial:       26
Authority key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/06u_oa1BLL3yePUE53VO2dDK0PU.roa
Signing time:             Sun 01 Mar 2026 01:35:35 +0000
ROA not before:           Sun 01 Mar 2026 01:35:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        202.240.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
        Validity
            Not Before: Mar  1 01:35:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D3ABBFA1AD412CBDF278F504E7754ED9D0CAD0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:95:35:06:a6:6f:40:d2:b4:40:f3:c1:61:
                    0f:92:6e:f9:13:03:ea:f4:6e:91:32:3b:5d:a0:6c:
                    5e:92:ca:1c:0a:54:36:d6:59:1e:d8:15:7f:fa:49:
                    5e:31:d6:81:65:cc:59:f7:b7:36:07:5b:02:91:47:
                    22:f8:1b:0a:b9:82:46:9e:62:e7:4b:63:5c:7b:be:
                    d1:63:a2:14:22:60:78:4f:4c:70:ff:83:30:5b:d8:
                    6d:4b:69:f2:01:76:d5:a1:9a:15:b3:80:38:95:4e:
                    ac:d7:27:57:18:eb:96:62:92:cc:cb:57:00:71:30:
                    4d:7f:67:4c:b3:05:43:21:52:d1:1e:db:73:b4:8c:
                    3c:f7:d0:ce:1e:39:25:3a:2f:bd:26:ce:88:6c:05:
                    bc:cc:b9:37:4e:15:5f:7c:ab:d0:68:c9:80:1a:3b:
                    92:bc:d0:71:12:5c:46:5e:41:60:1f:3e:21:38:5a:
                    59:ed:94:15:03:ee:f5:2f:db:d5:fd:45:6f:4e:03:
                    4d:85:bc:49:1f:c6:4a:66:1c:cf:c4:38:8c:1d:b2:
                    c3:0a:63:4b:27:43:0e:41:ff:19:f2:bc:3a:68:61:
                    90:5f:b2:85:e8:cc:44:be:32:7c:20:9a:2d:02:83:
                    af:21:97:a9:1e:d9:1c:53:8a:ec:b6:66:23:2b:fe:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:BF:A1:AD:41:2C:BD:F2:78:F5:04:E7:75:4E:D9:D0:CA:D0:F5
            X509v3 Authority Key Identifier:
                keyid:59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/06u_oa1BLL3yePUE53VO2dDK0PU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.240.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:4c:3c:66:a5:48:d8:ff:8c:68:71:bd:6e:18:12:c7:fe:26:
         cf:41:ab:21:36:a3:20:a1:a7:f4:a7:e6:49:fd:a1:64:d2:01:
         48:a9:7f:2c:af:2b:db:03:ea:f1:2d:71:b9:ed:e4:ec:74:d0:
         c4:b2:57:f9:42:57:ed:db:c3:55:75:0e:23:53:94:e1:7f:80:
         c2:9d:1d:a8:be:15:a9:35:34:98:da:cf:d2:f3:cd:7d:05:0f:
         a8:1e:46:ad:fc:7b:f2:1b:23:1e:90:26:99:ff:45:28:8b:db:
         30:4c:bf:56:01:c1:77:c2:df:14:76:4f:78:04:69:b4:50:e4:
         12:e0:c0:44:8d:86:4c:ae:32:90:57:cf:23:20:86:6f:51:a4:
         94:e9:c2:41:43:b4:47:f3:c1:a9:d5:e9:e5:5d:f9:64:c0:37:
         2c:f2:46:ea:2c:1d:4d:ea:0f:28:51:bc:9f:7f:e2:1b:2f:08:
         eb:11:f6:47:9c:60:59:5e:77:41:8c:8d:6d:d2:97:11:ca:e3:
         90:d0:eb:c1:4e:66:e9:3f:60:be:36:7b:f3:cc:ff:69:e6:10:
         1b:07:a2:5a:b4:fe:19:ec:f5:e8:b0:9a:f8:33:26:2d:88:47:
         01:45:df:e4:7a:e3:5d:68:0d:ec:4d:00:8b:a5:6d:b1:ce:04:
         7c:37:44:5e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTYz
OUVBMjdERUQ0NjBGM0M5QjQzMjE2RUZDNTE5NTVGNjI4OUM5MB4XDTI2MDMwMTAx
MzUzNVoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoRDNBQkJGQTFBRDQxMkNC
REYyNzhGNTA0RTc3NTRFRDlEMENBRDBGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWhlTUGpm9A0rRA88FhD5Ju+RMD6vRukTI7XaBsXpLKHApUNtZZ
HtgVf/pJXjHWgWXMWfe3NgdbApFHIvgbCrmCRp5i50tjXHu+0WOiFCJgeE9McP+D
MFvYbUtp8gF21aGaFbOAOJVOrNcnVxjrlmKSzMtXAHEwTX9nTLMFQyFS0R7bc7SM
PPfQzh45JTovvSbOiGwFvMy5N04VX3yr0GjJgBo7krzQcRJcRl5BYB8+IThaWe2U
FQPu9S/b1f1Fb04DTYW8SR/GSmYcz8Q4jB2ywwpjSydDDkH/GfK8OmhhkF+yhejM
RL4yfCCaLQKDryGXqR7ZHFOK7LZmIyv+5EECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTTq7+hrUEsvfJ49QTndU7Z0MrQ9TAfBgNVHSMEGDAWgBRZY56ife1GDzybQyFu
/FGVX2KJyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjU1L1dXT2VvbjN0Umc4OG0wTWhidnhSbFY5aWljay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dXT2VvbjN0Umc4OG0wTWhidnhSbFY5
aWljay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTUvMDZ1X29hMUJMTDN5ZVBVRTUzVk8yZERLMFBVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcrwVDANBgkqhkiG9w0BAQsFAAOCAQEAwEw8ZqVI2P+MaHG9bhgSx/4mz0Gr
ITajIKGn9KfmSf2hZNIBSKl/LK8r2wPq8S1xue3k7HTQxLJX+UJX7dvDVXUOI1OU
4X+Awp0dqL4VqTU0mNrP0vPNfQUPqB5Grfx78hsjHpAmmf9FKIvbMEy/VgHBd8Lf
FHZPeARptFDkEuDARI2GTK4ykFfPIyCGb1GklOnCQUO0R/PBqdXp5V35ZMA3LPJG
6iwdTeoPKFG8n3/iGy8I6xH2R5xgWV53QYyNbdKXEcrjkNDrwU5m6T9gvjZ788z/
aeYQGweiWrT+Gez16LCa+DMmLYhHAUXf5HrjXWgN7E0Ai6Vtsc4EfDdEXg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:40 2026 by rpki-client