Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
File:                     0CpLcM9hKrFzgls81of_4CKDz4o.roa (raw, json)
Hash identifier:          d+CXawiaEeZfDc5G1vKy1kGjrVHoy7VVHdZxfRTT/HM=
Subject key identifier:   D0:2A:4B:70:CF:61:2A:B1:73:82:5B:3C:D6:87:FF:E0:22:83:CF:8A
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       6D
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
Signing time:             Sun 01 Feb 2026 01:32:27 +0000
ROA not before:           Sun 01 Feb 2026 01:32:27 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Feb  1 01:32:27 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D02A4B70CF612AB173825B3CD687FFE02283CF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:e9:bc:bb:c8:1e:9f:4c:fe:df:57:3c:98:
                    1d:22:55:54:76:34:17:b4:73:62:1c:27:ad:2e:cd:
                    b9:2d:f1:43:ce:dd:c7:1c:6a:48:c6:84:73:30:27:
                    0d:66:dc:b9:c2:fd:ee:b1:1d:f0:20:53:52:2d:e4:
                    f1:88:8b:9a:9c:11:f6:b1:6c:80:7a:5c:9d:ba:60:
                    95:bc:28:10:0d:bb:a4:ea:ff:61:78:91:e0:3d:8d:
                    cc:2e:51:9e:b7:81:99:31:94:ce:3b:9d:00:d0:ce:
                    a6:93:f5:cc:c4:0d:7e:30:62:0e:b5:d3:76:0b:97:
                    39:aa:22:f1:f9:fe:ec:45:b6:82:aa:fd:96:e3:fd:
                    0c:da:cd:79:3d:78:0a:8a:b9:e8:28:87:29:34:1e:
                    86:8b:19:fe:73:bf:13:76:59:e5:d9:18:89:a0:b8:
                    45:bd:10:78:86:fa:1c:70:01:62:d7:04:3b:6c:25:
                    5a:c4:af:85:4e:4c:60:1e:43:af:3f:61:15:3c:d2:
                    5a:23:dd:37:03:3b:8c:30:9f:59:41:70:ee:09:b3:
                    a5:89:c4:47:a8:e5:ff:cc:d5:9b:b8:72:1a:1c:14:
                    64:7a:0c:5b:ec:f1:00:8e:8e:92:e1:93:30:1c:0d:
                    52:60:59:53:93:ce:f3:5f:7e:d8:8d:28:ca:6b:e5:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:4B:70:CF:61:2A:B1:73:82:5B:3C:D6:87:FF:E0:22:83:CF:8A
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:48:09:08:e4:c9:8c:0c:38:50:57:59:64:90:80:4f:10:af:
         64:7a:0d:e9:30:fc:fa:29:2c:b3:5a:56:ff:ae:44:1e:dc:31:
         eb:c5:ef:31:f2:72:e6:28:7f:9c:0a:1d:ef:ee:41:09:55:59:
         97:ee:2f:c1:b6:18:cb:1f:31:82:c6:4f:29:46:dc:b0:93:ad:
         d5:c6:8e:cf:78:61:78:13:6d:35:3d:24:97:55:66:f0:36:7c:
         09:ca:0e:1b:b1:54:92:b5:52:1a:c4:9b:80:06:4a:ab:0d:1c:
         40:a5:c9:52:ef:6d:37:75:45:ee:ee:62:91:4d:cc:8d:91:ed:
         37:5c:3d:04:ef:69:9f:f1:9e:e1:d4:f0:0b:95:02:d2:87:01:
         31:50:e9:7a:05:17:4e:b4:41:2e:88:40:30:9d:cc:84:0c:3c:
         c9:e6:d0:ba:a8:56:b7:f0:34:08:fa:79:fe:59:16:58:00:99:
         76:e4:07:8c:aa:b4:ce:ee:0a:82:54:70:a4:94:9b:d7:f0:a8:
         14:e8:fd:5c:4a:c2:17:a0:db:ef:33:c5:38:5a:9c:09:d5:9f:
         b7:d4:9d:f8:a3:c5:61:ce:eb:f6:05:f4:70:ba:42:9e:9e:49:
         c5:c8:23:59:70:95:de:7b:e1:46:c2:19:ee:80:59:b9:57:32:
         51:5f:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:16 2026 by rpki-client