Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-7RCJ7XoyH39cpcDUg0MdZMg-zI.roa
File:                     -7RCJ7XoyH39cpcDUg0MdZMg-zI.roa (raw, json)
Hash identifier:          eVurdDPxUyzA7KID60B0rg9wpRbW/zic8E1n+vimTzI=
Subject key identifier:   FB:B4:42:27:B5:E8:C8:7D:FD:72:97:03:52:0D:0C:75:93:20:FB:32
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       105B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-7RCJ7XoyH39cpcDUg0MdZMg-zI.roa
Signing time:             Sun 01 Feb 2026 01:32:48 +0000
ROA not before:           Sun 01 Feb 2026 01:32:48 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4187 (0x105b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb  1 01:32:48 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=FBB44227B5E8C87DFD729703520D0C759320FB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:f3:c1:67:f5:3a:dc:3f:00:a7:a5:c9:6a:
                    dd:00:37:02:9f:3a:9b:5d:8b:85:0d:a9:ea:64:e1:
                    19:f8:48:e9:e2:f6:33:8a:9f:32:3e:1f:37:ae:c4:
                    40:7c:d5:be:31:f6:b9:d0:cf:2c:89:19:b9:b8:bb:
                    39:44:a1:a7:e9:f7:01:17:3f:04:a1:d0:d2:05:50:
                    59:0f:e2:f3:c0:43:b8:10:f3:f1:4b:5d:8d:0c:df:
                    80:a8:0f:54:e7:08:41:a5:e3:4e:29:d9:fd:1c:6d:
                    b4:20:fb:67:bd:0a:66:63:a0:7d:f2:b2:a2:40:eb:
                    41:96:f4:cd:24:8f:b6:b9:26:76:95:80:58:b6:e2:
                    5e:b5:19:4c:12:bb:ea:96:c9:7c:76:e0:83:9e:0b:
                    d8:b3:8c:d2:da:fe:1c:da:d5:8e:18:a6:6b:f8:42:
                    f4:43:70:82:8f:4d:6d:49:8d:76:e2:f7:43:18:e4:
                    88:5f:7b:de:77:7b:38:4a:85:fa:40:99:e3:5a:b0:
                    32:1f:8b:1e:17:d9:33:a1:b6:f5:80:2b:12:76:50:
                    06:05:40:25:f3:6f:39:9e:96:e5:34:cf:f6:6a:04:
                    db:65:87:24:24:02:08:09:16:db:09:68:79:8b:2b:
                    38:aa:73:0b:8e:7f:c2:50:18:3d:26:52:73:87:ab:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:42:27:B5:E8:C8:7D:FD:72:97:03:52:0D:0C:75:93:20:FB:32
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-7RCJ7XoyH39cpcDUg0MdZMg-zI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:84:21:b1:0c:f2:55:d8:09:07:be:93:0f:c6:f0:ce:02:7d:
         a8:c9:a3:94:83:58:18:58:56:ec:f6:88:96:34:d8:18:9e:73:
         2f:c1:97:4b:52:30:23:db:27:8b:d9:66:0f:77:fe:d3:2f:ac:
         fe:12:20:16:46:08:9b:a2:3c:5b:db:d3:e8:ba:25:9d:33:05:
         2f:eb:ed:7f:af:d8:58:39:63:2f:4d:5c:be:b1:23:97:89:d2:
         3d:ca:3d:4d:ed:bb:bb:f7:dd:17:95:66:14:c1:7b:fe:9f:60:
         f3:e4:87:c2:0a:12:09:5e:83:ad:09:5c:52:fb:a9:2a:94:8b:
         17:5b:d2:f1:80:cc:6e:10:40:57:f9:26:73:4e:68:6d:55:c8:
         b5:44:f9:45:5d:20:e2:72:e9:ad:32:d3:a6:40:ae:e9:7c:82:
         aa:dd:06:24:d0:47:99:d6:43:3d:dd:7e:0b:7e:66:44:d9:83:
         05:26:b7:15:28:ec:c0:51:6c:57:2c:d1:36:26:aa:3b:73:88:
         aa:7f:58:e9:ee:91:98:9f:27:3c:51:b2:ba:e1:fe:39:98:7d:
         cc:90:a6:73:c5:da:b2:da:ba:ee:0e:78:08:ca:72:8d:c5:83:
         88:3a:8a:8d:ad:31:8c:f2:76:9e:eb:ad:14:50:ae:55:b0:42:
         bf:8c:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:10 2026 by rpki-client