Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qQGnQJNnfC6dNL4BzQ73blJfgG4.roa
File:                     qQGnQJNnfC6dNL4BzQ73blJfgG4.roa (raw, json)
Hash identifier:          VWZcq7UdjBiZA7KML7DhG+TE+Rgqar2q0h6xVZFZvEk=
Subject key identifier:   A9:01:A7:40:93:67:7C:2E:9D:34:BE:01:CD:0E:F7:6E:52:5F:80:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       105A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qQGnQJNnfC6dNL4BzQ73blJfgG4.roa
Signing time:             Sun 01 Feb 2026 01:32:47 +0000
ROA not before:           Sun 01 Feb 2026 01:32:47 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4186 (0x105a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb  1 01:32:47 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=A901A74093677C2E9D34BE01CD0EF76E525F806E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:01:7d:d0:09:6f:00:d2:32:e2:30:4e:f2:
                    a7:9d:02:52:6c:60:44:4f:7c:6d:43:a7:67:d1:f6:
                    f5:0d:12:4c:0f:4d:2e:49:74:ab:75:db:a8:88:a5:
                    af:f8:b4:31:9d:92:32:0d:d2:05:58:2f:af:e0:cd:
                    19:f5:d8:b8:15:5b:ca:bb:df:3c:63:98:8f:a1:ae:
                    9c:dd:24:6d:14:5b:2a:a8:2a:e9:c5:08:5e:45:35:
                    43:8e:25:32:35:a6:15:17:b9:8d:c8:16:44:91:a7:
                    7d:6c:1e:d8:ba:04:d9:87:e6:d9:28:d4:16:27:7c:
                    ea:06:b9:5a:59:be:42:28:dd:96:67:b8:40:ef:95:
                    7d:29:a2:c4:71:dc:a5:28:cd:f5:57:17:c3:42:53:
                    e0:f9:be:8d:3c:fa:4f:de:3d:3d:82:f5:dc:cb:29:
                    5d:5d:ee:ee:11:f5:cc:c2:cc:1b:fd:52:ba:ba:cf:
                    21:66:3c:f3:12:26:b5:5a:c1:88:c1:5e:c3:1f:98:
                    0a:46:8c:58:64:96:7d:35:ad:00:a5:7d:e9:09:9f:
                    cf:c3:28:3d:0a:02:b5:41:86:f3:09:62:1b:92:25:
                    73:d5:35:96:34:31:e5:69:1f:a3:52:6d:4f:ea:43:
                    98:bf:51:2e:f0:71:be:1c:8f:fa:07:3e:84:b2:79:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:A7:40:93:67:7C:2E:9D:34:BE:01:CD:0E:F7:6E:52:5F:80:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qQGnQJNnfC6dNL4BzQ73blJfgG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5e:0b:c8:ff:9a:8b:ae:80:3f:2d:ca:7e:89:c3:40:c5:f5:
         3e:5b:72:47:a6:c9:b4:ed:90:0a:be:67:91:c2:8f:03:a4:d4:
         8a:74:01:99:4a:5f:9d:e3:46:56:40:93:cd:56:51:35:61:6e:
         61:a6:6f:be:4d:ad:69:77:25:fb:00:24:14:49:35:ba:20:d8:
         47:6c:4c:91:ec:2e:83:a1:4f:9c:b9:f1:bb:ad:49:61:46:d2:
         4c:45:fb:c9:be:a0:0a:84:35:c0:95:dc:32:15:4e:14:8f:23:
         c9:7e:67:ee:cc:ed:0a:c9:86:b9:27:73:99:61:6e:e8:05:35:
         52:0f:6f:95:d9:ae:5a:7d:a9:8b:52:a4:5d:01:f4:50:fe:a0:
         cf:cd:c5:7f:77:96:13:4b:41:22:57:16:bc:39:77:e8:3c:0b:
         34:25:40:ae:39:78:89:18:93:5e:ae:4b:73:9b:84:a2:62:45:
         6b:6b:ee:45:08:25:2c:cc:ca:5e:4b:53:d9:d1:10:e2:ec:25:
         57:fd:52:5c:d9:56:75:7f:40:3e:83:29:49:c7:7d:76:ec:df:
         f0:0c:3b:61:95:12:e1:73:e4:3b:12:f0:d3:c8:32:b4:f6:da:
         4e:07:15:8c:25:18:d6:c7:34:80:7d:f6:be:b6:e4:cd:90:c6:
         f3:5e:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:51 2026 by rpki-client