Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-w8pMn_C7Flef-E4T8anVY9Kzi0.roa
File:                     -w8pMn_C7Flef-E4T8anVY9Kzi0.roa (raw, json)
Hash identifier:          9KdjIo5GVztA2bSGY3zBqU/l7CNErc2q1cu24hqjNFo=
Subject key identifier:   FB:0F:29:32:7F:C2:EC:59:5E:7F:E1:38:4F:C6:A7:55:8F:4A:CE:2D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1636
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-w8pMn_C7Flef-E4T8anVY9Kzi0.roa
Signing time:             Tue 31 Mar 2026 08:01:23 +0000
ROA not before:           Tue 31 Mar 2026 08:01:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5686 (0x1636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB0F29327FC2EC595E7FE1384FC6A7558F4ACE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:65:90:e3:3a:40:bc:2f:04:91:f3:e5:23:
                    38:65:e4:fe:1c:7f:f1:a7:04:c5:9f:45:db:70:74:
                    8e:3c:98:7d:1e:00:dd:e7:fc:37:db:4a:5f:ff:ab:
                    bf:16:31:26:e6:d8:a1:6d:2c:11:7f:e4:af:f5:e0:
                    62:f3:4d:66:b4:5d:a0:73:be:ca:ec:87:35:19:b1:
                    24:c0:7c:19:3f:94:e7:e7:08:70:d7:4d:66:f4:5b:
                    9c:23:fc:ec:dc:9d:c9:04:a0:bd:af:b7:04:a1:8c:
                    95:4a:3d:7c:bd:fa:94:71:16:78:cf:52:01:9a:e2:
                    44:e4:89:5f:18:c0:1e:6b:09:34:86:4a:09:3c:17:
                    46:09:94:00:31:b6:52:a6:8f:9e:84:36:6a:8f:7a:
                    db:32:43:16:52:50:dc:7a:3d:69:3c:33:c1:78:06:
                    41:24:f6:d7:0d:5a:2c:2d:b1:bf:b9:33:81:c1:2e:
                    7a:ab:1f:2a:75:90:30:8d:2b:51:b8:3e:f5:1a:07:
                    34:fa:75:da:f8:80:eb:75:71:73:c5:f5:88:f3:28:
                    25:f3:2f:b3:5e:66:c5:ef:87:ea:07:c5:aa:ce:85:
                    60:03:c7:c0:0c:f1:8d:ef:a3:0c:7f:bc:78:a1:ed:
                    a4:88:a5:20:dc:f3:55:7b:12:02:fd:f3:94:73:54:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:29:32:7F:C2:EC:59:5E:7F:E1:38:4F:C6:A7:55:8F:4A:CE:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-w8pMn_C7Flef-E4T8anVY9Kzi0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:e7:87:db:23:fd:88:62:a4:2c:25:eb:13:52:d4:f9:68:1f:
         25:49:8a:3b:31:3e:6d:bd:2b:03:3c:ef:7a:ce:2e:a4:9f:db:
         ab:c9:63:2b:cb:f7:bd:6e:5e:68:f2:70:fe:20:d9:d9:35:1c:
         9c:4d:7a:94:98:6f:4e:df:28:20:d4:84:fb:03:14:77:9f:a0:
         7a:2c:26:63:5c:01:5f:00:23:a4:9a:c2:35:43:ac:17:8a:76:
         f3:1f:b5:b2:ae:50:e0:04:f8:e3:fb:72:68:d5:70:61:74:47:
         0f:5a:15:13:b2:47:28:9d:be:dc:1c:6b:f6:42:d8:fb:b9:63:
         31:29:b9:6b:f6:ba:f6:2c:5f:51:0b:19:b9:1e:56:1e:84:0a:
         26:53:11:88:b4:42:b9:91:25:f7:4c:c9:06:6e:c2:62:3c:a0:
         61:ef:7d:f6:57:fb:26:89:3f:88:63:29:0d:85:6d:fd:e9:9f:
         8a:83:ba:40:25:9b:05:93:c2:f6:24:39:8f:07:93:38:7c:6e:
         12:af:56:67:86:3a:ad:4b:c3:57:d2:28:ce:9d:26:9e:1a:cd:
         a1:4e:86:21:7b:a8:0d:d1:be:7e:6c:78:d0:2f:ce:40:bb:f5:
         ec:ef:c4:3f:e1:dd:6c:40:62:9a:32:f7:91:2f:59:87:61:49:
         c0:48:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:08 2026 by rpki-client