Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1QveQBKxnF3YW6VSJCWUGKAxmp8.roa
File:                     1QveQBKxnF3YW6VSJCWUGKAxmp8.roa (raw, json)
Hash identifier:          MZQfvsP2ZSVvXm5aZUMJtsOqDcUThAqqy97uF7CKt9A=
Subject key identifier:   D5:0B:DE:40:12:B1:9C:5D:D8:5B:A5:52:24:25:94:18:A0:31:9A:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       165B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1QveQBKxnF3YW6VSJCWUGKAxmp8.roa
Signing time:             Tue 31 Mar 2026 08:01:39 +0000
ROA not before:           Tue 31 Mar 2026 08:01:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5723 (0x165b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D50BDE4012B19C5DD85BA55224259418A0319A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:31:83:d3:d2:84:09:a8:08:bb:8d:97:f9:
                    72:3a:29:af:d7:05:e7:11:dd:dd:1a:a7:03:67:e8:
                    d7:3b:09:16:97:19:0a:ae:27:c1:03:73:cf:86:dd:
                    ce:72:3f:cd:5f:8d:4e:fd:f6:f2:ab:cb:61:11:88:
                    1b:aa:d0:c5:20:06:b5:23:91:74:5d:7e:05:cd:00:
                    36:3a:bc:10:4d:e0:61:8b:b5:16:b2:7f:4a:2a:04:
                    af:47:a0:48:b8:d3:e2:97:32:b9:98:61:a0:58:09:
                    b8:fa:47:15:42:cb:52:45:5e:7e:10:64:33:ec:d0:
                    c2:ed:08:66:4f:01:77:4c:d7:ac:b9:36:35:f7:59:
                    42:41:9d:4f:42:f7:1d:bf:ad:2f:e6:44:4a:e1:b6:
                    ce:c6:62:06:f3:93:1d:89:b2:15:b4:ed:c3:74:1f:
                    bd:f1:e1:e9:d6:24:85:13:e8:3c:c7:65:45:40:49:
                    f1:e0:af:25:cb:e3:14:59:26:0b:ae:be:1b:8f:32:
                    0a:cb:a9:77:50:b2:ba:a1:a5:05:27:5b:78:9a:a4:
                    16:f6:6e:62:c7:db:bc:0f:99:1f:33:f9:59:9a:33:
                    95:12:a3:26:32:04:43:cc:4f:61:a5:0b:66:7a:33:
                    ef:c8:52:94:da:28:34:c2:f6:4d:bb:ad:d3:8d:99:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:DE:40:12:B1:9C:5D:D8:5B:A5:52:24:25:94:18:A0:31:9A:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1QveQBKxnF3YW6VSJCWUGKAxmp8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:2c:2c:b5:78:f1:69:be:90:9c:2d:a9:38:9e:b2:f7:18:
         8c:ca:1e:28:6d:63:d3:28:9a:98:1c:93:42:02:b7:75:e4:1c:
         f9:33:15:09:1f:49:86:28:a2:9c:9f:df:33:ca:88:20:16:9a:
         11:3d:6f:4d:4b:cd:ef:0b:c5:73:d3:d0:ac:47:af:9e:75:dc:
         93:ff:cd:08:4d:2b:2d:dd:0a:ea:39:a7:09:f8:1e:93:4c:46:
         42:e5:ee:0b:f2:62:06:3a:16:7b:59:ed:9f:fb:ef:86:09:15:
         d9:1d:36:25:48:9a:e6:3c:17:6b:e5:6f:c2:f7:0a:37:64:46:
         df:fc:aa:c0:e1:82:77:2b:30:3a:12:2d:a5:3f:0a:aa:e5:c7:
         fd:39:0e:84:31:3a:38:b2:ac:20:3d:b8:45:78:be:a9:23:9d:
         d0:b6:73:9a:a9:51:f3:8b:b9:94:d0:43:f0:7c:82:32:c2:de:
         34:ba:95:5b:97:f9:c5:cd:77:46:0f:0c:01:26:1e:56:1e:3f:
         f2:a4:5e:8d:ab:0b:e4:64:a2:1a:0b:4f:f7:84:11:2c:90:2e:
         46:52:33:f7:37:29:19:ba:99:cb:c5:e3:14:ff:8d:34:9c:35:
         89:77:5c:45:85:32:89:77:a6:5e:c1:e3:a3:17:03:7f:ad:75:
         26:01:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client