Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4iJeWZgiA7f0yTE--yBn33y_Sro.roa
File:                     4iJeWZgiA7f0yTE--yBn33y_Sro.roa (raw, json)
Hash identifier:          FUF2iy+jWRxX1aW9L5fnyxhwaKfaEt8UTbVqSP1iG3s=
Subject key identifier:   E2:22:5E:59:98:22:03:B7:F4:C9:31:3E:FB:20:67:DF:7C:BF:4A:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1375
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4iJeWZgiA7f0yTE--yBn33y_Sro.roa
Signing time:             Tue 31 Mar 2026 07:55:37 +0000
ROA not before:           Tue 31 Mar 2026 07:55:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4981 (0x1375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E2225E59982203B7F4C9313EFB2067DF7CBF4ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:69:3f:11:64:86:ee:6b:10:85:e6:a6:9f:
                    a1:c0:80:92:0d:f9:3b:d4:7c:2e:fc:50:e2:52:13:
                    8e:0f:6d:fe:f1:d6:2f:5a:27:71:97:0d:32:04:4f:
                    7b:99:e7:86:cb:b1:f5:f8:70:f7:a8:61:e8:25:a3:
                    dc:6d:53:50:1b:c2:4c:ab:28:cb:dd:51:b4:b2:60:
                    c9:4e:a3:76:fe:7c:e7:68:31:cc:7b:96:0a:0c:f5:
                    d9:b7:c7:f6:b6:f1:4e:23:a4:10:2d:d6:0c:cb:81:
                    a7:2b:e6:01:97:13:88:52:ac:d5:ec:fc:0c:f3:7c:
                    74:df:fc:10:b8:c2:e7:b6:54:ec:22:9f:97:be:63:
                    a0:0e:99:fc:da:45:2c:f2:5c:8a:94:9e:79:e8:b4:
                    e9:f1:9d:4b:96:8f:8d:94:b3:2c:33:20:d9:73:d9:
                    50:f5:d7:21:4a:75:5c:17:b0:0c:6b:61:e0:fc:af:
                    22:14:e5:eb:5f:23:1e:d9:47:c9:00:19:63:c1:2e:
                    98:c8:44:03:7a:76:f8:7f:48:38:0a:c6:24:8b:9e:
                    25:2a:7c:a1:32:8f:9c:60:18:20:76:07:fc:1a:bb:
                    c9:86:ee:22:ac:b0:08:5a:d2:67:79:fd:2a:94:f1:
                    b1:67:c4:27:9b:ea:24:4d:84:29:68:31:3f:5c:3c:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:5E:59:98:22:03:B7:F4:C9:31:3E:FB:20:67:DF:7C:BF:4A:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4iJeWZgiA7f0yTE--yBn33y_Sro.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:e0:36:37:37:29:c7:d8:a8:f3:94:e5:f0:b7:3d:d8:13:2f:
         84:b7:b4:6a:c6:56:c5:c7:b0:3c:38:cf:9e:ba:d5:d8:a8:62:
         f7:4f:22:2c:7a:d9:80:38:fe:e9:48:97:d5:95:90:be:a1:d0:
         d8:3d:f6:23:c9:11:a9:ff:0d:c2:77:f1:a0:27:df:ff:e3:ec:
         a9:b2:5f:90:15:fe:a4:2d:d2:97:c0:5e:29:78:f8:d7:16:17:
         69:d9:3d:94:59:56:df:ec:4e:c1:8e:57:71:25:37:af:5a:3d:
         bf:c4:50:67:db:13:d1:0e:bd:e7:b8:df:19:8f:4b:ff:cf:e5:
         30:20:99:86:87:1b:0c:e6:61:10:30:6c:9d:04:fc:70:06:f2:
         4f:cc:03:a8:8b:be:6a:0a:70:36:0e:84:07:b7:1b:4a:78:a8:
         e4:96:33:ae:d4:1e:70:d7:47:6a:5a:d8:73:40:18:1d:7e:c5:
         e3:28:17:3c:d7:46:59:94:d9:4e:9b:cc:f9:50:42:88:14:f3:
         a5:48:04:fd:c5:f2:5b:12:13:f0:ca:8a:37:b6:be:cc:6e:e4:
         ce:3e:0e:77:dc:ae:9b:65:f9:1a:7d:c0:68:73:57:a1:ac:3b:
         3d:54:74:aa:80:eb:82:8d:24:01:a4:20:ca:ab:e6:c2:3c:04:
         1d:44:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:22 2026 by rpki-client