Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LzlIpQFBhdDFX410Us4dsO3woI.roa
File:                     6LzlIpQFBhdDFX410Us4dsO3woI.roa (raw, json)
Hash identifier:          TPwY554v1Ypy28rF5EUw/aWUeZifp6QpnPbq2eexu2g=
Subject key identifier:   E8:BC:E5:22:94:05:06:17:43:15:7E:35:D1:4B:38:76:C3:B7:C2:82
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       168A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LzlIpQFBhdDFX410Us4dsO3woI.roa
Signing time:             Tue 31 Mar 2026 08:01:59 +0000
ROA not before:           Tue 31 Mar 2026 08:01:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5770 (0x168a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E8BCE5229405061743157E35D14B3876C3B7C282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:b4:73:e7:9a:44:c5:7e:b0:fc:64:3b:d2:
                    74:f8:06:65:e8:ce:75:26:58:7b:28:71:e9:a5:d9:
                    b9:82:7b:cf:9a:6f:3f:4e:b5:c8:8f:6b:08:da:98:
                    da:ba:1c:fb:23:dd:55:d2:c5:0b:b3:8d:af:2b:c6:
                    e8:b3:53:70:b2:04:6d:53:9e:0a:da:86:10:a3:51:
                    1a:d1:9e:91:09:52:d9:16:ae:7d:09:8c:d7:d3:24:
                    a6:dc:26:fd:c4:ee:38:05:2f:bc:85:14:72:9b:34:
                    09:2e:14:e3:0b:b4:c0:e5:84:75:4f:3b:92:72:8f:
                    a4:48:10:b7:a7:ea:67:21:3c:74:ae:16:e3:74:c5:
                    08:19:3a:af:81:83:ac:5f:fa:e4:a0:f6:c7:10:71:
                    9d:ba:95:c6:56:8c:7e:e2:52:1d:6e:6d:ad:d6:17:
                    9e:3c:ee:88:3d:34:24:3b:67:17:23:49:e4:f8:bc:
                    4c:2b:bb:bc:c2:fa:0c:1a:66:7d:cd:60:6b:93:01:
                    43:cb:49:79:1c:2c:45:56:73:25:9b:6b:88:d3:98:
                    ac:56:c0:01:cb:ed:55:39:51:6a:60:5c:0d:e5:98:
                    98:0f:9d:8e:5e:51:76:fc:33:97:63:da:82:c8:42:
                    2b:ba:4b:58:7e:04:ab:f1:fc:d7:37:50:b5:7f:82:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:E5:22:94:05:06:17:43:15:7E:35:D1:4B:38:76:C3:B7:C2:82
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LzlIpQFBhdDFX410Us4dsO3woI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:19:54:90:8f:23:fa:17:0d:86:b9:bf:a8:81:a7:65:a6:
         01:76:94:46:3f:ec:e4:a9:ec:5c:b6:15:6d:11:34:8a:1f:a1:
         bc:7f:02:6c:71:11:80:f3:5d:dd:35:03:e5:42:a7:6c:b2:b1:
         23:80:c9:87:73:4d:44:da:9a:25:4f:92:c2:39:45:5c:b6:ee:
         77:51:ba:2b:fa:34:a9:f7:7e:b8:63:fa:d8:4f:b6:ba:c8:39:
         d9:58:ea:4b:73:da:42:1a:6c:f7:d5:61:7e:8e:d0:d6:94:3a:
         09:1f:7f:51:e3:de:15:56:aa:96:fa:2b:73:0b:33:35:8b:dd:
         ad:75:e8:fa:5b:1b:97:2b:5c:0b:44:73:54:ca:12:d6:c0:94:
         06:64:08:68:c3:27:ca:c9:fd:f1:c7:51:96:36:7c:09:36:2f:
         7d:16:69:71:0f:bf:f5:df:23:68:65:87:74:9d:6f:ba:e4:e2:
         6b:77:36:22:ea:21:09:82:7f:9d:02:c8:49:12:7c:5c:74:d1:
         96:63:fc:13:2a:47:ed:a1:09:18:cc:e1:bd:49:98:9c:9d:5d:
         77:56:4f:fb:14:66:db:58:79:26:3a:ba:a8:52:0d:fc:42:fe:
         46:56:3b:90:5a:8f:f7:ad:80:23:44:64:de:58:ec:16:c7:e2:
         8e:2b:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:29 2026 by rpki-client