Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6Nyk7kRVRZFZ47Z8rLJT1bQN2Lc.roa
File:                     6Nyk7kRVRZFZ47Z8rLJT1bQN2Lc.roa (raw, json)
Hash identifier:          MVvOLOeXDzMFhmcUUvh60g4wmqDt19L9cieMFWzHqhM=
Subject key identifier:   E8:DC:A4:EE:44:55:45:91:59:E3:B6:7C:AC:B2:53:D5:B4:0D:D8:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1641
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6Nyk7kRVRZFZ47Z8rLJT1bQN2Lc.roa
Signing time:             Tue 31 Mar 2026 08:01:28 +0000
ROA not before:           Tue 31 Mar 2026 08:01:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5697 (0x1641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E8DCA4EE4455459159E3B67CACB253D5B40DD8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:c1:c2:fc:2e:f0:a8:b0:07:08:03:84:de:
                    0f:bc:96:d0:ad:3d:0d:18:d5:1c:d3:97:f6:7e:bf:
                    c9:da:6e:38:40:e4:da:4b:62:ed:8e:7e:5d:9c:0c:
                    7f:61:e0:a9:1f:86:0b:78:ea:96:b0:5c:4a:c4:1a:
                    5b:77:f9:b3:d8:ed:67:45:7d:4b:54:72:36:16:39:
                    a0:61:6d:a0:b1:65:65:3b:26:3c:e0:40:bb:ec:3e:
                    c6:77:3c:e9:d0:d0:b4:25:2e:a6:75:61:94:73:1c:
                    75:5e:35:38:68:21:3c:98:35:fa:06:3d:0c:bb:7b:
                    18:7a:5a:f6:32:b2:2d:bd:6b:35:94:46:a5:d0:45:
                    24:23:3a:1b:3d:7f:15:39:3c:bb:32:bf:5e:01:21:
                    b4:cf:07:65:4a:48:97:89:bc:62:d9:20:e8:c0:fe:
                    ed:a3:2f:ee:33:de:f6:db:34:e8:24:1c:6b:23:e1:
                    db:f8:e5:70:2e:7e:73:bb:3c:ae:7a:51:c7:80:e5:
                    c6:81:a9:02:74:ef:d8:72:da:2e:85:1c:4b:90:b3:
                    2f:f4:d4:6b:b2:66:09:a8:af:bd:80:27:8d:a9:85:
                    13:a6:76:c7:88:16:55:9b:05:c8:b3:ee:f7:47:3f:
                    00:bc:0f:8a:1a:0f:5d:75:22:6f:f2:74:ba:fc:f4:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:A4:EE:44:55:45:91:59:E3:B6:7C:AC:B2:53:D5:B4:0D:D8:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6Nyk7kRVRZFZ47Z8rLJT1bQN2Lc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:18:a3:73:8c:ac:78:21:8e:14:ce:df:f5:a7:de:99:03:
         53:e9:e2:84:1d:cf:d5:7f:51:be:9f:58:e5:be:97:a5:2a:de:
         ad:b7:35:3b:cc:01:22:ee:bd:42:a4:f3:8b:f4:99:90:2b:69:
         9c:c9:8d:9c:58:c6:2e:e9:84:b1:55:c9:15:6e:ef:c2:ba:0a:
         da:6d:ec:56:4d:be:bd:98:29:ad:45:30:44:87:02:54:0d:38:
         24:5f:b5:f5:1a:b3:02:f0:ae:fd:26:dc:65:85:3f:01:42:8d:
         87:6a:32:fb:69:31:0e:40:e1:4d:8c:56:bf:ed:54:d6:74:88:
         0c:da:80:0b:27:65:b1:93:f9:e8:0f:eb:af:e0:28:34:a2:35:
         77:fa:38:9e:43:aa:75:e1:95:11:e9:ba:b0:35:5b:72:4d:c3:
         1f:6e:c6:28:59:0a:6b:eb:1e:04:47:7e:f8:3f:5a:ba:9d:bf:
         b2:6d:3d:47:f3:f5:43:df:58:27:44:d3:e2:f4:23:d7:a8:4a:
         ae:be:50:e1:85:38:b2:58:64:f3:b0:e7:ff:7b:58:54:d6:ac:
         99:b4:52:e6:38:95:1e:42:ca:43:c6:61:a4:12:fd:7a:55:ff:
         c3:43:64:18:75:fa:1d:d6:71:36:82:f4:84:1f:79:d0:5e:be:
         64:c3:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:10 2026 by rpki-client