Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7Qp_GxpLaOQJGsnIHqcE2VRqoOI.roa
File:                     7Qp_GxpLaOQJGsnIHqcE2VRqoOI.roa (raw, json)
Hash identifier:          51v/D9RR1mZeHeoq2/vc7h0MIOrAkfw2xEsRspFgqS4=
Subject key identifier:   ED:0A:7F:1B:1A:4B:68:E4:09:1A:C9:C8:1E:A7:04:D9:54:6A:A0:E2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15E6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7Qp_GxpLaOQJGsnIHqcE2VRqoOI.roa
Signing time:             Tue 31 Mar 2026 08:00:39 +0000
ROA not before:           Tue 31 Mar 2026 08:00:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5606 (0x15e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED0A7F1B1A4B68E4091AC9C81EA704D9546AA0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:53:2e:16:56:e1:b8:c7:88:6d:29:bc:80:
                    3f:ea:e4:19:1f:b1:e4:03:03:a6:a2:f5:97:e0:58:
                    8d:22:53:06:38:76:e1:cd:d4:d4:9c:b3:ec:e7:a4:
                    f4:6c:77:3a:7e:5c:27:31:d8:9f:bd:44:b0:b2:cd:
                    a4:a0:9f:af:8e:01:c1:49:8c:1f:55:32:1e:4e:3d:
                    35:40:da:df:77:d0:1b:d3:31:f6:75:ed:3c:0a:a4:
                    90:17:36:7e:1a:e1:da:db:07:75:3d:c5:89:a5:5e:
                    47:79:17:5f:85:f6:ba:e9:ed:ee:3c:15:35:2c:f5:
                    7b:91:38:ad:64:8b:3a:3d:e4:a1:84:c3:94:84:9f:
                    f4:02:89:27:b7:c3:ec:3f:ea:ac:8e:57:ff:db:62:
                    5a:e3:b0:1e:be:cd:65:86:a8:4e:96:53:f6:ff:54:
                    3c:6f:d3:73:b4:97:9d:27:3a:50:95:b0:e2:48:d3:
                    ee:0d:00:00:02:50:83:ea:98:f6:b0:79:fb:15:fa:
                    09:fc:2f:04:37:3a:a5:19:1c:a2:37:8b:b4:62:e5:
                    47:91:e1:95:89:88:ab:16:b0:39:6e:ab:f2:25:8f:
                    8a:7c:ac:bf:cd:93:60:81:ba:34:70:77:d5:5d:a7:
                    be:73:3a:5c:1e:1a:4c:fc:3d:5d:b9:61:e3:4e:b0:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:7F:1B:1A:4B:68:E4:09:1A:C9:C8:1E:A7:04:D9:54:6A:A0:E2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7Qp_GxpLaOQJGsnIHqcE2VRqoOI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:a2:65:f0:7f:8a:ea:77:94:4a:96:bf:ee:88:48:3b:66:
         7a:95:af:ef:29:14:ec:70:c4:1a:b0:76:3b:c1:5c:16:3f:5f:
         ea:16:4f:da:bc:3c:d6:f5:59:01:a9:33:20:eb:37:fd:f3:82:
         e0:46:df:32:a9:ef:50:fa:a7:67:ba:46:74:c2:26:72:33:bb:
         22:70:59:88:0d:82:c5:01:d1:fb:90:7c:da:5f:3f:a1:64:14:
         02:15:43:3a:2a:15:37:da:30:4c:50:c3:76:45:27:3f:cc:47:
         c2:ab:c0:c4:b6:2e:07:ec:d0:9a:e5:c1:23:9c:ae:71:d1:af:
         e7:0c:c8:25:09:84:7e:7a:bc:70:93:33:04:26:92:b9:b6:04:
         36:72:24:a3:b0:65:27:b3:84:04:f6:3f:19:d9:d3:a3:1c:78:
         ef:8b:f5:09:41:ba:01:54:0a:bb:7c:12:0c:3d:2c:96:c0:61:
         33:80:4b:c8:30:2d:4d:87:da:22:ca:7a:95:93:88:9f:bf:fa:
         de:c7:10:d4:71:18:8f:8c:26:bf:f8:d8:fe:f2:b2:a0:d4:0d:
         4f:78:bb:b9:09:ce:18:87:e8:72:88:fa:96:13:37:38:13:65:
         5d:f6:92:a1:04:a8:05:d6:e7:9d:d3:15:49:11:77:a9:22:3f:
         4c:b4:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client