Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9B_BTlzVsJbvKlSfVho2k1HR2Vg.roa
File:                     9B_BTlzVsJbvKlSfVho2k1HR2Vg.roa (raw, json)
Hash identifier:          2Urd37ow+ZbY5qZdUwAUupFbcLiCFhJ3IDaV2pSVgFA=
Subject key identifier:   F4:1F:C1:4E:5C:D5:B0:96:EF:2A:54:9F:56:1A:36:93:51:D1:D9:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9B_BTlzVsJbvKlSfVho2k1HR2Vg.roa
Signing time:             Tue 31 Mar 2026 08:04:13 +0000
ROA not before:           Tue 31 Mar 2026 08:04:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6049 (0x17a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F41FC14E5CD5B096EF2A549F561A369351D1D958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:e0:91:42:ec:c6:fb:41:f0:58:37:98:ba:
                    df:63:0c:1e:dd:40:1d:33:c7:4a:08:52:f0:ce:be:
                    35:2f:4e:c5:0a:d4:fc:d4:29:1c:f5:42:fd:57:bc:
                    33:8f:be:e1:3c:d0:10:9b:21:e7:44:ab:02:63:f7:
                    2f:c4:b9:1a:b2:b4:8c:ff:d7:c0:da:4f:6f:a4:4c:
                    ff:b8:e3:fe:05:8a:9f:9a:a4:3a:96:2e:7e:c5:5d:
                    8f:37:9d:8b:21:86:ad:28:0a:f6:d7:43:58:41:c2:
                    aa:1b:ee:f4:bf:86:83:a9:7b:54:3f:55:00:d0:c7:
                    9f:01:cf:a0:6a:77:dc:9b:a9:74:fe:5d:16:30:fc:
                    ab:db:0c:ca:70:3a:f7:ab:92:89:98:b5:70:69:84:
                    3f:bd:cd:74:9e:4a:47:48:fd:85:6d:0c:70:8a:0b:
                    88:dd:65:79:ca:36:7f:72:8e:51:6d:92:27:32:26:
                    22:cf:7c:e3:f3:00:b6:5b:d4:6f:49:b9:70:ad:87:
                    10:60:b6:03:52:e1:df:7b:65:0c:d9:3e:92:b6:c9:
                    5c:a1:93:3c:a5:e6:18:c0:a1:19:6e:ed:03:5e:74:
                    47:1a:7f:6f:22:55:4f:66:e5:2b:36:f4:ae:a0:51:
                    38:94:7b:e8:26:2d:69:05:a2:56:d8:49:76:ba:6a:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1F:C1:4E:5C:D5:B0:96:EF:2A:54:9F:56:1A:36:93:51:D1:D9:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9B_BTlzVsJbvKlSfVho2k1HR2Vg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:a5:e0:41:b3:b7:c0:6e:89:07:ad:27:6e:9e:65:da:ca:
         ca:fc:6f:01:29:19:9c:01:51:0a:e9:9c:d8:3f:e3:f7:09:a6:
         ec:d1:aa:4d:14:d4:d5:cf:4e:e5:91:64:c9:73:44:d6:84:b6:
         64:c8:43:05:30:f6:0f:d4:69:21:20:9a:87:33:28:1a:bf:7d:
         65:43:5d:0b:bd:ad:83:e4:fe:6c:0f:eb:76:60:9c:6b:f4:09:
         16:69:fc:03:ae:23:e6:db:e3:0e:ff:0c:fc:8f:17:e9:54:e3:
         e2:44:22:db:a8:d1:7e:8d:c7:88:c4:1f:6d:8a:23:73:6c:77:
         22:28:ec:0b:c6:91:dc:fe:2d:d3:ce:c6:71:50:5d:8e:19:e0:
         f2:a1:3b:29:4b:77:a7:7f:8c:09:72:93:38:5f:08:06:8c:d9:
         aa:f7:10:6d:10:44:5d:bb:e4:4a:7b:36:c1:b8:0e:39:d8:4d:
         bd:1c:96:85:e1:b1:65:9a:7a:2b:19:d1:6d:9d:74:f6:d2:4b:
         fb:87:ec:5d:d8:f7:4b:ff:48:bb:c7:fc:48:8d:2a:3d:71:6d:
         30:53:83:b6:84:a4:72:81:16:ee:77:d4:e7:73:6c:c6:35:22:
         96:ec:23:e2:18:70:38:a3:de:a8:a9:a5:9f:fc:f6:14:08:6d:
         cf:8b:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:21 2026 by rpki-client