Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ASeZTDBDeWhvvGbRoDDfU3IIjOw.roa
File:                     ASeZTDBDeWhvvGbRoDDfU3IIjOw.roa (raw, json)
Hash identifier:          8Okmjn/kOJJiXn6iiteJvJZ+UGEDUtCnIWlkoXpOY3w=
Subject key identifier:   01:27:99:4C:30:43:79:68:6F:BC:66:D1:A0:30:DF:53:72:08:8C:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ASeZTDBDeWhvvGbRoDDfU3IIjOw.roa
Signing time:             Tue 31 Mar 2026 08:04:25 +0000
ROA not before:           Tue 31 Mar 2026 08:04:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6073 (0x17b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0127994C304379686FBC66D1A030DF5372088CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:9c:c8:90:1e:f5:0d:02:74:78:d1:b0:e8:
                    9a:fe:22:d6:6e:11:d5:f6:c4:81:2b:09:0c:23:4a:
                    08:af:90:f8:bc:27:e4:39:94:50:72:47:14:9e:20:
                    53:eb:96:2d:a6:ec:5e:0c:de:8b:55:88:00:b8:4f:
                    ff:26:d9:5b:ac:a3:45:c1:33:6a:ea:b2:41:90:61:
                    05:8f:59:41:90:e4:fe:f1:db:0e:19:af:f4:ec:3e:
                    7b:34:a5:e1:73:e6:7d:a1:81:70:4b:ed:dc:17:71:
                    28:05:59:54:68:08:d2:e7:61:a1:c1:a4:58:07:c3:
                    5d:a6:9d:4f:6d:65:38:55:ef:5e:86:df:b6:5b:3e:
                    c0:a9:4a:2f:f2:cb:46:35:23:c9:bb:19:ca:d1:2e:
                    af:c3:28:fb:f6:b0:a8:f8:fc:7c:d5:de:a9:81:13:
                    ee:46:70:40:9d:b8:ab:10:4c:fa:8d:32:5f:98:bf:
                    0c:04:b0:a8:05:93:56:66:87:c4:90:7e:9d:51:13:
                    7d:8c:23:b4:44:49:5d:db:53:ba:72:b6:fc:03:a4:
                    09:4e:ab:dc:04:e7:d6:8c:21:61:fd:92:0f:08:34:
                    62:8c:cd:a5:0f:ea:7f:1f:8f:20:c6:b7:e0:31:ce:
                    2d:76:db:48:53:af:c0:7b:f8:88:fb:87:7c:12:bd:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:99:4C:30:43:79:68:6F:BC:66:D1:A0:30:DF:53:72:08:8C:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ASeZTDBDeWhvvGbRoDDfU3IIjOw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:9c:e6:2a:36:9f:8f:bd:ea:cd:a9:e6:78:18:54:4a:5b:
         cd:54:8b:ac:ae:04:1d:8a:3b:d1:21:1b:89:ee:b4:2f:86:5c:
         2b:0d:cb:e7:a0:34:c8:96:29:57:c9:12:0a:3e:d9:68:89:86:
         66:64:21:68:ce:3d:6f:98:10:de:ed:c8:6c:91:01:18:fa:5c:
         d5:16:1b:22:78:f4:ec:6c:90:3f:f6:56:da:e2:77:f9:21:83:
         76:21:30:46:60:43:80:32:34:d7:cc:ee:19:b2:3a:c9:64:c5:
         9f:cd:89:c0:a2:af:53:c5:e7:dc:04:25:2a:d8:f7:9a:05:c5:
         83:2a:98:84:d6:7c:7a:b3:6b:7c:20:82:81:e5:45:b1:5e:63:
         bd:6e:7b:dd:56:3e:d8:73:bc:1d:da:bc:96:ae:64:c8:07:a4:
         ac:36:b2:88:33:2f:f3:71:fb:d5:d2:dd:9e:1c:b9:1d:ca:6f:
         ed:9e:f1:67:48:76:d1:01:28:be:70:57:2f:3e:aa:23:1e:f1:
         95:01:0e:45:05:4a:59:e0:04:80:c6:a7:25:7d:d9:71:ba:f8:
         45:b8:c4:50:c2:e5:5b:d8:3b:6c:5b:18:b2:35:97:be:cb:1d:
         f5:83:ca:8f:06:24:62:4c:30:42:6a:a2:13:a6:fe:4c:ea:2e:
         8b:04:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:59 2026 by rpki-client