Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BtbX4UEwLkbNks6_wzXMoAvup9o.roa
File:                     BtbX4UEwLkbNks6_wzXMoAvup9o.roa (raw, json)
Hash identifier:          zk4DYnGHI5jB3vmHHLLtMoxieHQxZwTKOoekk3PS07U=
Subject key identifier:   06:D6:D7:E1:41:30:2E:46:CD:92:CE:BF:C3:35:CC:A0:0B:EE:A7:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13F7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BtbX4UEwLkbNks6_wzXMoAvup9o.roa
Signing time:             Tue 31 Mar 2026 07:56:38 +0000
ROA not before:           Tue 31 Mar 2026 07:56:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5111 (0x13f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06D6D7E141302E46CD92CEBFC335CCA00BEEA7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:31:f6:7f:64:39:b8:6b:1a:79:fd:74:97:
                    f8:cf:67:e8:ee:d7:86:6b:58:ee:05:9f:c9:fc:fc:
                    53:19:72:d7:2b:be:fa:3b:87:99:38:f8:31:f2:19:
                    e2:af:5e:b5:00:30:15:d1:c6:c3:71:18:62:cc:32:
                    d0:3c:6c:0d:6a:22:4e:13:91:ed:af:a0:60:f7:75:
                    1b:29:7e:d2:49:55:e5:f8:6c:85:7d:44:6a:bb:64:
                    1b:cb:22:7f:25:20:b7:85:85:09:f8:53:d3:00:56:
                    a4:61:e2:9f:19:1a:2b:ea:39:d6:9a:eb:40:ab:76:
                    d1:2f:d1:9a:07:48:a0:a4:61:7a:ec:63:c3:f8:55:
                    56:8f:54:d6:49:b7:26:9e:fb:dc:ba:b8:c5:a1:e7:
                    bf:79:81:0f:6e:87:f2:3e:39:94:9e:cf:2f:b4:ce:
                    99:78:89:09:0b:69:07:fa:f2:72:76:0e:90:89:a8:
                    a7:0b:99:25:96:06:99:ab:a5:4b:40:2c:44:21:18:
                    58:4e:bc:7c:88:9c:b3:91:c5:3f:b7:50:6d:0e:b0:
                    a4:55:5c:57:cf:b0:3f:15:a4:6f:cb:11:d2:93:90:
                    7f:84:b6:0b:08:b7:17:7d:83:01:b7:c4:71:18:95:
                    a8:00:d1:63:bb:9b:4e:83:cc:dd:d3:e3:ab:ae:dd:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:D7:E1:41:30:2E:46:CD:92:CE:BF:C3:35:CC:A0:0B:EE:A7:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BtbX4UEwLkbNks6_wzXMoAvup9o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:7f:7b:10:91:db:7d:6e:f1:b2:78:93:a2:ca:6b:b1:5a:bb:
         3f:43:65:ed:c4:34:02:b9:56:f4:92:e4:4e:d2:a3:7e:c0:79:
         ba:e1:3e:f5:05:51:97:b0:ac:bc:09:70:d1:b7:93:aa:dc:3b:
         2d:37:df:0b:11:b5:61:d4:15:84:a6:52:73:e8:c2:e3:31:cf:
         b8:27:c4:3f:a0:bf:f7:21:ac:9b:1a:10:fe:18:ca:4a:57:2e:
         93:2f:72:3b:81:83:ac:d8:2b:3a:da:7a:59:a7:00:46:fc:25:
         ac:ed:63:ba:93:53:09:d6:eb:29:f4:2a:47:b7:d1:19:d6:d6:
         6d:bd:cc:3c:ff:89:0c:d3:92:8e:e3:3c:2c:a9:f4:61:c3:38:
         c5:44:3f:c7:ec:63:50:45:85:4f:67:cb:d6:4c:f1:62:0e:00:
         37:20:82:b8:1c:94:8f:d1:b5:ef:5e:fc:dd:45:b7:67:f5:dd:
         e3:d2:2c:f3:95:ff:0e:11:7e:2c:fb:97:50:b6:63:ea:8c:c4:
         83:79:a5:9f:00:1d:02:1a:65:d7:6f:18:0f:a5:d2:97:3f:f3:
         43:07:81:8f:3e:61:d5:bd:c1:e2:c3:51:05:01:13:d3:00:04:
         78:08:27:5e:fa:3c:95:3c:06:29:9a:03:6f:79:fb:58:c0:e2:
         14:ac:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:58 2026 by rpki-client