Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDDzTUXlIA4EPElSrAhNGwOdmhg.roa
File:                     DDDzTUXlIA4EPElSrAhNGwOdmhg.roa (raw, json)
Hash identifier:          qemo2l1yMM8yvzjsKzdXbid0W1I0xZUpOcnDK+09hXw=
Subject key identifier:   0C:30:F3:4D:45:E5:20:0E:04:3C:49:52:AC:08:4D:1B:03:9D:9A:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1608
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDDzTUXlIA4EPElSrAhNGwOdmhg.roa
Signing time:             Tue 31 Mar 2026 08:00:58 +0000
ROA not before:           Tue 31 Mar 2026 08:00:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5640 (0x1608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C30F34D45E5200E043C4952AC084D1B039D9A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:24:76:7a:e0:68:77:30:85:d0:17:e5:06:
                    07:0d:a5:83:41:13:18:84:e4:60:0d:47:b8:95:5f:
                    ed:47:29:5c:c1:49:cb:b5:5e:20:c1:a4:ea:3f:53:
                    3e:bf:d1:4a:32:78:1c:05:a4:07:b5:0a:da:4c:5e:
                    29:49:a8:de:80:cc:b2:76:29:fd:4a:d7:1a:93:a1:
                    74:99:e4:d3:c8:e7:5f:ac:13:74:3e:dc:68:3f:4a:
                    2f:ac:7d:0b:ee:e7:2d:51:60:4f:89:02:52:3f:ca:
                    dd:77:ad:bb:6c:05:d3:97:db:d9:39:2c:6f:0b:53:
                    0a:fd:52:01:45:5d:6e:9a:7d:40:6e:aa:cb:ec:0d:
                    ad:b8:41:91:ca:50:6b:97:d4:e1:0d:41:b0:c0:95:
                    15:cf:23:46:d3:72:3a:02:b2:ec:f4:06:55:20:e4:
                    d7:ec:be:90:2f:ba:0c:b2:43:29:0c:dd:45:18:a8:
                    29:a3:36:e6:9b:47:9a:90:5f:ee:4a:04:bb:c0:fe:
                    53:37:ec:87:bb:d7:3c:16:09:93:04:08:21:0a:74:
                    36:60:92:03:a0:ec:3f:96:30:88:d2:2a:94:a4:31:
                    88:66:00:49:ad:bd:b4:b6:4d:d0:92:37:cd:23:d7:
                    34:10:8c:d7:38:bf:05:5b:95:25:54:b7:6a:db:8f:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:F3:4D:45:E5:20:0E:04:3C:49:52:AC:08:4D:1B:03:9D:9A:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DDDzTUXlIA4EPElSrAhNGwOdmhg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:8b:69:ce:de:4a:0d:23:4d:e6:46:c6:84:d9:e4:d8:a6:
         e3:d2:f9:bd:91:80:cc:63:83:f8:1e:5d:9c:b8:8c:63:4b:9c:
         df:bf:60:1c:73:6f:8d:36:17:c7:5e:f8:bc:1a:c9:2f:f1:27:
         66:db:74:6e:a7:af:66:9b:90:d8:96:95:c5:36:23:99:a1:73:
         e0:74:22:32:fb:11:9f:aa:ee:f6:14:e2:b0:c8:d3:74:be:c0:
         05:d0:5b:e4:2e:15:7e:97:ea:fd:27:bd:72:4d:8b:f2:6e:08:
         0f:90:7c:f1:b1:51:b3:0f:bf:11:14:4c:d1:44:eb:61:83:55:
         c0:ec:65:31:e0:af:29:bf:52:7a:e0:22:e5:75:90:40:7a:77:
         8f:5e:1c:26:f7:58:93:19:13:3b:2a:2d:23:92:52:87:6b:e3:
         b7:f3:a1:49:79:77:ad:dc:c0:92:7f:a3:3c:a5:27:22:b1:69:
         d2:b2:18:9e:57:78:cb:c4:9f:46:a2:2e:eb:ab:19:e1:db:9c:
         af:d8:5f:36:e9:cd:a0:3c:ef:d7:2f:9c:f8:7f:d7:ee:bb:76:
         f4:66:f7:c2:7b:66:db:01:42:8c:9c:61:57:d3:a4:d6:7c:4a:
         d3:4c:03:1d:b8:a7:c1:fe:86:ec:4f:c6:92:40:82:b1:f4:57:
         0f:f1:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:03 2026 by rpki-client