Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMJC3R-EIPE5zuTPw22BBa7J_U8.roa
File:                     DMJC3R-EIPE5zuTPw22BBa7J_U8.roa (raw, json)
Hash identifier:          C4jWS315CY7t1LU0/QRg1WMSFfp4Grb/4Fsq3Zekob0=
Subject key identifier:   0C:C2:42:DD:1F:84:20:F1:39:CE:E4:CF:C3:6D:81:05:AE:C9:FD:4F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMJC3R-EIPE5zuTPw22BBa7J_U8.roa
Signing time:             Tue 31 Mar 2026 07:56:36 +0000
ROA not before:           Tue 31 Mar 2026 07:56:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5106 (0x13f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0CC242DD1F8420F139CEE4CFC36D8105AEC9FD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:5e:3a:df:9a:41:24:07:08:a7:5b:0d:1e:
                    de:5c:23:2f:20:87:df:1d:0c:c2:c9:a7:62:8f:2a:
                    33:fa:fe:dc:4a:c0:5d:4f:c8:49:08:f3:7d:38:b9:
                    ec:f2:ec:e6:9f:48:5b:9f:28:6f:cd:d8:b2:c9:a8:
                    20:9e:71:63:5c:58:cb:76:0a:e6:6b:56:6f:63:54:
                    15:24:f3:67:73:00:90:86:10:0f:73:f2:84:e9:39:
                    1f:84:04:7d:9f:1a:d7:a5:2e:cb:86:86:6b:e8:d0:
                    5b:73:93:68:c6:a8:fc:3b:ea:e7:16:02:5f:13:d6:
                    34:0c:97:04:48:3f:2d:ef:57:48:9f:a8:84:52:19:
                    e8:ef:b2:3e:9a:eb:e3:3f:e7:90:44:f1:b7:45:af:
                    c6:af:af:7c:12:84:ae:9c:1d:c4:5b:99:87:a0:43:
                    e8:72:dd:fb:9b:c5:0c:b8:21:d4:93:ff:5e:9f:62:
                    ff:cf:b7:65:40:38:c1:e2:45:d8:2c:d5:30:6e:f4:
                    84:a9:b1:53:21:d5:ac:3b:ae:58:1a:82:d3:bc:b1:
                    b3:57:3b:f5:65:0e:c5:4e:9a:89:72:c0:aa:51:57:
                    73:a8:e9:da:42:38:fb:2b:a8:64:8a:e2:78:36:1c:
                    98:84:18:68:51:e8:5e:65:86:ac:e1:4f:d4:59:d0:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:42:DD:1F:84:20:F1:39:CE:E4:CF:C3:6D:81:05:AE:C9:FD:4F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DMJC3R-EIPE5zuTPw22BBa7J_U8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:44:9d:55:b8:58:e4:4d:e1:7f:fd:fb:7c:fa:f7:c1:15:a9:
         39:b0:7c:f3:88:97:63:31:93:64:63:e6:ce:1f:d5:bd:98:3f:
         2d:c7:87:08:61:4c:44:1b:47:fb:d7:55:74:a1:6a:19:4e:7c:
         b1:e1:c6:e2:8d:52:f0:2d:4a:a2:2d:54:fb:7e:fc:33:af:d6:
         78:cb:5f:f0:b1:f1:c3:a3:42:fd:5e:c6:20:5d:8a:32:e8:e9:
         e6:37:b5:0a:6d:28:58:2a:f0:3c:15:e6:74:a1:b6:5e:4c:ae:
         24:0a:31:26:06:8b:e9:e1:d5:34:cd:c4:f0:95:03:4e:6d:4c:
         8a:a7:ef:94:0e:8c:35:38:81:59:4f:a7:aa:f5:68:4d:ff:fb:
         2e:12:fd:42:6d:ca:8e:7f:85:0e:ab:8d:e8:54:d6:c3:59:cf:
         e0:c0:79:8c:94:19:ba:de:2c:fb:e9:cd:4c:65:bf:54:3a:dd:
         dc:3c:0e:70:62:05:da:86:b3:e6:0a:0c:b5:b9:de:50:8e:a8:
         d5:cd:e6:cc:01:6e:4e:a6:79:6d:ee:5b:6e:cf:68:9c:a5:6a:
         1c:1f:1d:cc:a0:5d:e4:00:03:90:66:f2:6a:51:48:cb:ba:de:
         04:db:f6:6b:10:02:22:2f:be:10:75:ca:57:07:e3:03:f5:f8:
         ce:66:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client