Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DUD58_WhM9H3nUOlxiU7g8coURM.roa
File:                     DUD58_WhM9H3nUOlxiU7g8coURM.roa (raw, json)
Hash identifier:          LAlbfvABYOE05nIvomRTtGBg6kIYDyUywf+YpcjI6n0=
Subject key identifier:   0D:40:F9:F3:F5:A1:33:D1:F7:9D:43:A5:C6:25:3B:83:C7:28:51:13
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DUD58_WhM9H3nUOlxiU7g8coURM.roa
Signing time:             Tue 31 Mar 2026 08:04:43 +0000
ROA not before:           Tue 31 Mar 2026 08:04:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6112 (0x17e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0D40F9F3F5A133D1F79D43A5C6253B83C7285113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:53:48:ca:6f:06:f8:62:dd:5e:47:67:66:
                    bc:65:40:a7:65:17:92:b1:48:58:62:fa:5a:7e:20:
                    49:19:d4:a6:e5:fe:6b:ad:c5:fe:ae:aa:b2:67:41:
                    e2:ae:9f:19:cb:e0:c2:48:f2:51:d0:29:cb:bd:25:
                    49:f3:27:68:cf:9e:3f:e8:cd:9a:07:58:d0:4c:f7:
                    a4:b4:33:a7:ae:bf:17:39:cd:84:8c:1b:e4:e8:70:
                    b7:25:29:f7:cd:c4:85:48:88:95:6b:53:c1:52:e2:
                    3a:ff:9d:a5:38:fc:5f:ce:88:60:89:f9:61:e5:25:
                    76:a6:3b:75:47:ad:3f:c0:95:05:34:4c:10:8f:8f:
                    8b:5e:1d:66:23:2e:6d:a2:de:ac:9a:19:90:8b:f1:
                    73:25:2a:84:92:98:3e:53:08:1d:ce:60:37:b4:a4:
                    3e:37:64:d0:4e:41:d7:ca:17:c2:b1:0c:20:7c:8d:
                    7c:e8:92:98:cb:53:8f:46:16:0a:7c:87:d9:27:8f:
                    0d:04:28:dd:66:b7:60:57:42:4e:74:e8:33:ae:8a:
                    88:5c:b4:9d:36:65:ba:4d:ec:c6:9c:14:28:14:e5:
                    66:ed:55:fa:63:03:1e:04:2f:8b:1f:f6:54:81:c7:
                    7a:a5:3a:31:76:8e:05:03:22:d9:6b:a6:5e:03:4e:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:40:F9:F3:F5:A1:33:D1:F7:9D:43:A5:C6:25:3B:83:C7:28:51:13
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DUD58_WhM9H3nUOlxiU7g8coURM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:43:ba:74:88:b9:b3:0c:c5:e2:87:c8:9f:8c:8d:36:fa:0b:
         10:37:f6:7c:d5:52:1c:3d:88:4d:f0:37:15:6f:7e:a8:1c:30:
         eb:7f:24:7d:1c:5e:06:86:e7:9b:1d:45:2f:de:2d:ad:35:ea:
         73:53:2f:1d:d8:ca:c8:d8:4d:6a:3a:37:0e:9e:2a:08:24:35:
         7c:44:fa:48:b4:62:8e:3c:0d:fa:8f:1a:f2:0b:a7:b2:52:06:
         1d:27:1b:74:03:cb:7a:81:a8:bd:18:22:b1:23:c1:ab:0d:16:
         bc:61:fb:ee:1d:c7:82:00:9d:eb:c3:7e:a6:0d:ee:09:b3:74:
         47:15:58:37:3c:90:0b:85:94:ac:3c:ff:d7:46:9d:7f:89:eb:
         65:3b:cc:7e:12:74:05:b8:b2:a6:cc:2e:ca:45:84:8c:1b:ea:
         79:e3:c5:59:f3:f7:cf:cc:8e:de:d4:d0:2c:cb:eb:38:fa:85:
         92:6f:c6:1c:4e:e6:9d:06:d9:32:10:b7:29:01:96:9d:e0:12:
         bf:91:9d:a5:cd:10:f1:4e:46:ef:60:be:40:06:46:51:cc:dc:
         5a:ea:66:a2:d4:46:4c:7b:fc:6b:6c:a3:15:7d:90:5a:c1:54:
         04:ed:7c:6e:5d:63:fa:cb:47:f8:1b:ea:e8:23:eb:68:97:0c:
         2f:3b:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:37 2026 by rpki-client