Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2wP_2igyUy0hm1Ph6ifn6OlPsM.roa
File:                     E2wP_2igyUy0hm1Ph6ifn6OlPsM.roa (raw, json)
Hash identifier:          sUI7JcdoBAKQQ312qzQt8B+fHMK0pkUQNeAVLvUSAXU=
Subject key identifier:   13:6C:0F:FF:68:A0:C9:4C:B4:86:6D:4F:87:A8:9F:9F:A3:A5:3E:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       165E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2wP_2igyUy0hm1Ph6ifn6OlPsM.roa
Signing time:             Tue 31 Mar 2026 08:01:40 +0000
ROA not before:           Tue 31 Mar 2026 08:01:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5726 (0x165e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=136C0FFF68A0C94CB4866D4F87A89F9FA3A53EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:50:21:26:75:77:5f:29:72:99:76:94:02:
                    68:dd:6b:3e:95:80:77:42:13:bc:a4:32:6c:63:6f:
                    2e:19:5a:98:72:b6:f0:81:1e:13:0b:81:57:15:b3:
                    41:71:25:8e:1e:22:85:d4:7f:73:65:b0:8d:31:e5:
                    2a:5d:c3:65:58:53:eb:a7:41:d3:b5:bf:b9:a7:3e:
                    6b:93:0f:33:a5:5e:fb:34:2c:1a:cb:d6:7c:33:74:
                    ec:45:0d:e0:f0:32:54:65:de:0a:55:d8:a1:1e:0f:
                    d2:71:bc:f7:6a:92:10:27:4c:86:12:f2:46:c4:8f:
                    96:94:92:14:2e:05:cf:e1:79:c7:81:fd:e7:0d:4d:
                    a0:58:d3:92:c0:f1:7a:6e:53:f3:04:f1:0f:92:3b:
                    f6:3d:82:20:d0:e0:2a:dc:d5:37:e6:82:9a:e4:87:
                    ff:12:92:33:fa:4a:03:0b:d1:45:28:48:97:ae:b9:
                    1f:51:15:f5:c4:36:19:c9:72:7b:be:98:ad:5f:8c:
                    7a:06:73:64:3a:45:62:2c:4d:ea:6f:30:c2:68:68:
                    1e:18:db:fe:cd:e6:08:47:b9:f4:3e:0e:46:d3:15:
                    9b:02:70:6e:0d:5e:15:81:9b:52:3d:55:a7:82:05:
                    b8:10:05:cb:26:86:c6:59:20:52:d9:88:3f:cd:fb:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:0F:FF:68:A0:C9:4C:B4:86:6D:4F:87:A8:9F:9F:A3:A5:3E:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2wP_2igyUy0hm1Ph6ifn6OlPsM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:cd:a6:6a:59:e5:e2:d1:63:fa:ea:6c:1c:5d:58:b9:8e:
         52:40:30:29:0a:70:64:27:d4:bf:ba:aa:01:59:31:c1:86:98:
         60:fa:e3:51:60:07:76:fe:c7:7b:b5:82:6f:a7:e1:f0:e0:f7:
         f3:d0:ab:e4:2c:a5:f0:3a:fa:2f:47:a7:09:10:19:22:47:13:
         48:f3:0e:2c:8b:1d:2a:f9:dd:3d:a0:ff:36:c8:9e:55:b8:b1:
         d0:e3:7b:6b:9b:fc:97:a6:73:99:10:76:de:67:65:26:7c:8d:
         87:61:c7:d1:97:9c:cc:0e:cd:54:26:da:a5:da:dc:c3:86:d3:
         2d:f9:3b:26:21:42:f6:3c:97:66:46:e5:ac:79:09:a5:f7:80:
         44:30:21:de:ef:00:97:02:c7:c3:19:e4:7f:eb:f5:db:11:49:
         c8:6a:e4:ab:22:03:62:8d:fd:41:e2:d3:ee:0e:ac:80:e5:3c:
         ae:3b:cb:f2:2d:67:37:3c:35:f9:9e:90:06:f5:c3:58:71:b4:
         8b:89:ca:97:fd:3c:bf:21:c9:ba:86:8b:5b:aa:c7:ef:0b:dd:
         c6:a0:74:f9:51:0d:d4:24:20:de:aa:5a:1d:5d:a6:71:69:78:
         12:1e:75:69:66:63:59:e5:76:31:04:79:b4:97:99:ac:ee:13:
         db:7e:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:02:10 2026 by rpki-client