Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/G4pGIltFvWC57ytIVqyrcfATc-8.roa
File:                     G4pGIltFvWC57ytIVqyrcfATc-8.roa (raw, json)
Hash identifier:          hZ9zBZIWubyKgmqttwU5MbkXhL133A0AV74YrqivQaU=
Subject key identifier:   1B:8A:46:22:5B:45:BD:60:B9:EF:2B:48:56:AC:AB:71:F0:13:73:EF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       165F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G4pGIltFvWC57ytIVqyrcfATc-8.roa
Signing time:             Tue 31 Mar 2026 08:01:41 +0000
ROA not before:           Tue 31 Mar 2026 08:01:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5727 (0x165f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B8A46225B45BD60B9EF2B4856ACAB71F01373EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:b5:2f:82:f0:15:16:7e:6a:c1:9d:c0:f5:
                    a4:ed:6f:3a:bd:3a:78:05:e7:2e:9f:92:43:be:e8:
                    6f:ed:2f:37:df:18:9b:5b:f0:18:51:1d:d3:87:6e:
                    45:c6:de:97:f6:80:fd:38:3b:cd:1a:94:29:34:ec:
                    1c:c1:34:f7:71:f5:72:b8:1c:10:9e:cf:dc:36:be:
                    70:a9:8b:0c:4a:0c:30:f8:d1:f3:d2:52:7d:4b:9d:
                    ab:98:29:12:28:2c:a2:11:9e:99:89:7c:f4:74:bb:
                    c7:6a:20:ab:86:55:13:2c:e4:2a:40:cf:2e:53:4a:
                    b9:ad:bf:bb:a9:bf:1f:76:f0:93:d3:e4:35:88:05:
                    6a:4d:d5:32:24:50:38:e2:7a:13:d1:19:33:25:20:
                    b3:d9:04:0d:fe:2c:80:e6:1c:7b:f2:99:0e:f0:4c:
                    2d:bb:81:d5:c4:53:cf:cc:1f:37:7e:5b:83:67:3c:
                    6a:b2:99:44:f0:93:cf:18:61:78:84:9b:ff:82:cb:
                    70:93:e1:87:7d:3d:81:96:8d:0e:ef:81:72:4a:1d:
                    c1:c0:1e:46:ee:54:a0:69:03:b4:5c:5a:04:e4:2f:
                    77:ca:05:8e:19:56:e4:c7:cd:99:f9:c1:72:2b:bc:
                    46:04:2d:27:b3:5d:3c:84:04:29:4a:cf:45:6a:8a:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8A:46:22:5B:45:BD:60:B9:EF:2B:48:56:AC:AB:71:F0:13:73:EF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G4pGIltFvWC57ytIVqyrcfATc-8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:46:9f:e1:1b:b2:7a:24:98:84:56:4a:fc:0d:bc:a3:77:
         02:b6:93:b7:90:94:4b:1b:f7:9f:63:d8:c6:72:e5:af:d5:a6:
         66:38:da:90:4c:c2:b8:84:d1:ee:dd:38:bd:7a:d2:dc:7b:79:
         89:f1:76:3e:e3:9f:1f:f2:62:be:e3:55:bf:03:a8:92:e5:f3:
         4b:e2:3b:7f:17:5c:b3:82:96:43:69:66:65:c6:c1:56:09:14:
         c0:7d:66:ad:a8:ad:2c:4c:93:ee:0d:6e:ab:f9:d9:84:db:87:
         ae:84:f8:e3:7d:38:fc:a8:b7:19:4f:cd:ae:01:d6:a7:32:18:
         77:26:63:d8:e7:f4:04:04:77:6a:10:ce:17:b7:61:ae:dd:16:
         2e:e8:46:0e:78:f6:50:69:b4:ea:96:28:39:83:f8:a0:09:71:
         e5:73:9c:b0:ce:fd:fd:5d:02:0e:27:28:98:ac:37:01:a6:24:
         a9:2a:99:78:d9:da:ad:0d:f0:6e:eb:43:2d:c2:98:a1:3b:3e:
         bf:22:66:8c:d7:7e:c2:d5:4e:08:37:37:19:a2:4e:83:7f:23:
         ff:47:85:98:1c:e5:d3:96:de:99:da:60:5f:2d:ce:a5:e6:14:
         b1:7d:74:88:73:9d:05:89:18:d4:58:42:2a:d2:d3:11:d1:7b:
         be:97:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client