Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpWehhHrnJ4xWt822x7_fJqfpWQ.roa
File:                     GpWehhHrnJ4xWt822x7_fJqfpWQ.roa (raw, json)
Hash identifier:          DfsXP4BRHqhTdvfVurApAHzrGfxElsN4yuRCWZpEK6c=
Subject key identifier:   1A:95:9E:86:11:EB:9C:9E:31:5A:DF:36:DB:1E:FF:7C:9A:9F:A5:64
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpWehhHrnJ4xWt822x7_fJqfpWQ.roa
Signing time:             Tue 31 Mar 2026 08:00:49 +0000
ROA not before:           Tue 31 Mar 2026 08:00:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5625 (0x15f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1A959E8611EB9C9E315ADF36DB1EFF7C9A9FA564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:46:4d:e6:57:95:ef:3e:dc:98:98:7a:1f:
                    f5:b7:a9:ed:84:38:d0:f8:a8:1c:9b:2a:99:ed:26:
                    7f:1f:71:6f:40:85:16:bc:07:45:02:cd:6d:9c:01:
                    ad:3f:55:71:01:ff:72:4b:d0:9a:c9:a3:68:0d:4d:
                    50:eb:7a:11:8c:5f:50:e7:63:1b:b3:17:ea:33:b5:
                    79:7c:70:5a:d2:17:6a:2b:f4:1b:2c:bb:c9:2e:99:
                    26:23:84:db:f1:35:35:f9:73:97:f5:8b:ba:e3:7a:
                    5f:12:ca:c5:74:b6:d7:66:a3:35:2e:70:e5:98:07:
                    e2:bf:10:fe:da:eb:67:8a:b7:97:5f:be:15:e9:99:
                    4d:42:3c:04:57:66:ab:06:f6:b8:53:d2:ca:5e:e2:
                    4b:82:89:b8:89:d1:fb:ae:c4:56:9f:88:3b:d7:18:
                    0b:9f:ec:bf:96:e2:93:d7:26:c3:9e:66:3e:c7:5e:
                    25:6e:f5:69:2f:cb:15:ba:8b:18:cb:78:04:95:50:
                    11:ad:70:b0:06:b1:9c:df:62:00:e4:6a:36:51:f7:
                    54:9b:03:c3:87:44:db:c3:93:cd:33:49:af:c0:b7:
                    54:dc:87:ab:84:cf:4c:5f:be:67:44:dd:81:29:13:
                    b0:e8:4b:25:55:c0:8b:7b:50:60:c4:e1:99:f9:02:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:9E:86:11:EB:9C:9E:31:5A:DF:36:DB:1E:FF:7C:9A:9F:A5:64
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpWehhHrnJ4xWt822x7_fJqfpWQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:01:1c:ba:46:b7:de:71:64:91:37:ff:b5:30:63:74:16:4d:
         ad:c0:1a:4c:a6:9a:8e:c6:95:14:fa:a3:a7:2d:a1:b9:e1:2c:
         1a:ee:6c:c7:a0:0a:81:30:db:65:25:ab:bc:76:ae:33:a5:e1:
         c1:69:47:18:a0:84:01:c8:a9:f0:fc:62:8d:0a:af:4a:4f:0e:
         c2:11:17:33:5f:06:0c:ba:55:cf:1e:d4:38:ea:90:5e:81:05:
         cc:ce:9f:dd:c7:1d:fa:6a:fd:3b:3d:0c:29:d1:2b:54:13:5a:
         97:43:5c:02:f5:0b:41:79:9b:fc:81:e2:24:80:75:f3:56:32:
         ce:51:9c:0d:74:ea:1a:3e:fe:df:dd:ad:72:ca:ac:41:70:54:
         55:bb:37:e0:b5:7f:26:3f:3e:65:e4:b8:3f:98:f0:67:96:98:
         e4:c1:fe:a5:c8:5e:f0:3f:57:ee:1c:23:ae:e3:f8:9b:62:70:
         cd:bd:74:9d:d4:2f:c1:dd:e0:0c:27:79:0b:2d:47:e2:6b:5d:
         53:47:96:4a:4f:ff:85:9a:b3:59:ff:67:74:d4:45:a2:9a:7b:
         c7:99:7b:5b:20:5c:ba:cb:10:3b:d0:1b:6a:b8:02:88:25:c2:
         47:de:14:71:7f:9e:2d:8c:cd:77:5d:07:0e:e1:8b:f5:21:01:
         d6:58:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:28 2026 by rpki-client