Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71uQlSegJnbbR1NnyfaHRP61Fk.roa
File:                     I71uQlSegJnbbR1NnyfaHRP61Fk.roa (raw, json)
Hash identifier:          QGEv24gBW5xH8ZyYag6GXtZ3ruyb2oz5VCkOY09W1+c=
Subject key identifier:   23:BD:6E:42:54:9E:80:99:DB:6D:1D:4D:9F:27:DA:1D:13:FA:D4:59
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15BD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71uQlSegJnbbR1NnyfaHRP61Fk.roa
Signing time:             Tue 31 Mar 2026 08:00:19 +0000
ROA not before:           Tue 31 Mar 2026 08:00:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5565 (0x15bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=23BD6E42549E8099DB6D1D4D9F27DA1D13FAD459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:28:5f:4c:2c:67:ea:75:72:04:d7:59:40:
                    c4:a1:66:f3:10:8b:9c:60:91:bd:41:f0:6f:2a:7c:
                    74:40:76:40:86:a2:fd:69:37:f7:02:2e:75:25:e6:
                    44:18:87:50:dd:d6:58:d2:23:97:8c:28:6b:29:c8:
                    f8:a9:9d:9b:08:a2:f0:08:f9:15:87:38:b9:9c:60:
                    24:55:f7:53:51:d8:30:2d:60:92:aa:a2:a0:f6:67:
                    60:17:bc:84:fc:09:c5:85:e8:b4:f3:e2:5a:db:4a:
                    29:0f:5f:72:fb:94:69:2b:24:f9:c7:60:47:7b:59:
                    95:5c:b9:a5:2a:78:3e:7c:7b:12:73:20:bf:ab:0c:
                    53:87:35:a4:9c:ba:1e:be:eb:03:6a:34:92:0b:b7:
                    78:c9:ee:8e:57:22:cb:0a:ba:4b:88:e0:1c:f8:94:
                    eb:28:68:36:ff:82:58:1f:7e:7b:2d:73:e6:be:02:
                    8e:89:dd:f8:2d:9c:a6:56:26:e1:fd:d6:c1:6f:a8:
                    d7:49:f4:08:1f:dc:eb:7b:70:50:2a:07:0a:86:5b:
                    2f:26:6d:80:6c:db:01:44:8b:8d:cd:c9:3b:ad:5b:
                    c4:fb:89:be:61:54:49:69:af:73:bf:42:1f:13:cd:
                    6a:ed:bd:92:a3:ec:e7:73:f4:f0:df:49:99:e0:49:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:6E:42:54:9E:80:99:DB:6D:1D:4D:9F:27:DA:1D:13:FA:D4:59
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I71uQlSegJnbbR1NnyfaHRP61Fk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:2f:36:11:8b:bc:e8:3e:ca:29:dc:21:f8:bf:b3:f5:9c:
         4a:f9:c4:ff:ac:85:e4:e0:bd:48:0c:2c:44:be:57:4d:6a:52:
         59:82:3f:7e:35:01:05:b7:05:2a:23:79:8c:67:49:5b:d1:ce:
         cd:fe:4b:f3:31:dc:ac:b7:32:44:88:34:b9:62:f4:dc:dc:10:
         fe:17:ba:af:85:21:83:45:c1:66:f9:71:bd:88:bb:a7:d7:7b:
         79:4a:6e:a2:eb:f9:f9:90:ed:94:60:36:50:27:8c:3a:e7:48:
         55:2b:a9:9a:89:ee:01:21:ce:b9:45:ad:a5:fd:35:97:9c:15:
         dd:8a:c5:4a:a8:10:ae:34:f2:11:91:43:61:c8:19:be:48:2a:
         2e:cb:73:e8:14:70:57:45:7e:75:b2:10:fe:fd:1e:8d:f3:f3:
         20:d8:60:42:84:bf:d2:63:81:9f:96:86:db:08:25:3c:15:8f:
         d8:be:56:79:01:fb:74:4d:63:c6:e1:6e:2a:7c:9a:55:90:a9:
         dd:cb:29:4f:8f:0c:38:aa:db:2f:af:36:26:42:0c:ce:c6:ff:
         d2:4d:92:0a:6c:2d:a1:4e:6c:e4:c1:97:33:46:61:b3:2c:fe:
         b5:ea:19:14:28:55:33:b9:9d:08:1d:bb:e7:77:19:e9:a4:ca:
         10:af:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client