Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa
File:                     IYs9Dd-GnJXR8zU2A91hxAreS2w.roa (raw, json)
Hash identifier:          S23gRui9jYAMYQh9IbCh6DJBBOLvjyocPm0BcqWY9Ow=
Subject key identifier:   21:8B:3D:0D:DF:86:9C:95:D1:F3:35:36:03:DD:61:C4:0A:DE:4B:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       183E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa
Signing time:             Tue 31 Mar 2026 08:05:34 +0000
ROA not before:           Tue 31 Mar 2026 08:05:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6206 (0x183e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=218B3D0DDF869C95D1F3353603DD61C40ADE4B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:0f:ca:78:24:92:73:24:55:13:09:10:78:
                    b7:be:19:27:26:c5:60:38:2f:53:53:1a:0f:0c:a6:
                    4a:65:b0:d8:26:2f:8f:18:e2:f0:05:a8:41:2e:95:
                    6a:c0:2a:76:5b:21:1a:8e:35:39:f2:a4:fa:13:49:
                    81:a0:86:0b:2e:ce:12:dc:61:4e:a8:f7:f8:1f:a8:
                    41:76:28:0d:7f:69:69:dc:5c:24:6a:5d:9e:2c:5a:
                    74:28:d7:56:c7:56:96:12:60:f8:35:5b:e3:dd:ce:
                    d1:a3:bf:75:49:26:8d:a4:84:58:e7:93:83:62:0f:
                    55:49:97:38:df:bc:53:ef:1d:0c:e5:b4:e9:b8:0f:
                    a2:b1:68:d6:f1:22:21:2c:1e:d2:9e:0a:c0:16:e5:
                    55:54:97:b5:40:09:32:39:3e:ca:a2:16:39:97:bb:
                    1e:c6:9c:c1:24:46:20:74:97:4f:4e:b0:8e:a5:fc:
                    f5:63:0c:7a:81:46:33:13:0d:fd:78:b8:59:e1:2f:
                    46:df:30:bc:d6:c1:ab:dc:dc:c3:41:3b:c6:0d:de:
                    30:1f:22:94:88:f2:5d:1f:8d:a9:0f:e3:aa:22:d1:
                    d8:75:d1:d3:15:05:bd:b8:d6:97:91:ef:84:65:de:
                    06:30:29:dd:c3:c2:18:d9:52:70:10:1c:e0:17:df:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:3D:0D:DF:86:9C:95:D1:F3:35:36:03:DD:61:C4:0A:DE:4B:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IYs9Dd-GnJXR8zU2A91hxAreS2w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:73:46:09:4b:02:f4:7e:e2:eb:25:24:d9:41:e2:9a:10:
         78:c2:45:cf:74:be:1d:5a:60:2f:c4:d3:39:f0:bf:62:52:3b:
         21:c4:b8:ae:f0:74:45:42:cb:be:0e:eb:c1:79:07:e1:88:19:
         85:4d:14:6c:c0:3b:d9:e1:fe:ab:dc:18:06:bf:eb:63:3e:7a:
         36:c3:63:87:43:ab:ec:0c:81:cb:1b:9e:a4:65:9c:2e:36:60:
         20:75:a0:df:34:88:a1:d3:19:3f:e9:f3:8b:08:24:0a:57:d5:
         14:56:43:ac:9b:d2:2e:8a:20:2e:47:1c:1c:a2:b3:36:f4:ba:
         c8:90:da:e7:86:0b:b5:da:41:ac:97:0a:85:da:40:06:3d:49:
         ad:3e:3e:4d:b5:3c:c2:80:f0:4f:78:21:6a:98:f8:7d:33:a5:
         fd:e5:bd:84:e9:3f:a5:90:1d:b4:02:22:b9:56:95:bf:49:4e:
         d6:71:b1:81:fa:39:8c:c2:39:17:30:03:6d:16:49:93:89:37:
         d9:22:0b:37:33:37:5c:82:ea:b6:84:86:ea:ae:37:b0:e1:a5:
         6f:35:c0:ac:d7:04:3c:d7:9a:c0:6c:f6:76:99:7f:c5:87:5c:
         6b:ea:37:d8:02:46:91:64:d3:fd:32:60:f3:bf:2d:bd:b9:5c:
         c8:38:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client