Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8VKspXj8sOE1Qz0fgfZX90noJQ.roa
File:                     J8VKspXj8sOE1Qz0fgfZX90noJQ.roa (raw, json)
Hash identifier:          ujwQx+5o0QqqcrKToej4sLHgGbc/yxzMY42t/5NZXy8=
Subject key identifier:   27:C5:4A:B2:95:E3:F2:C3:84:D5:0C:F4:7E:07:D9:5F:DD:27:A0:94
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1728
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8VKspXj8sOE1Qz0fgfZX90noJQ.roa
Signing time:             Tue 31 Mar 2026 08:03:15 +0000
ROA not before:           Tue 31 Mar 2026 08:03:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5928 (0x1728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=27C54AB295E3F2C384D50CF47E07D95FDD27A094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:e5:9c:43:b3:3b:90:78:d0:ce:3e:1d:46:
                    ef:bb:32:80:01:c2:34:85:e3:99:17:68:b4:a3:27:
                    33:7f:0b:79:c5:21:5e:ab:24:a8:2d:12:ce:bc:b9:
                    e9:0d:87:d9:20:69:16:11:2a:60:f1:d0:2f:39:04:
                    4a:3f:e3:79:1a:f0:f6:5a:bb:c5:6d:03:fa:98:7a:
                    36:25:5f:8d:fc:43:e8:f4:bf:b9:49:40:e5:05:1f:
                    7b:87:94:4b:b2:91:44:40:a1:15:32:ad:7a:12:ae:
                    05:38:57:e7:e5:14:59:45:7d:6d:da:27:7e:02:2b:
                    b9:21:88:a6:95:bf:fd:79:15:13:ec:06:59:fe:90:
                    17:ca:a7:fd:11:c7:f3:78:69:19:54:ef:54:51:51:
                    09:02:ef:63:c3:c6:62:8c:4a:e3:dd:54:b0:2d:58:
                    a8:72:13:5f:43:c7:09:ea:b3:ed:e9:b6:31:cf:98:
                    dd:d8:99:e3:3c:cf:a7:99:32:6d:2a:5d:fc:d8:4b:
                    5c:75:cf:a9:bf:88:4b:17:0a:76:91:4e:f4:ad:15:
                    7c:ae:4e:8d:fb:1d:22:51:bb:da:2d:d5:43:93:50:
                    9d:0c:02:08:75:15:81:41:4c:b2:4d:04:a2:32:57:
                    70:e8:78:a7:ea:a7:27:8f:51:96:ac:b8:bc:e3:66:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:4A:B2:95:E3:F2:C3:84:D5:0C:F4:7E:07:D9:5F:DD:27:A0:94
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8VKspXj8sOE1Qz0fgfZX90noJQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:f7:3b:11:2f:b2:34:5a:50:c5:60:f4:a2:74:0e:ca:fc:fc:
         13:b2:38:50:25:d5:16:9a:40:9c:c0:84:16:99:96:27:fb:a1:
         f7:d9:3f:ec:9a:f8:6b:97:1b:67:ec:9c:26:96:e8:df:c3:6a:
         f3:7f:0d:bb:d7:35:68:83:e0:a7:d6:c8:14:e3:67:36:b2:00:
         8e:e0:0f:55:14:5a:d2:7b:cb:07:88:21:60:94:f5:2c:08:46:
         c9:ae:52:c9:0f:b4:18:d5:c1:ff:f8:14:b6:d9:87:ab:b1:4f:
         46:df:d4:ee:70:a9:14:cd:dc:7f:61:19:af:04:0b:42:82:2b:
         4a:7f:a0:a3:7b:c0:2d:c5:6f:ba:31:19:b9:12:fa:9d:be:c9:
         7b:41:21:1a:9a:65:69:b9:c6:b0:c7:26:2d:aa:56:39:3c:b8:
         17:3a:d4:42:ce:42:fb:fd:94:cf:d8:a1:02:43:d8:1d:b7:21:
         d4:5a:da:f1:27:0d:ea:56:9d:fa:b1:03:fb:9f:d3:5a:81:ff:
         46:ff:c2:2e:bc:6c:56:7d:5f:dc:34:14:4b:82:11:19:44:d9:
         c4:9c:85:95:29:d3:73:92:4d:61:69:b4:92:94:70:68:b6:47:
         9b:0f:54:96:49:1a:5f:50:0c:02:b3:f7:1d:1c:20:8d:14:de:
         40:73:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:00 2026 by rpki-client