Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa
File:                     K2vGL5uf9o5TVux-VvOA9z4licw.roa (raw, json)
Hash identifier:          FMwLRsGBKIaOHOUvKmPrpv1k1yC+ecn9LjAiW38B6xY=
Subject key identifier:   2B:6B:C6:2F:9B:9F:F6:8E:53:56:EC:7E:56:F3:80:F7:3E:25:89:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1596
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa
Signing time:             Tue 31 Mar 2026 07:59:56 +0000
ROA not before:           Tue 31 Mar 2026 07:59:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5526 (0x1596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B6BC62F9B9FF68E5356EC7E56F380F73E2589CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:8f:12:a3:88:32:11:35:e8:bd:4a:89:4c:
                    56:f2:58:42:8f:4c:48:58:04:6f:29:a6:7d:47:86:
                    94:3d:5c:12:52:61:90:b8:2f:e2:33:c0:a4:8e:50:
                    f5:2a:05:d9:5e:38:47:05:28:b2:cb:7e:71:e1:73:
                    2e:9c:d6:45:da:30:ad:6e:b0:3a:57:d5:17:05:3f:
                    b9:d6:e3:00:27:b2:20:d5:5c:20:4f:b9:c0:76:fd:
                    73:e0:0b:c6:29:f8:f2:7f:2e:bf:53:05:12:f7:a2:
                    e5:c9:dd:5b:28:e1:bf:2d:bb:20:45:97:19:73:85:
                    92:ef:4d:d5:08:73:c2:f8:66:c9:22:7f:2d:d8:f9:
                    30:b3:18:3d:04:87:4e:d5:f1:65:14:0a:77:f6:87:
                    85:67:b0:94:60:d5:12:55:e3:fc:1c:7c:e5:38:da:
                    1a:b3:d8:d6:39:c1:28:71:f7:aa:aa:bb:fb:7f:41:
                    ba:b3:6d:09:a3:4f:b2:82:45:c4:43:ca:4c:d1:33:
                    46:2d:65:c0:71:43:88:96:61:76:eb:4d:b6:e3:d5:
                    32:5a:e6:09:85:11:86:80:e1:37:c3:56:64:fd:3e:
                    a9:d1:56:f3:c1:ff:2e:b3:68:bc:c8:ff:05:84:63:
                    6b:63:a3:c0:69:fb:b8:3b:a9:73:04:39:46:47:51:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:C6:2F:9B:9F:F6:8E:53:56:EC:7E:56:F3:80:F7:3E:25:89:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K2vGL5uf9o5TVux-VvOA9z4licw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:89:ee:91:4c:24:0b:6f:b2:1b:13:0e:5f:00:fa:0d:eb:5b:
         93:d8:e8:88:e4:36:9a:94:c9:fa:f5:01:15:f3:1e:fa:c8:a1:
         74:ed:37:31:d1:69:cf:33:46:b3:03:b0:be:3a:68:33:82:41:
         0b:bc:f6:51:7e:4b:28:4c:c3:35:88:21:8b:c2:1c:bf:e1:08:
         c2:46:e0:10:10:19:75:0f:6f:67:8a:3d:85:9d:2b:da:88:84:
         4c:06:da:df:46:eb:b6:33:98:e7:54:94:14:78:db:ea:fa:97:
         4a:32:81:02:65:25:2e:be:84:1d:73:b5:66:88:64:c3:1d:b3:
         75:bd:1d:92:c4:5c:00:e9:62:38:77:64:92:9a:44:61:c4:aa:
         81:3e:d2:67:2c:48:65:2b:c6:f2:cc:d9:1a:5f:ec:b8:86:1c:
         e2:52:aa:8f:06:b9:00:fe:de:05:f0:13:d3:98:dd:6b:5d:21:
         cb:68:b6:8c:c4:70:c7:14:9d:c8:06:fd:96:13:01:79:90:c3:
         06:6f:dc:c1:8e:ba:89:42:da:01:96:83:7e:0c:9b:2c:af:b4:
         8c:fe:48:e6:9f:47:dd:0b:f0:06:2c:0c:e8:fd:0d:cd:a9:ba:
         b9:0c:c2:10:99:2b:f0:ad:37:37:6a:37:d0:7f:23:38:90:1d:
         93:00:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:32 2026 by rpki-client