Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KWsDsqAsmezwsQTkwI1f3q0FUY4.roa
File:                     KWsDsqAsmezwsQTkwI1f3q0FUY4.roa (raw, json)
Hash identifier:          HuOof0lSxihOkx9QQ7EdVTUJ2EcT6bmQkEsRSiEy0g8=
Subject key identifier:   29:6B:03:B2:A0:2C:99:EC:F0:B1:04:E4:C0:8D:5F:DE:AD:05:51:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KWsDsqAsmezwsQTkwI1f3q0FUY4.roa
Signing time:             Tue 31 Mar 2026 08:04:30 +0000
ROA not before:           Tue 31 Mar 2026 08:04:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6082 (0x17c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=296B03B2A02C99ECF0B104E4C08D5FDEAD05518E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:1f:f0:b0:70:98:0f:b0:94:1c:ca:5b:21:
                    f8:02:37:3e:dc:a1:1d:7b:60:9a:b4:52:54:7d:f2:
                    6c:f4:04:b5:5c:d1:58:3f:61:b6:e7:fd:6c:02:69:
                    b5:c1:3f:ad:6a:de:88:95:d1:ba:f4:c0:14:d9:8a:
                    6f:01:e4:1b:3a:8a:45:31:02:2a:48:bc:6e:95:3c:
                    a7:08:11:91:a0:a8:37:c0:de:48:59:05:50:90:5e:
                    ba:c7:83:ee:c2:89:20:42:38:fc:b1:b0:d7:9b:7a:
                    ad:c1:10:fb:34:da:be:e2:a0:65:e6:59:e8:6a:55:
                    ab:8a:ba:36:a7:f7:ff:79:d3:ac:9c:f6:f3:aa:b0:
                    85:0f:98:1d:af:90:4a:c0:83:11:f8:48:40:11:65:
                    2f:49:5d:88:37:f5:39:01:bf:12:a4:6d:97:95:ac:
                    70:ba:e1:46:1b:f6:bf:9e:b6:39:99:63:75:ab:7c:
                    61:94:0b:a0:2f:9b:b0:f9:ea:36:e5:73:6a:f6:73:
                    99:5e:51:4d:6c:cf:e1:62:19:ef:d3:c4:df:53:af:
                    33:4b:c4:2a:a7:33:34:59:e7:86:cd:98:2a:19:43:
                    08:2d:aa:93:46:9a:75:48:96:7c:2b:b5:39:fc:88:
                    c8:57:4c:24:4a:f1:bc:96:ed:c9:fd:f7:42:3e:33:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:03:B2:A0:2C:99:EC:F0:B1:04:E4:C0:8D:5F:DE:AD:05:51:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KWsDsqAsmezwsQTkwI1f3q0FUY4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:09:d0:e9:39:c8:e3:a9:a8:e0:ed:17:74:b1:be:c9:6d:ce:
         a3:1b:c7:83:7a:bc:61:a0:a0:ed:cb:42:95:47:a9:ea:bc:ef:
         8b:3f:32:bb:66:72:e3:7d:35:b6:9c:cd:f2:5f:96:af:76:30:
         a1:a1:9c:6d:f3:70:25:eb:98:9c:f6:d1:18:d8:56:17:bc:77:
         83:e5:31:67:2c:b2:92:a0:b9:2b:8c:c8:6a:1d:44:7b:f2:d6:
         23:98:6c:5f:73:ce:d8:a6:8f:69:79:7d:08:07:9d:db:32:c1:
         27:50:82:92:da:99:04:18:c5:bb:c0:db:44:f8:67:b7:88:b1:
         98:e5:c1:ed:0a:67:4c:d2:e6:fc:56:2f:85:61:e7:8b:38:6d:
         97:86:94:42:3e:a4:e9:98:6a:71:07:c7:10:30:fb:12:9e:9a:
         74:dd:48:df:1e:cb:4b:57:1b:18:1b:66:ad:a0:50:11:32:f6:
         10:ae:22:ae:51:8a:75:07:e3:af:f9:68:6f:94:3d:bb:e2:09:
         c2:41:67:df:6b:8c:67:de:b8:ee:61:af:95:f6:33:b1:5d:82:
         bc:a5:67:ba:10:ad:e3:42:15:b3:c9:97:3d:ea:8c:ef:6f:96:
         f5:b5:f0:90:eb:c2:3e:ae:14:5d:ac:ed:84:71:05:b5:08:1f:
         26:b7:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:31 2026 by rpki-client