Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa
File:                     M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa (raw, json)
Hash identifier:          bhNMxIoqTe+7mR50NEV9awNrDubjmusAKQ8RS5ocj2Q=
Subject key identifier:   33:7F:B3:FF:4B:13:C6:0B:D5:DD:29:BA:E2:D5:E0:CD:D4:0D:36:FC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       139F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa
Signing time:             Tue 31 Mar 2026 07:55:57 +0000
ROA not before:           Tue 31 Mar 2026 07:55:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5023 (0x139f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=337FB3FF4B13C60BD5DD29BAE2D5E0CDD40D36FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:81:41:96:b1:5e:0d:d7:10:93:23:33:a9:
                    e2:d1:f7:c4:d1:04:1d:41:e4:b8:19:b2:34:a6:06:
                    bd:e2:90:01:fd:28:5a:63:c3:30:1b:d4:dd:58:a7:
                    62:b7:e6:30:25:4f:72:45:76:da:6e:aa:e7:9e:e5:
                    92:c5:ad:b0:0d:ff:21:1e:d3:b2:df:da:81:94:5f:
                    53:bf:7f:d7:85:85:90:bc:e0:c3:8c:6f:55:2f:5f:
                    a1:03:d1:db:62:01:3a:aa:b1:37:88:a0:79:bf:4c:
                    9b:e3:dd:f8:ef:af:57:3a:99:97:01:ba:d2:35:07:
                    77:b2:b7:e8:15:14:eb:79:1f:6f:63:e2:2c:71:df:
                    3e:70:f1:9a:ea:02:89:d2:55:b8:7c:16:91:c2:06:
                    1b:38:fd:e6:c8:47:35:a5:c8:27:bb:db:77:d6:54:
                    c9:08:f1:bb:25:49:5c:17:73:07:a1:08:7f:9c:ce:
                    27:79:28:ef:86:21:17:07:e7:75:a6:24:6c:d7:49:
                    8c:1c:c0:73:2c:96:4e:0f:ac:3f:38:0e:40:e8:cd:
                    e0:2e:e2:00:91:e9:2b:2b:28:2a:ed:34:f2:e8:6b:
                    b7:b7:01:de:7b:aa:47:15:b6:81:04:e3:e4:03:5a:
                    bb:19:fd:b5:5f:d3:e4:47:9e:11:ad:4b:8b:fc:3f:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7F:B3:FF:4B:13:C6:0B:D5:DD:29:BA:E2:D5:E0:CD:D4:0D:36:FC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M3-z_0sTxgvV3Sm64tXgzdQNNvw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:70:db:c9:21:30:08:1d:88:a4:18:aa:42:5b:01:ea:02:
         9c:c8:4b:01:f6:64:d8:10:49:94:72:41:db:7c:68:56:65:b6:
         3c:95:53:08:2f:3b:35:97:40:eb:af:1c:08:83:ec:24:8c:d2:
         31:34:15:39:f5:65:d7:f7:61:27:5c:e7:3a:83:ba:f3:8d:f6:
         83:cd:dd:9b:6f:56:3d:68:23:40:4b:cc:82:b0:d8:f7:86:a4:
         4c:7a:f0:eb:a9:32:e9:36:69:7e:e9:0a:28:d0:6d:78:e5:13:
         d3:00:5f:08:ff:d1:72:a3:d8:e3:77:2b:cc:04:e4:e3:aa:f8:
         67:3b:6d:19:b1:28:7a:f7:4c:bd:03:ee:08:21:32:90:a2:ba:
         3c:10:2e:b6:61:31:37:58:2e:09:71:92:93:55:49:15:0a:a8:
         c7:7f:53:78:79:6e:20:cc:b1:7a:57:55:6e:29:b9:3b:e9:bc:
         bb:3d:a9:f2:c1:4f:27:8b:77:22:c6:71:de:25:73:28:e3:4f:
         9b:9b:6d:1b:f3:c4:a8:2e:8c:35:0b:bb:d8:59:81:0c:e7:b7:
         9e:c1:c0:68:c2:82:15:a0:cf:c2:12:38:38:64:87:b1:b8:a7:
         c4:2e:4f:44:98:64:e4:5b:6d:0a:ff:6a:81:8c:02:e5:80:18:
         43:46:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:26 2026 by rpki-client