Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NrwANh3TcUHzZT8MHs_N-txzMgY.roa
File:                     NrwANh3TcUHzZT8MHs_N-txzMgY.roa (raw, json)
Hash identifier:          swbIda7UsEXBEzg/WQRDevnHb+zXYzbBQO/GACviLhg=
Subject key identifier:   36:BC:00:36:1D:D3:71:41:F3:65:3F:0C:1E:CF:CD:FA:DC:73:32:06
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16E6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NrwANh3TcUHzZT8MHs_N-txzMgY.roa
Signing time:             Tue 31 Mar 2026 08:02:43 +0000
ROA not before:           Tue 31 Mar 2026 08:02:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5862 (0x16e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=36BC00361DD37141F3653F0C1ECFCDFADC733206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:2d:d7:ce:79:69:24:c3:fa:ba:c4:43:09:
                    d4:d4:e8:44:25:2c:70:33:f6:c5:a0:9d:01:7a:4d:
                    6f:91:f7:f6:65:43:c2:a7:5b:d5:3e:9e:0d:24:e6:
                    84:1d:89:e8:0e:b2:33:c8:08:53:d4:7b:a9:5d:42:
                    5c:8f:10:a4:a2:27:fe:47:10:f9:1a:9e:ee:53:ca:
                    a4:b8:8a:ee:a8:c3:a6:81:55:8a:52:eb:c0:ee:95:
                    5c:cc:83:ac:0c:fa:99:d3:29:05:78:d8:0c:a2:04:
                    c8:3b:c6:bf:84:5b:de:a9:2d:af:0a:d2:4a:e6:f8:
                    60:a6:9d:6c:61:23:5e:1d:45:ab:30:0c:89:1a:3f:
                    74:b4:1e:93:c4:4c:64:7a:19:d1:ef:ae:22:0c:82:
                    3c:40:fa:05:a8:d6:7c:64:58:6f:d4:35:65:02:e1:
                    bb:a9:e8:61:a7:46:60:de:57:b1:75:09:f2:b7:0e:
                    8f:87:d8:79:0a:87:bf:38:90:3f:fe:24:e1:c5:ca:
                    af:b4:08:2e:0c:61:36:41:0c:ad:26:5b:34:6e:d2:
                    c0:1c:0c:97:c0:50:55:c9:50:13:b5:bf:10:7c:c5:
                    2c:99:83:94:d5:af:fb:93:0c:9c:f3:a0:b7:df:c8:
                    3d:72:33:d3:33:02:1f:af:3c:76:e4:c9:88:fc:c8:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:00:36:1D:D3:71:41:F3:65:3F:0C:1E:CF:CD:FA:DC:73:32:06
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NrwANh3TcUHzZT8MHs_N-txzMgY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:13:a4:cf:18:61:d6:3a:ed:46:56:31:0e:6c:ae:ee:2f:
         2e:b4:a4:14:48:c4:0e:be:6a:bf:dd:bc:86:d7:2e:ff:bc:48:
         39:0a:90:a3:c9:cc:b0:c6:57:74:2e:69:b3:ad:e0:0e:4d:6e:
         1b:29:e9:50:1f:63:c4:c7:ee:ad:7e:bc:7c:d5:27:3e:20:c0:
         68:d2:ed:77:4a:2e:b4:05:69:5a:d0:c3:9a:af:c7:ea:67:4c:
         42:2b:fa:c4:35:be:29:14:26:ae:1e:07:60:84:a1:7d:f0:4f:
         09:93:e1:46:7b:61:dd:24:b9:d1:d9:05:74:2c:1c:a5:8a:99:
         f8:5e:f1:25:cd:b8:e2:35:9b:a0:8b:00:d2:d3:da:96:94:0c:
         aa:f8:0d:ca:18:76:48:bc:e0:b3:c4:27:11:18:d8:df:2a:0f:
         48:d8:64:b3:24:49:c9:78:74:66:f1:3f:3a:e7:80:7c:99:c8:
         11:18:4f:17:72:36:6c:fb:35:23:62:ca:a5:93:85:04:b1:04:
         4c:88:be:bd:3c:b4:12:df:b7:13:2d:f7:b6:e0:f7:b4:1f:30:
         16:5c:ac:c6:bf:8d:0f:4f:1c:6c:a2:3c:8d:9a:46:93:3e:1f:
         96:4d:2e:69:76:9f:a9:ee:90:6a:6a:ef:9f:ac:d3:05:2a:b6:
         e7:0c:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:02:10 2026 by rpki-client