Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/P0eg0GxBkRTDxBLhKZbm44BtDLw.roa
File:                     P0eg0GxBkRTDxBLhKZbm44BtDLw.roa (raw, json)
Hash identifier:          vn80hfkDXfSzU2FWWNmqJi9+zRq6oA+flw4PweY/hfo=
Subject key identifier:   3F:47:A0:D0:6C:41:91:14:C3:C4:12:E1:29:96:E6:E3:80:6D:0C:BC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P0eg0GxBkRTDxBLhKZbm44BtDLw.roa
Signing time:             Tue 31 Mar 2026 08:00:02 +0000
ROA not before:           Tue 31 Mar 2026 08:00:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5540 (0x15a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3F47A0D06C419114C3C412E12996E6E3806D0CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:e3:c3:ae:2d:cd:1a:e9:c2:11:63:46:57:
                    9b:a5:c7:c3:88:df:71:8e:0c:d5:c4:4c:d9:90:c0:
                    34:85:fe:14:e0:f4:cd:6e:00:e0:ba:6c:48:a7:23:
                    0d:ff:76:c1:ef:0f:2e:bf:17:6e:16:a9:d7:49:55:
                    3d:6a:02:55:f2:94:42:2b:b7:78:a9:d8:72:ea:55:
                    6e:e7:5e:fa:3e:95:42:ed:0c:7d:8c:e0:60:97:d6:
                    5b:1d:c5:a6:a9:cd:80:d5:fb:4d:0b:5e:5e:b3:34:
                    c2:30:a7:59:41:75:0e:aa:99:98:c7:34:aa:e0:6e:
                    5f:2b:59:34:02:cb:e9:87:1a:ba:49:a8:2b:ab:e3:
                    2d:b4:a3:1a:1c:65:27:6d:9f:2e:d5:d6:00:de:22:
                    58:cc:ca:bc:01:47:d1:9c:d5:53:36:d0:46:ac:86:
                    84:f9:98:9f:3a:52:65:ee:a2:6f:e2:2b:82:2d:f4:
                    5e:10:e7:fd:c8:d0:9b:cb:86:55:5c:9e:91:07:00:
                    a6:db:78:c9:cc:a0:5c:5d:02:02:fb:96:4d:e4:06:
                    18:29:51:c5:d0:1a:33:23:95:d1:4b:df:11:50:d5:
                    0a:9c:ff:a7:f1:57:b6:1f:ca:4e:65:e9:eb:99:1e:
                    2c:d4:4c:79:d8:a2:30:66:04:01:2d:b0:7d:f7:a5:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:A0:D0:6C:41:91:14:C3:C4:12:E1:29:96:E6:E3:80:6D:0C:BC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P0eg0GxBkRTDxBLhKZbm44BtDLw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:33:3b:fc:04:77:43:bf:21:7a:bf:8a:12:7c:77:fd:48:8f:
         a8:46:02:b4:f1:f4:e4:1e:39:74:06:ae:f5:e9:74:cc:9f:9d:
         06:62:71:99:41:12:cf:b8:94:26:59:05:ad:fa:02:b4:b2:5b:
         a2:81:90:4d:79:e7:40:89:27:6c:21:df:9a:a9:28:2c:de:3b:
         11:5f:07:96:28:06:00:14:90:7d:d7:01:4a:e8:4c:ad:91:e8:
         e6:68:f9:29:c3:21:07:95:43:38:91:8e:4b:73:6b:c6:8f:ff:
         63:5c:f7:79:ca:cd:82:e4:0a:80:b0:4a:58:a8:23:95:ed:36:
         5e:79:f9:47:dc:7e:1c:8d:cc:d7:7f:9e:7f:fa:40:19:35:77:
         8b:72:d6:6b:67:2d:0a:dd:1c:1e:53:8f:ce:a3:32:a9:58:02:
         2b:99:7e:62:91:f6:d2:b2:b0:70:8b:36:fa:9c:46:48:6d:85:
         a0:0b:d8:1e:b0:04:6a:08:f9:50:34:32:8d:cd:8e:e6:e6:df:
         4d:14:fa:89:c1:9f:1c:21:81:4b:b9:e3:19:8c:99:a7:ca:b5:
         a0:69:fd:db:16:fb:78:79:3f:66:c5:21:11:99:79:65:4f:60:
         56:18:d0:d5:09:cf:1e:8e:df:2a:4d:e5:fa:cd:b1:f7:d0:c9:
         9b:14:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:32 2026 by rpki-client