Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PifVc7Ff9OiMy0MZJr5XT356Pb8.roa
File:                     PifVc7Ff9OiMy0MZJr5XT356Pb8.roa (raw, json)
Hash identifier:          mPi6CEvgBtlViKoeQft0N11OUMyj2pPXDWsQwEOudg8=
Subject key identifier:   3E:27:D5:73:B1:5F:F4:E8:8C:CB:43:19:26:BE:57:4F:7E:7A:3D:BF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PifVc7Ff9OiMy0MZJr5XT356Pb8.roa
Signing time:             Tue 31 Mar 2026 07:58:03 +0000
ROA not before:           Tue 31 Mar 2026 07:58:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5296 (0x14b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E27D573B15FF4E88CCB431926BE574F7E7A3DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:f5:d6:bb:be:aa:20:11:02:5d:fb:84:cd:
                    b9:ce:77:8b:c7:b6:d1:25:cc:dd:ce:39:62:1f:bb:
                    93:66:44:60:04:dc:88:bd:5e:c2:a7:b7:ad:a2:65:
                    4e:6c:c4:bd:f6:db:63:9b:a8:3d:04:93:16:85:42:
                    45:36:02:f5:fb:4d:86:03:30:b2:a5:1d:ad:61:49:
                    33:a9:9f:6f:1d:d3:f7:3d:6d:fb:bb:2d:91:08:da:
                    b2:bc:c9:9e:e3:39:09:3d:e4:3d:a2:db:77:c9:75:
                    92:c1:5e:65:79:44:e5:a6:60:ae:0a:b3:c0:0d:2e:
                    b4:ee:e0:7d:fe:a1:8c:65:34:23:49:77:c5:c9:23:
                    a2:a7:63:6e:ae:8b:dc:fd:80:5c:de:64:bc:de:90:
                    34:0f:b4:d8:4c:a1:66:68:fe:d4:aa:8d:d8:c1:1e:
                    db:76:ac:97:b4:5e:8c:8f:0c:73:49:e6:b6:0c:cd:
                    90:23:14:c2:ca:bf:b5:e1:ae:54:cc:6b:56:35:ef:
                    4e:4a:35:5d:72:eb:d0:7d:b7:8b:9f:76:96:87:67:
                    a8:1f:74:c7:68:d7:8e:28:c5:95:59:c5:46:2e:8e:
                    eb:a9:43:7b:15:0c:2b:e7:f5:74:05:b4:11:42:12:
                    6e:3d:c4:21:fc:cd:0f:16:55:ea:0f:18:d7:53:41:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:27:D5:73:B1:5F:F4:E8:8C:CB:43:19:26:BE:57:4F:7E:7A:3D:BF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PifVc7Ff9OiMy0MZJr5XT356Pb8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:15:56:40:34:87:e7:35:53:52:96:09:e5:b4:e6:52:08:
         a4:70:ca:00:73:d5:9b:d9:aa:16:ac:26:02:af:52:c5:41:1c:
         51:ce:60:87:a9:d6:3d:90:fc:fc:02:ea:a4:a5:ea:72:3c:fe:
         f6:98:76:b5:26:7c:20:6a:71:1d:7a:d4:2d:f6:12:f0:7a:6f:
         4e:85:09:a8:fa:3f:3a:5a:79:e2:32:9d:bd:e0:b9:a2:6f:cb:
         b8:47:8b:a9:9a:11:e4:83:4f:74:0d:0f:43:77:d9:b4:59:c7:
         27:15:2b:05:58:56:81:a7:c2:43:9e:d7:d6:50:a1:82:38:7b:
         a9:9c:f9:20:df:cf:72:23:a1:5a:44:98:22:05:13:3e:0d:88:
         f5:69:d2:88:8e:14:28:66:92:6f:72:be:6a:b5:38:c2:cf:c2:
         98:ee:11:2e:70:46:96:0a:1c:ef:91:88:84:cd:2b:00:f3:e0:
         83:c2:31:05:7d:a5:57:6f:a3:a3:7b:48:d0:c1:65:ad:43:2e:
         5d:32:fd:2c:f2:63:4e:62:a5:af:01:52:8b:3e:90:2b:f7:3d:
         17:9c:aa:d3:db:ec:ef:d0:40:20:6f:c5:d4:8f:ce:a3:95:da:
         21:84:e5:38:ed:19:4e:e2:d1:f9:ec:d9:de:db:16:70:bb:87:
         58:ec:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client