Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa
File:                     QyOBJl4_OREBkvT8-ESTYugsBd8.roa (raw, json)
Hash identifier:          86y51RzDNZi91nmhVMAyV6sSsawMXDqDzHsYXuF9HVA=
Subject key identifier:   43:23:81:26:5E:3F:39:11:01:92:F4:FC:F8:44:93:62:E8:2C:05:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa
Signing time:             Tue 31 Mar 2026 08:04:38 +0000
ROA not before:           Tue 31 Mar 2026 08:04:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6100 (0x17d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=432381265E3F39110192F4FCF8449362E82C05DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:93:8b:eb:2a:18:f3:d7:ee:75:b4:63:f4:
                    cb:38:3d:42:a7:52:8d:10:d8:f4:3a:71:6e:dc:3f:
                    1f:2d:e7:07:8c:85:71:9e:35:05:f3:b2:02:29:bb:
                    ee:ce:9d:0e:57:bd:9a:8f:fd:52:47:1e:eb:c9:9b:
                    a2:cd:3e:9e:58:7b:f7:ff:fb:fd:ae:4c:b8:d0:fb:
                    f4:5e:62:94:34:0b:67:be:df:68:de:f8:8d:0f:99:
                    d4:b5:ef:14:2b:43:1d:de:81:c9:89:18:9f:25:0c:
                    dd:85:5b:a0:d2:f3:92:4c:d3:59:93:38:ff:79:0e:
                    ff:0c:df:12:c9:eb:e4:e4:2c:dd:03:0a:2b:8d:16:
                    aa:50:61:24:50:ad:a7:81:b8:08:d3:21:99:ee:16:
                    20:f4:da:bc:3c:ef:98:60:76:14:f8:79:bc:62:98:
                    8d:7e:8f:68:12:6a:e0:4e:ca:59:c4:8a:7a:47:e6:
                    6b:d3:ab:2a:ad:10:49:6a:ee:f4:ed:70:6e:38:26:
                    63:fc:7a:85:80:c8:a4:9d:65:77:81:13:9f:b4:be:
                    4b:b4:65:9e:37:61:a5:51:6c:b8:ca:49:c1:21:47:
                    9c:f5:11:f2:86:72:5c:38:8a:a0:43:04:d3:c3:52:
                    b4:75:c2:ea:89:68:da:02:cb:17:0c:b2:19:d1:e4:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:81:26:5E:3F:39:11:01:92:F4:FC:F8:44:93:62:E8:2C:05:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QyOBJl4_OREBkvT8-ESTYugsBd8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:91:e6:cb:17:bd:25:81:9f:92:fc:93:86:d3:a9:1b:fe:
         ce:f5:60:18:e4:6a:c4:00:7f:42:6c:2a:bc:d1:f6:9b:8a:33:
         7e:1f:17:70:54:49:c2:25:53:30:9c:6e:b1:31:cf:e7:89:52:
         94:4d:09:be:b2:76:01:2c:1a:1c:58:eb:48:c9:c3:96:3f:cc:
         b3:78:25:b3:86:9a:43:be:5e:4a:ba:d9:8a:11:5e:e0:bb:45:
         20:d5:a7:c7:e5:a5:66:8a:41:60:4c:3b:94:6f:23:1e:fb:3d:
         89:5a:69:69:b3:c0:42:23:82:45:5d:92:f9:00:69:5b:43:50:
         7b:ee:16:76:ff:ec:6a:81:01:58:5c:f3:82:d1:ab:ac:b0:85:
         2b:34:91:48:29:e4:89:18:2d:7a:5d:c1:e7:e2:9c:a8:5b:7e:
         25:79:2f:5b:a4:56:09:6e:9f:1d:98:3f:31:1e:7b:f9:c9:47:
         48:66:e1:d3:59:b7:09:d9:8c:68:0d:2f:49:62:c0:be:8f:11:
         d1:c2:f7:e2:18:8b:55:2c:39:2a:c2:21:b9:84:3d:62:1b:b9:
         2b:a3:5b:99:55:90:2e:63:7b:d6:b3:2f:3c:a1:35:a6:d7:d6:
         ad:0a:d9:af:2f:28:6f:8c:27:8e:ab:1a:82:dd:4d:57:fe:e0:
         69:74:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:58 2026 by rpki-client