Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R7tEPaVWy52-ca4vlLMfxGRzlBo.roa
File:                     R7tEPaVWy52-ca4vlLMfxGRzlBo.roa (raw, json)
Hash identifier:          y0SwrsTJpjL2eL8OsnnxedRfh84/czqI36jG06KrWgk=
Subject key identifier:   47:BB:44:3D:A5:56:CB:9D:BE:71:AE:2F:94:B3:1F:C4:64:73:94:1A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R7tEPaVWy52-ca4vlLMfxGRzlBo.roa
Signing time:             Tue 31 Mar 2026 08:00:22 +0000
ROA not before:           Tue 31 Mar 2026 08:00:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5570 (0x15c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=47BB443DA556CB9DBE71AE2F94B31FC46473941A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:3a:64:67:1a:28:bc:8c:27:43:46:bf:5c:
                    bb:0c:92:08:5d:cd:b4:1f:42:b8:52:b8:a0:e2:54:
                    ef:3f:4d:8f:96:42:25:0e:bb:7a:20:ad:39:e6:b8:
                    09:0f:5d:11:b8:95:1e:71:81:65:9a:96:f3:e0:16:
                    64:59:ca:b9:b5:40:c6:b2:0e:52:8d:75:50:8f:d6:
                    d8:cc:7a:de:b6:04:d2:4e:f4:b4:69:2f:5a:f3:78:
                    8e:b9:5a:d6:16:92:34:3a:14:97:53:43:97:8a:dd:
                    7e:68:72:16:44:0f:60:22:05:72:1a:c1:50:f9:b3:
                    5e:8b:25:4a:c7:d1:7a:9c:1a:99:32:b2:22:d2:54:
                    a3:fc:fe:01:46:5c:40:aa:fe:35:06:86:68:15:8a:
                    f6:a7:b4:ad:b0:6d:37:1a:ff:61:b4:e9:6f:a0:5d:
                    6a:e1:d7:48:7a:3e:27:47:5b:a4:8a:1a:ed:59:81:
                    69:3e:6b:4a:e1:eb:96:02:5e:c5:77:31:53:a8:bd:
                    2e:1f:66:80:01:b7:57:6a:ce:b9:9e:9d:bb:50:23:
                    6f:cb:4c:a6:c1:f7:d1:40:90:4b:84:92:7f:00:3f:
                    c1:11:d4:31:a3:35:c3:13:f3:56:03:fa:9b:d4:60:
                    f0:5c:90:50:c7:7e:e4:62:43:74:e5:7a:2a:48:4a:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BB:44:3D:A5:56:CB:9D:BE:71:AE:2F:94:B3:1F:C4:64:73:94:1A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R7tEPaVWy52-ca4vlLMfxGRzlBo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:82:73:b9:99:9e:f5:f7:3b:70:81:a9:db:1b:78:a5:ab:b0:
         21:02:4f:90:4d:4f:a5:c6:61:6f:d2:86:c2:70:3e:85:ea:9c:
         1a:a5:aa:05:23:f7:30:75:9f:05:1d:36:40:44:12:0c:59:d8:
         5b:ca:e1:aa:90:fc:a0:96:38:9a:3b:c9:d0:78:47:f0:4f:a1:
         aa:6a:eb:72:ba:dc:d0:c1:d9:cc:16:af:9b:09:5a:f1:14:38:
         8e:24:81:da:a2:e6:1f:36:8a:5d:ef:1e:a7:f1:1c:7f:cc:99:
         9a:9e:4c:f1:f1:3a:2f:77:41:44:24:ba:b7:da:57:4c:7c:be:
         23:2f:81:d6:46:fb:c2:06:96:42:30:97:21:f5:3c:85:aa:53:
         77:64:16:1f:fd:ec:0c:e1:77:72:75:bb:9d:18:10:ab:cd:b8:
         50:35:57:a8:f4:59:08:c9:a3:42:70:f6:4a:48:42:45:7b:54:
         20:86:86:bf:4c:b9:d2:66:70:41:31:72:96:a4:2f:51:43:a4:
         66:ca:8b:a5:ad:9c:12:10:4c:c2:80:cd:a3:79:be:03:c0:c4:
         52:7a:e0:82:9c:a5:29:b5:0f:20:e6:48:68:05:20:eb:ed:30:
         86:b5:3e:78:e4:02:70:4a:a9:30:72:84:fa:93:f8:d8:d3:f1:
         da:bb:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:06 2026 by rpki-client