Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa
File:                     RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa (raw, json)
Hash identifier:          ZxRmrdpOjwiCunLYrU3vaRE5+WUpqYDJDL74abf8gtk=
Subject key identifier:   44:D0:75:C1:0A:86:3F:F3:9A:77:F0:AA:2A:69:AA:B9:AF:FA:3B:2E
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       B3
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa
Signing time:             Tue 31 Mar 2026 07:55:21 +0000
ROA not before:           Tue 31 Mar 2026 07:55:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        160.249.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=44D075C10A863FF39A77F0AA2A69AAB9AFFA3B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:d6:e8:66:b0:48:e8:fe:15:14:26:cc:21:
                    c5:45:68:1e:52:64:b0:45:cb:23:26:3b:c3:d9:a9:
                    30:18:16:d5:5a:c2:d7:49:0a:13:7a:c4:8b:21:16:
                    ce:65:9a:5e:16:d0:65:09:64:73:81:77:01:e0:e2:
                    c2:51:3a:2b:80:dc:f2:9a:37:da:79:e5:41:2f:0d:
                    68:49:c2:6b:37:80:8f:39:b9:59:29:e7:72:1c:48:
                    b1:4a:db:ff:9d:85:be:77:ad:99:ea:3b:ec:7c:cf:
                    8c:19:40:f8:ab:a5:10:96:00:62:1c:e8:d3:30:d2:
                    a3:53:a1:bb:c9:ba:43:9f:31:36:c6:0e:86:2e:18:
                    be:d3:54:9f:6f:c7:70:70:0e:ba:26:39:70:e7:63:
                    66:ab:c2:87:17:26:88:b5:61:02:f3:a8:ac:42:56:
                    aa:34:6a:81:34:7f:0e:e3:3b:e4:9f:ca:80:09:7e:
                    b6:a3:1b:c0:f0:4b:24:dd:61:f6:d5:28:64:93:94:
                    62:23:60:34:24:d6:a7:77:09:b8:f6:65:e7:5e:64:
                    e9:e7:14:32:cc:81:f0:4e:4f:f9:1b:27:67:59:d0:
                    4b:70:f9:03:c1:be:b0:a9:3d:84:26:80:43:fe:1e:
                    aa:2e:e7:a8:66:de:82:15:ce:f4:0b:3d:ef:15:85:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:75:C1:0A:86:3F:F3:9A:77:F0:AA:2A:69:AA:B9:AF:FA:3B:2E
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNB1wQqGP_Oad_CqKmmqua_6Oy4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:bc:89:d5:fe:34:17:d0:d6:9e:d6:ef:02:9b:0d:23:72:
         c4:b2:3d:e0:2c:35:26:69:f6:4a:55:79:86:0f:8a:dd:bd:8d:
         65:68:40:39:4a:41:5c:23:50:cf:a0:d4:d5:56:73:bc:6b:49:
         5d:b4:5e:26:4b:f3:13:74:44:2a:56:97:94:8c:0a:82:8d:97:
         72:3e:6c:30:e4:7f:6d:44:f8:4e:aa:9c:e4:29:ca:99:87:67:
         41:35:1d:6f:17:17:26:ff:9b:7a:7c:07:6a:b0:e4:63:d5:5d:
         d1:e2:de:3d:1c:9b:54:af:21:d5:1f:a2:f9:06:97:7c:a6:30:
         c5:9a:94:bc:1d:ec:6c:7a:f0:94:8d:7b:c1:93:93:d6:a7:bb:
         1f:e8:61:a2:40:0e:89:e1:54:18:11:29:34:c2:ec:78:fa:a7:
         60:e1:77:96:f8:39:ae:ef:d3:b4:11:be:ad:94:de:4a:fa:57:
         9d:8a:53:bc:07:5c:8e:f1:03:b9:de:ff:ab:e0:17:70:20:3b:
         dd:4d:51:c5:13:8e:fd:43:83:bc:00:87:d8:ce:5b:8e:79:75:
         a1:42:3e:05:36:64:7f:5a:00:0e:63:fc:d8:25:99:32:17:c6:
         fe:93:4c:c2:a6:57:18:79:72:ee:6c:18:d9:c6:36:84:9c:2b:
         9c:c1:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:59 2026 by rpki-client