Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S6C009PmLK7KgBI7iIREINzpdg4.roa
File:                     S6C009PmLK7KgBI7iIREINzpdg4.roa (raw, json)
Hash identifier:          tsZfRUQDk9n/P9VvSc5Re1i8yC2Br2cra3ib9jDZ4K4=
Subject key identifier:   4B:A0:B4:D3:D3:E6:2C:AE:CA:80:12:3B:88:84:44:20:DC:E9:76:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       169F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S6C009PmLK7KgBI7iIREINzpdg4.roa
Signing time:             Tue 31 Mar 2026 08:02:09 +0000
ROA not before:           Tue 31 Mar 2026 08:02:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5791 (0x169f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4BA0B4D3D3E62CAECA80123B88844420DCE9760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:1e:8b:26:ff:69:8a:01:00:89:eb:97:dd:
                    e3:8d:3b:2f:05:ef:8a:57:69:a7:e2:4d:65:b3:57:
                    a8:49:6e:0e:1f:7b:f1:eb:0c:2e:36:a6:22:6e:9b:
                    91:bd:62:04:8d:b4:ec:9c:bf:88:03:c8:3f:94:8d:
                    e2:1a:27:8e:1b:d6:fb:6a:a5:9d:1e:e3:f8:30:5e:
                    30:e4:3e:b1:81:d3:ab:83:be:05:5f:6c:c0:66:d5:
                    90:bd:78:1a:f5:9a:a7:df:3e:7e:d5:3f:a5:7c:8c:
                    37:0d:c4:1a:9f:44:98:d6:b7:4e:b9:aa:68:56:26:
                    df:65:23:cb:fe:42:6d:f8:00:6a:6b:d2:74:f2:a3:
                    a6:28:b2:c4:48:2a:6d:ad:17:e2:1e:6f:e8:b1:48:
                    c0:4b:12:65:65:41:25:3f:a1:83:48:46:e0:fb:16:
                    33:d0:5f:bc:6b:38:e9:2c:68:1d:a5:67:58:43:8b:
                    04:d3:5f:5c:87:29:32:55:7c:6f:b4:3c:2b:72:61:
                    b7:bd:fe:4d:0c:45:bf:d1:be:45:8d:d8:0d:54:f6:
                    ad:01:a7:23:d9:e1:e5:6d:a1:7f:9b:38:b5:47:c4:
                    6d:4c:17:f9:25:b1:4b:46:e2:f2:49:78:46:e7:f3:
                    27:d2:d8:7c:1e:5d:69:49:fa:01:5c:9e:d9:b0:c5:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:B4:D3:D3:E6:2C:AE:CA:80:12:3B:88:84:44:20:DC:E9:76:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S6C009PmLK7KgBI7iIREINzpdg4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:1c:3e:3e:7a:70:00:4e:51:17:71:80:2c:29:86:d1:12:67:
         26:ed:ab:28:a1:42:53:c8:f5:b0:11:91:0a:d4:24:9e:fa:47:
         14:86:3c:46:14:fc:90:22:cc:19:94:be:32:e5:74:d1:d9:98:
         5d:84:40:98:2d:09:29:56:70:1f:29:58:12:06:a2:9a:df:75:
         d2:51:da:53:38:e6:a9:13:65:6e:02:11:0a:94:90:b1:d4:fc:
         bb:bb:99:1e:c1:84:2a:ff:71:aa:bd:31:44:c9:64:f8:27:8f:
         ef:60:ab:d9:01:5b:fa:2e:d8:5d:a6:b5:8c:1f:6b:42:0d:0d:
         a2:57:59:f6:38:ae:41:70:9c:84:a9:cf:ab:c1:62:ff:af:00:
         ab:fd:a0:63:bf:ac:18:94:e8:ed:ca:c6:07:04:f1:82:42:e8:
         51:5d:0f:f1:03:8a:e0:60:27:36:ba:56:ca:bf:5c:91:aa:30:
         dd:2a:ad:89:3e:ea:6b:70:91:8c:e6:e0:2d:09:a5:00:54:e2:
         23:3c:4a:ce:b1:61:ce:15:59:d3:98:8a:af:af:b5:1e:03:c6:
         5b:26:76:60:d2:6a:ce:c8:fc:38:65:d8:35:5a:22:38:18:93:
         b8:fd:e2:eb:22:65:83:fe:37:57:55:a3:ba:37:f4:ae:65:5b:
         e4:6e:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client