Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJ5wALERy3JmxvDNVIlGTp54qWM.roa
File:                     TJ5wALERy3JmxvDNVIlGTp54qWM.roa (raw, json)
Hash identifier:          i8truf4B+q6mlwJSak7POG/TuNghdi+RFNUnmApM6ZY=
Subject key identifier:   4C:9E:70:00:B1:11:CB:72:66:C6:F0:CD:54:89:46:4E:9E:78:A9:63
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJ5wALERy3JmxvDNVIlGTp54qWM.roa
Signing time:             Tue 31 Mar 2026 08:04:37 +0000
ROA not before:           Tue 31 Mar 2026 08:04:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6097 (0x17d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C9E7000B111CB7266C6F0CD5489464E9E78A963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:45:88:27:ff:1c:0a:1b:b0:00:34:fc:26:
                    9a:24:f7:c1:c1:6f:13:90:0a:c4:82:2c:41:64:8c:
                    de:34:c0:8a:b8:1f:0b:64:59:ac:f1:e2:5a:86:d3:
                    06:3b:19:19:f2:ce:57:07:72:6a:bb:8c:00:ab:8e:
                    58:3b:7a:7a:27:59:51:ff:52:52:1e:9f:7c:34:48:
                    11:6f:d9:8a:54:04:68:ab:d5:ec:61:54:66:e6:7a:
                    2f:69:28:98:eb:0c:f8:79:f8:3e:c2:6e:62:f8:e5:
                    db:32:13:d3:ec:bf:07:da:9c:c1:10:92:c3:c1:d9:
                    d7:e1:ff:34:ee:0b:b5:02:b3:ba:3d:54:73:7c:93:
                    50:de:d4:01:b2:1e:8f:4d:65:db:63:d3:13:05:b2:
                    c3:5a:df:0b:ac:8b:94:64:c7:2f:4c:40:5c:f9:56:
                    1f:36:a9:49:2e:ac:4d:12:8f:2d:4c:41:81:82:2a:
                    95:b9:ef:af:14:c6:7c:fa:d8:21:e2:d7:b0:21:ed:
                    ba:25:41:04:bf:91:c6:95:d2:d3:d1:d8:57:82:2b:
                    09:16:a6:44:81:52:60:90:8d:5a:7d:df:96:37:b3:
                    14:e1:cf:83:e9:2e:ca:9a:13:2c:af:d4:38:75:fb:
                    72:e4:66:84:f1:86:2c:2b:95:17:4f:a4:b1:aa:ff:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:70:00:B1:11:CB:72:66:C6:F0:CD:54:89:46:4E:9E:78:A9:63
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TJ5wALERy3JmxvDNVIlGTp54qWM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:b4:c6:3a:20:f4:ee:4c:23:2f:d9:9e:81:78:22:c4:51:7f:
         24:e0:9d:55:e1:f5:92:d6:c8:e2:a8:23:47:7e:38:89:52:ef:
         89:74:dd:b4:fa:c9:cf:25:63:1d:f9:36:8e:fc:f6:ed:cf:7a:
         18:b1:55:72:ce:dc:f8:d3:19:7d:8a:8f:27:73:2c:86:cb:0d:
         fe:22:09:d9:b0:fc:49:51:c0:5d:f0:80:41:a9:ec:68:a2:ec:
         f2:58:9c:1c:50:dc:81:be:91:dd:63:0f:72:a2:19:91:c4:29:
         aa:f5:08:35:e4:b0:96:8b:97:9b:01:03:a0:e4:50:08:ed:56:
         23:a0:ea:e8:4c:e0:3c:19:ea:cf:08:dc:a8:fd:86:80:08:4d:
         d6:23:e6:10:32:85:b5:d4:05:ce:29:75:ae:2f:1b:df:4f:ff:
         43:99:91:c1:06:90:54:af:66:6c:48:d0:72:65:e3:9d:67:35:
         11:5e:1a:b6:84:e5:e4:e1:32:9e:d4:5f:62:96:d8:c4:5f:a0:
         8c:30:d2:69:14:98:96:f5:ee:70:31:20:9c:fb:95:62:d7:4e:
         45:c8:33:19:8e:ae:34:aa:00:fd:00:09:90:57:bd:55:ce:19:
         79:72:c6:41:ec:35:91:61:a0:6d:8e:aa:fb:a1:30:e8:02:38:
         bc:8f:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:59 2026 by rpki-client