Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy9b_FvnQzX8U1s6-l1mE-oarsY.roa
File:                     Uy9b_FvnQzX8U1s6-l1mE-oarsY.roa (raw, json)
Hash identifier:          lxv9JDEnfwFaRwWRDGIi9x8Ytocus/v2vUuwCUXm0/A=
Subject key identifier:   53:2F:5B:FC:5B:E7:43:35:FC:53:5B:3A:FA:5D:66:13:EA:1A:AE:C6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       161F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy9b_FvnQzX8U1s6-l1mE-oarsY.roa
Signing time:             Tue 31 Mar 2026 08:01:11 +0000
ROA not before:           Tue 31 Mar 2026 08:01:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5663 (0x161f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=532F5BFC5BE74335FC535B3AFA5D6613EA1AAEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:11:03:d9:74:6d:b0:ad:54:0b:69:24:06:
                    55:99:4f:cb:ab:02:57:1c:d4:0e:33:ca:6a:f6:f1:
                    0c:90:49:2f:03:1c:25:b9:53:73:d5:8a:51:f8:66:
                    d4:92:42:3a:bf:ea:59:cd:3c:c7:a1:bb:f6:62:9a:
                    32:47:90:44:86:f9:c5:b3:56:2a:03:b7:d8:ed:a7:
                    e1:36:b0:0b:8b:ec:10:fe:6c:b5:ce:96:78:34:d5:
                    99:4c:3e:6d:75:6e:21:98:ed:da:80:ff:44:cc:08:
                    84:f8:1c:8a:bc:0a:24:65:d1:64:3d:b0:35:73:76:
                    ae:28:09:72:99:5d:ce:ba:73:a5:6d:67:f6:3d:f5:
                    28:cf:09:5b:af:63:5b:95:e0:e6:9b:21:e0:7c:5d:
                    fc:f1:05:15:b9:a8:14:71:ad:0b:74:a4:02:2a:56:
                    c0:87:55:60:e3:b7:ca:59:38:e4:0e:39:ee:da:70:
                    cb:a2:a2:6d:e4:bf:d7:e6:e3:cf:e1:68:6b:88:ab:
                    6a:0a:02:7f:3b:97:1c:ab:47:cb:fd:72:bf:34:9d:
                    c5:98:1e:74:01:02:e8:65:d5:21:c7:4d:89:c8:f5:
                    8c:55:87:96:4e:91:61:c9:84:c1:c9:62:89:7c:2c:
                    70:b8:7e:d9:03:2c:51:ab:54:3d:99:e0:dd:86:ea:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:5B:FC:5B:E7:43:35:FC:53:5B:3A:FA:5D:66:13:EA:1A:AE:C6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy9b_FvnQzX8U1s6-l1mE-oarsY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:04:14:97:a1:96:95:ee:8e:03:c8:0b:49:bc:da:40:2f:
         4f:78:b3:10:73:b5:3d:83:5f:06:f4:66:b1:ad:cc:de:a8:c9:
         d7:5f:f8:de:e1:a7:b8:21:f8:c0:16:d0:87:9f:d2:ca:2c:e4:
         d2:67:a0:fa:71:98:e8:ee:b7:4d:d4:c7:0b:c6:2e:64:7f:48:
         91:72:8c:b8:2e:81:f8:24:a1:52:7e:90:d2:5f:73:2a:a1:2a:
         df:8b:ce:5b:aa:cf:5c:81:88:fa:d4:c3:da:90:ac:32:25:74:
         20:bc:83:41:ca:49:0e:7b:40:e9:30:59:d2:40:16:9e:06:0f:
         cc:aa:8b:31:95:bd:7c:8b:b7:d9:31:9d:69:cb:0c:7f:de:b0:
         ea:a1:1e:83:33:09:2d:a7:ed:0e:0d:42:00:e8:68:7f:e9:2b:
         0c:76:81:a8:27:26:40:52:5b:8a:d8:ea:f6:e6:f0:86:03:b6:
         17:7e:cd:2f:05:5a:e8:ac:e0:c6:d8:ae:82:56:4e:7a:79:85:
         0c:9c:f2:aa:20:88:47:6c:33:07:20:4a:94:d8:e5:f9:f6:a4:
         c8:16:52:73:f3:e2:55:2e:b1:47:4b:b4:0f:16:a2:d1:f3:29:
         7a:a6:28:6c:1f:83:a1:39:48:b4:89:cf:be:e2:04:d2:6c:3d:
         2a:67:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:20 2026 by rpki-client