Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VR7tA6XsyGOhWmdZ6opKzUhgO4c.roa
File:                     VR7tA6XsyGOhWmdZ6opKzUhgO4c.roa (raw, json)
Hash identifier:          XoTKCVFM7vN3uzohmfvZRS5pPF5vCzUMpppmvEgDdRs=
Subject key identifier:   55:1E:ED:03:A5:EC:C8:63:A1:5A:67:59:EA:8A:4A:CD:48:60:3B:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       155F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VR7tA6XsyGOhWmdZ6opKzUhgO4c.roa
Signing time:             Tue 31 Mar 2026 07:59:31 +0000
ROA not before:           Tue 31 Mar 2026 07:59:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.100.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5471 (0x155f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=551EED03A5ECC863A15A6759EA8A4ACD48603B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c9:ad:6d:7f:97:bc:8a:3a:18:43:9c:97:0e:
                    19:a9:07:46:cc:e2:9b:04:66:e9:2b:6c:3b:7f:49:
                    b8:02:3f:6a:10:a4:d3:af:9e:2a:80:03:fc:85:08:
                    72:b8:84:f3:e8:ae:a6:a2:d2:83:56:8d:45:29:ec:
                    05:68:db:91:2e:0f:67:70:ae:ed:91:5b:54:f2:96:
                    d0:85:73:fd:7c:01:cb:52:3c:0e:54:62:6a:f1:67:
                    b4:52:28:42:29:08:74:77:d7:64:16:b1:f8:30:29:
                    43:44:1a:6b:27:72:2e:de:bc:08:18:eb:30:aa:e0:
                    5f:f6:b6:66:7e:b9:06:ac:38:72:fd:c9:93:3f:80:
                    d2:14:40:d9:43:ec:34:cc:d9:73:f9:28:30:7c:32:
                    90:89:2c:7b:1b:89:57:91:c9:61:fa:4f:3f:9d:46:
                    1c:9e:0f:79:f1:a8:16:72:14:55:15:47:4f:cf:48:
                    b1:56:1c:15:fc:77:f6:89:5b:d0:a5:52:13:7c:19:
                    d8:e8:91:d2:a8:63:7b:e1:1d:97:cb:db:c3:eb:d5:
                    7d:77:24:f3:9a:cd:14:7a:fe:5e:11:83:57:44:c9:
                    8e:19:1a:a1:69:5e:cc:3e:e9:1a:df:1d:52:58:92:
                    07:bd:b4:05:d1:47:a4:76:3e:ac:3a:f3:b9:d5:0f:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:ED:03:A5:EC:C8:63:A1:5A:67:59:EA:8A:4A:CD:48:60:3B:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VR7tA6XsyGOhWmdZ6opKzUhgO4c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:0c:2a:34:a6:11:b1:8e:0b:58:81:69:8d:6e:9c:eb:52:
         fb:b0:6f:d6:67:ff:c4:55:fb:a2:80:cb:46:86:e9:ab:7b:08:
         88:b2:52:f4:90:a2:70:c6:b9:d7:09:e3:f2:05:c3:a4:50:4e:
         ea:72:7d:42:1d:1f:e6:04:c0:a4:f1:3c:fc:dc:64:eb:d1:16:
         ce:93:b1:45:71:a2:33:71:a8:64:33:8e:e3:bd:08:e3:20:be:
         5d:a7:b2:fc:90:9f:93:22:13:18:25:fb:b0:4a:43:01:fa:e6:
         a6:cb:52:db:9d:92:8f:b5:8f:af:e8:16:a3:31:ef:d7:94:1e:
         64:91:07:26:0b:49:49:35:17:11:f2:81:bf:06:a8:95:00:7b:
         dc:32:74:9c:c0:c0:2b:e8:6b:0d:53:92:63:40:a2:1c:2a:db:
         a2:87:5a:fa:97:41:7f:40:14:bd:ad:b2:78:5f:19:e6:6c:80:
         9a:b4:80:1d:f3:30:32:ca:6f:10:3c:76:ec:21:87:e8:e2:c5:
         cc:90:45:90:f9:bb:e4:65:47:81:a3:f1:a1:90:31:0f:8f:82:
         9f:04:af:56:8f:32:cb:45:5d:53:b8:25:67:8c:83:65:49:06:
         1d:42:ae:4b:cd:6f:a8:dd:ae:75:81:7f:98:9c:94:ba:26:da:
         33:f1:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:20 2026 by rpki-client