Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XtKy6RGexF4KDlAPloytsyqM-6Y.roa
File:                     XtKy6RGexF4KDlAPloytsyqM-6Y.roa (raw, json)
Hash identifier:          iloYxx3VxnoNjBcezGXFksuUhm+NXFdLKsjBlsLBhT4=
Subject key identifier:   5E:D2:B2:E9:11:9E:C4:5E:0A:0E:50:0F:96:8C:AD:B3:2A:8C:FB:A6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XtKy6RGexF4KDlAPloytsyqM-6Y.roa
Signing time:             Tue 31 Mar 2026 08:00:16 +0000
ROA not before:           Tue 31 Mar 2026 08:00:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5559 (0x15b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5ED2B2E9119EC45E0A0E500F968CADB32A8CFBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:79:7f:8f:2f:ec:27:9e:6a:6b:8b:3d:79:
                    aa:ab:0c:e4:4c:a1:92:7c:88:25:85:a4:73:67:a9:
                    7e:64:0f:22:77:2f:ce:b8:cc:57:38:f3:fe:0c:12:
                    46:5a:d7:c9:4a:d1:f7:f5:6f:99:c8:e7:e6:5d:0d:
                    36:89:8b:ca:82:51:a5:fd:dc:a1:60:3b:7e:9a:ba:
                    7b:c1:97:ed:9e:db:07:93:b3:b8:f5:7f:7d:f9:a0:
                    cc:b3:83:c7:6a:ef:d6:45:19:d8:67:87:02:86:83:
                    d2:94:63:5c:18:f0:ac:31:2e:19:27:0c:4f:6e:63:
                    03:76:2d:8d:7d:af:36:d4:c3:ea:be:7e:f7:c6:b8:
                    24:04:a7:03:64:9f:9f:b3:45:93:43:11:38:b7:84:
                    b0:df:07:8e:d5:e1:60:9b:3b:b3:51:eb:65:e6:9a:
                    d4:fd:9b:70:ce:5c:a1:30:d2:7c:e2:20:2d:94:16:
                    43:b9:78:b1:e9:2c:ad:05:61:47:b1:14:f6:13:81:
                    2c:71:84:b7:13:bb:d8:e7:57:54:6b:fe:8f:52:f4:
                    de:c7:7e:c7:45:9b:a9:0b:b5:6d:09:e4:86:e7:a9:
                    a7:08:31:3a:26:39:e7:d2:7a:83:91:ae:4c:79:72:
                    53:c1:5e:c1:a6:82:01:32:cb:05:1d:17:10:71:54:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:B2:E9:11:9E:C4:5E:0A:0E:50:0F:96:8C:AD:B3:2A:8C:FB:A6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XtKy6RGexF4KDlAPloytsyqM-6Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:68:5b:4a:4b:39:1e:81:13:ea:cf:10:80:0f:24:90:09:bf:
         21:97:56:71:f8:d6:62:ba:56:16:51:09:7f:f4:20:78:4e:d0:
         f0:6b:e4:44:3c:b7:d1:60:59:48:f3:76:35:9a:0f:41:01:84:
         d5:10:c6:54:43:5d:2a:62:b2:41:a5:00:8e:d0:9d:e3:3c:9b:
         ea:9f:dd:49:c9:f7:09:86:11:3a:c5:9c:71:b2:c5:74:98:e3:
         ce:69:62:10:b0:8b:c7:38:7b:c5:d7:9b:cc:a9:99:ed:60:e4:
         2f:a0:07:1e:1c:da:93:58:fd:96:37:f4:2a:70:78:c1:cb:ab:
         81:4f:fb:e3:13:74:a6:12:68:ff:a7:62:54:09:70:e0:d2:2f:
         15:fe:31:0c:2d:77:30:ec:14:86:c4:d4:5c:d3:15:f0:27:65:
         d2:56:79:43:71:68:8e:df:5d:de:c1:a1:2e:08:c1:30:84:4e:
         5b:c8:92:5f:b6:a5:fe:c7:41:f6:df:e6:93:16:75:c4:96:29:
         42:35:9a:29:ed:b3:6a:e9:ba:96:a3:ba:9b:ef:20:6e:86:5f:
         05:17:f7:62:47:88:94:0e:4a:0b:12:0b:8a:d0:02:c2:21:8c:
         3a:85:44:16:91:27:02:0b:05:50:0b:05:dd:0a:7c:bd:2e:ee:
         b2:75:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:00 2026 by rpki-client