Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa
File:                     YW-CXw_ghap1raDm-hbK9wqoafE.roa (raw, json)
Hash identifier:          auFCXTomlUPoWvLNwIYpyBEIeaHMDwg8FdhiwYqJi6E=
Subject key identifier:   61:6F:82:5F:0F:E0:85:AA:75:AD:A0:E6:FA:16:CA:F7:0A:A8:69:F1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1811
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa
Signing time:             Tue 31 Mar 2026 08:05:14 +0000
ROA not before:           Tue 31 Mar 2026 08:05:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6161 (0x1811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=616F825F0FE085AA75ADA0E6FA16CAF70AA869F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:93:35:6b:fc:36:0d:4c:76:35:b6:74:de:
                    1e:e0:75:7f:44:3b:6f:3d:f2:81:ce:ce:af:1d:ef:
                    fd:76:75:b7:cc:f3:e3:39:90:0f:80:78:9d:33:f4:
                    d2:f0:81:df:d0:21:80:f4:fb:5b:d9:d4:ab:f8:f1:
                    e5:59:b5:9e:9a:d9:5b:ac:f6:60:bd:53:05:10:b7:
                    d2:46:e3:e7:0d:f0:0d:d1:4c:82:9d:2c:c1:5a:54:
                    38:d7:ae:7f:40:6c:cb:38:c1:5e:09:84:0e:5a:b3:
                    ff:e4:96:87:94:f1:c1:cc:5f:0e:6a:09:31:8c:8d:
                    91:f1:51:37:47:c3:dd:0b:67:09:ea:65:df:7f:9e:
                    43:91:d2:4e:ce:4a:44:ea:6b:ee:a5:25:06:14:9a:
                    21:26:d3:7a:e7:b2:94:e4:98:2a:45:82:81:79:3d:
                    4a:5b:34:71:c5:7f:1d:5c:c7:5c:80:c5:44:57:e2:
                    18:0e:bf:62:14:72:5a:38:28:9d:bb:35:01:32:10:
                    b8:e4:96:57:c4:7e:39:98:55:e1:74:50:b6:b3:4c:
                    75:3b:34:19:ca:bf:dd:45:dc:71:ea:88:0a:8a:4b:
                    21:ce:6e:d8:fa:c8:dc:ff:13:49:f5:90:a4:a7:d8:
                    c7:76:56:c4:49:01:a3:fd:80:ce:ab:a4:6f:96:83:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6F:82:5F:0F:E0:85:AA:75:AD:A0:E6:FA:16:CA:F7:0A:A8:69:F1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YW-CXw_ghap1raDm-hbK9wqoafE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:de:64:b5:aa:15:b9:3e:79:86:33:26:11:97:2e:7b:d3:
         6a:31:c5:67:d4:59:47:fd:b1:80:a3:c3:ad:90:ea:ec:d5:b4:
         ba:f6:d3:b7:00:46:37:82:be:29:25:a1:9a:ab:f9:0e:61:dd:
         2a:27:ec:ab:f4:5b:89:53:91:88:80:79:75:d5:3e:bb:0d:37:
         e7:af:e0:d4:55:a9:c0:d6:e3:a4:e7:8e:37:98:de:0f:9d:b0:
         96:9f:96:2a:5f:92:ad:a2:6d:ac:85:bb:53:d8:b4:53:23:01:
         fc:05:0b:92:89:1f:b1:e4:00:74:56:24:93:b2:26:4c:f2:eb:
         14:f8:ab:b9:d1:ba:dc:47:a7:27:c0:37:87:85:62:cd:ca:64:
         c0:6f:1d:41:d5:92:34:2d:5c:a9:80:e0:0a:e9:80:f3:84:89:
         e8:9f:94:a1:89:ea:00:25:c8:12:0d:08:ac:e9:17:6c:3b:59:
         9e:8d:e0:0a:6f:97:af:ff:5b:7d:00:35:f0:e2:a2:c6:bc:90:
         2e:12:96:4c:b3:ca:12:da:68:0f:76:3c:b5:2d:11:08:9a:e5:
         4c:42:9e:6a:e0:44:32:4a:11:e3:df:57:63:43:00:32:b9:06:
         c6:42:d6:be:8f:15:a4:e6:77:69:ca:47:03:bf:99:bb:62:c8:
         5b:f3:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:53 2026 by rpki-client