Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4jFCKMdhnQQ0U9XupXv53aOqQc.roa
File:                     _4jFCKMdhnQQ0U9XupXv53aOqQc.roa (raw, json)
Hash identifier:          AUBwT6WDpwcj3CdxSdLPRZpf2niQZ+cG38Eog1O9rKg=
Subject key identifier:   FF:88:C5:08:A3:1D:86:74:10:D1:4F:57:BA:95:EF:E7:76:8E:A9:07
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       178D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4jFCKMdhnQQ0U9XupXv53aOqQc.roa
Signing time:             Tue 31 Mar 2026 08:04:06 +0000
ROA not before:           Tue 31 Mar 2026 08:04:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6029 (0x178d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FF88C508A31D867410D14F57BA95EFE7768EA907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:34:f2:d7:3d:1d:cc:76:97:56:0a:7a:04:
                    50:43:f2:74:a0:ec:fa:39:92:91:a9:37:57:ed:8e:
                    ea:74:4c:16:c4:e3:73:2b:aa:bc:d6:c7:3a:c0:b0:
                    2e:ff:d3:72:eb:c0:ac:32:84:5b:b5:e4:50:8b:6b:
                    28:e1:63:4d:8f:f8:2b:29:e5:e3:bc:c5:65:cd:3f:
                    22:67:31:f6:f6:43:b4:8f:23:09:e9:ab:45:7b:ee:
                    26:07:79:be:47:a2:01:12:12:87:7e:3f:c5:39:6b:
                    cc:ef:1a:08:c1:81:04:4e:21:45:23:ec:06:41:bf:
                    0f:30:2a:c5:47:d2:46:68:eb:9e:4e:52:61:12:6c:
                    f4:36:07:eb:90:3d:0e:82:b6:ab:2d:c8:1a:ef:de:
                    28:f0:41:fe:98:64:e2:f2:b3:9b:a0:6f:b3:b2:34:
                    0a:4c:04:d3:a0:b4:4d:59:07:fe:61:70:db:7f:23:
                    cd:e7:62:93:b3:7a:a8:af:d1:73:97:32:21:ad:e2:
                    93:95:ce:05:80:53:52:12:08:1f:cb:a1:f8:b0:1b:
                    85:cb:73:ba:04:83:a0:86:8b:a8:28:73:46:8c:ac:
                    81:0d:7c:1e:bb:89:27:d0:51:cf:1c:89:15:d9:16:
                    40:77:a1:ab:39:50:7d:9f:66:55:07:a1:66:3d:d4:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:88:C5:08:A3:1D:86:74:10:D1:4F:57:BA:95:EF:E7:76:8E:A9:07
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_4jFCKMdhnQQ0U9XupXv53aOqQc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c5:95:00:3f:1f:2c:cf:b9:32:ed:d0:a2:5e:4f:cf:ee:8d:24:
         d7:66:a2:a3:7d:47:de:9d:d3:13:38:bc:5f:58:11:0b:35:a4:
         cf:b6:9b:29:8f:0b:fe:ef:12:1a:24:45:fe:ea:4a:cd:31:44:
         fe:66:7c:b1:5a:45:6a:65:54:ba:cb:9f:67:1f:61:cc:b5:c3:
         9d:9a:7f:b7:dc:65:ac:e9:ce:b7:ea:8d:d7:ea:ab:46:81:0e:
         6e:b4:10:d9:1a:81:74:2f:36:53:49:f0:ba:3e:c5:a2:6f:8c:
         8f:51:a9:28:68:7b:bb:ab:7e:1d:6f:d5:61:53:b4:17:67:e8:
         2e:1c:0d:09:f2:a8:3a:51:f9:fc:84:40:f7:c4:96:86:f7:aa:
         0e:a7:d5:bf:c0:32:58:4d:da:01:24:e4:82:f9:fb:be:7d:6c:
         c7:94:1c:ef:82:58:5e:3c:1a:18:da:77:e4:6f:d2:0c:91:d3:
         28:5e:c9:77:42:70:2a:4e:b3:e8:76:eb:81:94:bd:ab:ec:0b:
         6a:95:31:dc:7c:c4:26:92:9b:67:eb:83:79:fd:3b:53:c9:7f:
         5a:42:58:ad:ba:4d:ee:9b:aa:f9:20:ce:6e:0e:67:a3:7c:ae:
         de:fc:32:50:a5:e9:d2:fd:ba:89:d1:ef:6d:b7:26:01:29:a3:
         18:43:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:17 2026 by rpki-client