Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lHLAMwUZ4BsRy6MMCUoawBOSJg.roa
File:                     _lHLAMwUZ4BsRy6MMCUoawBOSJg.roa (raw, json)
Hash identifier:          SCHYlaBPSXxtj+YFNM6XbuMPEg6MVKAwaLQRMb5cWOo=
Subject key identifier:   FE:51:CB:00:CC:14:67:80:6C:47:2E:8C:30:25:28:6B:00:4E:48:98
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13EB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lHLAMwUZ4BsRy6MMCUoawBOSJg.roa
Signing time:             Tue 31 Mar 2026 07:56:33 +0000
ROA not before:           Tue 31 Mar 2026 07:56:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5099 (0x13eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FE51CB00CC1467806C472E8C3025286B004E4898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:ee:14:68:cd:79:22:20:f7:95:01:62:c0:
                    78:49:e8:7e:97:0d:cf:3b:3f:35:76:52:1c:ca:e8:
                    2f:e3:dd:f8:e0:30:83:25:c0:05:9b:52:2b:96:2b:
                    c1:f3:79:cc:20:05:d0:28:ee:93:de:f5:b9:a3:db:
                    c0:d0:ba:74:d6:7d:a8:67:5e:0d:e0:4a:12:3b:e9:
                    56:23:bf:bb:aa:6f:fb:d4:72:a9:26:68:43:46:21:
                    00:ff:18:03:fc:ce:94:f5:15:02:77:f5:c1:c0:bf:
                    2b:f4:cc:40:7c:6c:cd:43:54:99:4c:cc:1d:23:4f:
                    ff:03:9a:67:30:ca:26:9f:f1:92:e1:dd:c0:d2:6e:
                    d2:dd:f2:4c:5a:8a:da:c2:e8:2f:50:2d:d1:c6:09:
                    2f:04:7c:d2:f9:4c:6a:b8:e1:d5:74:29:24:ea:75:
                    52:ef:ea:79:f4:f8:26:f4:79:95:ca:88:fd:2c:d8:
                    28:11:c2:90:3d:18:07:5b:9d:d8:5d:3f:6b:18:cf:
                    d4:f7:73:88:40:c9:36:ec:b4:24:98:d4:14:75:94:
                    a4:8c:c7:fd:bd:a4:c1:ec:b1:ce:e9:2d:21:61:05:
                    35:e8:62:f2:81:d3:49:83:a9:49:31:aa:eb:a1:5d:
                    39:16:bb:00:5b:18:25:5a:97:c2:91:58:1b:25:ee:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:51:CB:00:CC:14:67:80:6C:47:2E:8C:30:25:28:6B:00:4E:48:98
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_lHLAMwUZ4BsRy6MMCUoawBOSJg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:14:82:41:f2:e4:6d:40:33:b1:41:9c:57:b4:79:f5:5e:3c:
         30:3d:ba:d5:f1:18:b0:26:cb:09:a8:eb:c9:da:2c:03:8c:e1:
         c5:b2:b2:30:74:56:a0:eb:09:cc:e0:e7:46:52:43:ac:2b:90:
         86:af:3d:a7:8f:52:33:57:36:99:6a:f5:2d:c9:d9:b6:48:70:
         da:d6:d0:1d:29:26:38:c1:43:eb:95:75:1c:b7:66:58:df:34:
         d1:2c:7b:b6:56:4b:cf:1c:d3:ab:8b:a7:53:9f:b5:03:c8:78:
         86:65:fc:f0:6b:94:69:a9:a0:0f:70:af:cd:c0:df:3d:9e:f5:
         d1:78:e2:42:59:90:33:de:df:8f:cb:b9:a6:26:bb:3a:04:23:
         e8:1a:81:43:b0:0c:c6:66:c3:84:70:9d:5d:5e:44:38:77:df:
         09:10:34:d3:00:85:e3:87:26:3c:6a:07:da:3c:f5:e5:b9:46:
         75:65:6b:92:c8:d6:ec:10:af:80:f9:ff:d8:db:36:da:dc:f1:
         d7:88:ac:b2:43:a9:b9:6e:cd:f2:1a:b3:9c:6d:8a:35:d7:3f:
         06:db:67:38:9e:7b:4c:de:82:bc:2f:2a:cf:a7:a5:29:ea:4f:
         9c:9b:64:84:31:12:6d:42:e3:73:02:16:38:9f:12:44:d8:50:
         63:b5:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:34 2026 by rpki-client