Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0mP_NFzRGHvWVMfprL7AIl8LtI.roa
File:                     a0mP_NFzRGHvWVMfprL7AIl8LtI.roa (raw, json)
Hash identifier:          NYWJfCX9Jim7dZQuzOID0l4XWV7cqIlCz692tyJJJII=
Subject key identifier:   6B:49:8F:FC:D1:73:44:61:EF:59:53:1F:A6:B2:FB:00:89:7C:2E:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1685
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0mP_NFzRGHvWVMfprL7AIl8LtI.roa
Signing time:             Tue 31 Mar 2026 08:01:57 +0000
ROA not before:           Tue 31 Mar 2026 08:01:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5765 (0x1685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6B498FFCD1734461EF59531FA6B2FB00897C2ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:9f:3d:96:7d:d7:83:c2:7f:07:23:30:85:
                    57:a4:88:ed:a9:2d:1d:81:8d:3e:a2:44:6f:6a:f5:
                    29:ba:da:c7:f5:5d:ab:ff:50:70:df:ab:9a:cf:af:
                    15:27:b4:1a:a6:da:6c:4f:45:16:b5:5f:b1:15:fb:
                    ef:b6:26:cc:aa:fa:ea:bd:fb:be:eb:da:a6:ae:67:
                    48:7b:c2:84:7e:61:94:54:70:6f:72:0e:fa:81:27:
                    12:a6:d4:89:64:1a:f8:f3:eb:e4:83:72:d4:76:f0:
                    55:6a:f8:18:f2:ee:b1:2e:47:c1:c3:94:74:86:2f:
                    97:94:eb:57:93:15:8a:a9:be:98:03:c9:98:37:65:
                    b2:43:2e:77:79:d3:99:fd:15:05:c0:62:37:d2:48:
                    99:4a:51:67:f6:7a:78:e9:aa:35:f6:b8:ed:eb:c6:
                    80:c6:4c:70:4d:60:aa:ff:e6:07:27:99:46:4d:a2:
                    20:ca:6a:68:8e:d4:51:bf:31:e3:80:41:62:2c:63:
                    88:eb:b5:81:30:6c:1b:8a:79:79:d6:dc:79:5e:fc:
                    9e:b5:5b:96:bd:5d:22:e2:95:53:75:f6:8f:a6:8a:
                    81:64:5e:4d:a7:35:79:da:e4:38:de:c2:05:40:d6:
                    ca:98:6e:0b:7f:d4:4e:e4:72:33:ac:6a:87:18:44:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:8F:FC:D1:73:44:61:EF:59:53:1F:A6:B2:FB:00:89:7C:2E:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a0mP_NFzRGHvWVMfprL7AIl8LtI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:e5:8d:ad:7f:3e:51:76:06:48:49:a8:f2:d8:d6:57:02:
         dc:0e:06:8d:94:d4:b1:7d:f1:bc:2b:39:0b:34:17:ac:e7:78:
         7c:e4:ce:d2:82:d5:fa:3a:fb:cd:86:98:10:54:db:13:aa:54:
         4f:80:4c:dc:03:3f:c3:f6:ac:71:1f:6b:84:02:45:a0:20:50:
         47:56:44:7f:a2:cf:84:2d:0d:4b:20:89:08:fe:87:bf:0f:da:
         f3:e1:fd:36:94:27:a3:48:cb:db:e9:34:a3:ef:bd:23:8c:92:
         2d:a9:61:ef:13:92:73:a0:7e:cc:12:d7:c1:63:ab:32:9d:c8:
         bc:b8:23:7d:20:64:bb:d3:2a:e4:82:f9:b7:49:15:9e:ed:44:
         17:7d:a1:c5:0c:8e:d0:bb:08:38:c1:a1:66:75:2d:64:a8:6b:
         24:f2:b8:f7:86:0b:47:cd:10:ff:69:98:8f:15:b8:65:ac:9f:
         37:ce:e0:5c:93:52:0b:b6:62:13:0c:3f:32:f3:cd:57:d1:92:
         f2:01:de:f8:65:4f:e8:68:2e:6e:87:1a:64:60:87:71:72:42:
         bf:88:17:4f:83:63:af:5d:2c:52:70:65:82:52:7e:44:03:d5:
         62:80:32:72:19:01:d1:62:07:1c:9c:99:a6:da:a4:d4:66:7a:
         07:02:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:04 2026 by rpki-client