Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aUb1ENcY_mKa03kYhPscUyNJmUg.roa
File:                     aUb1ENcY_mKa03kYhPscUyNJmUg.roa (raw, json)
Hash identifier:          LRPONEZyBl5ylPoAE2YKuYBYkDiwEqUyBAQVwxLmzjQ=
Subject key identifier:   69:46:F5:10:D7:18:FE:62:9A:D3:79:18:84:FB:1C:53:23:49:99:48
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13EF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aUb1ENcY_mKa03kYhPscUyNJmUg.roa
Signing time:             Tue 31 Mar 2026 07:56:34 +0000
ROA not before:           Tue 31 Mar 2026 07:56:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5103 (0x13ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6946F510D718FE629AD3791884FB1C5323499948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:61:0b:0e:b7:70:69:97:5f:1b:83:c1:06:
                    14:a4:94:14:cc:3f:26:eb:97:b9:3b:1f:da:ca:02:
                    91:b0:6a:3e:3a:74:ab:5b:28:c5:d8:c4:70:74:13:
                    50:74:89:88:52:90:31:7a:52:0d:0e:b2:9d:0b:b4:
                    c4:38:92:48:c7:4f:e1:d0:b5:b4:5f:03:49:e7:17:
                    b9:fb:02:6a:f7:3d:cb:88:8e:5f:b8:c9:37:5b:89:
                    ec:0d:2f:f0:de:2b:01:de:83:79:86:68:b5:83:40:
                    25:f4:03:92:26:c4:68:a2:79:c3:d4:52:cd:e0:46:
                    04:61:00:c9:93:60:7c:56:71:d9:97:e4:9f:b1:0c:
                    8b:85:6f:ac:33:5b:a0:b5:23:35:d3:24:f4:5e:8b:
                    6a:99:d0:73:22:0f:b8:4c:a5:1c:8e:f7:fc:bd:eb:
                    a3:53:89:0a:a4:a3:94:4e:13:9f:2a:f7:76:89:bd:
                    07:32:8f:8c:08:34:76:f8:07:d2:4a:3d:49:cf:ed:
                    71:b4:8b:d2:45:d3:54:cc:23:d6:76:80:79:e8:ea:
                    65:6f:b8:cc:63:31:a1:bd:48:dc:bf:9a:b0:06:cc:
                    41:31:d1:81:cd:9d:60:9d:c2:08:fd:00:93:65:41:
                    c4:7a:7d:21:df:5f:80:90:83:af:48:20:aa:08:56:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:F5:10:D7:18:FE:62:9A:D3:79:18:84:FB:1C:53:23:49:99:48
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aUb1ENcY_mKa03kYhPscUyNJmUg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:ea:10:d9:94:12:10:b0:38:d7:fd:64:21:be:36:fd:60:40:
         62:57:11:9f:de:54:1c:1a:0a:84:b3:72:7d:6d:d1:2f:b8:de:
         d9:29:bd:73:f6:1c:63:85:c2:2c:7b:1a:61:d2:4b:39:c6:c8:
         d2:c3:82:43:1f:d3:ba:02:d8:9e:c6:e8:ba:a7:38:c3:03:02:
         e3:8e:42:c7:51:19:1b:05:b6:10:b8:0f:6c:b5:8f:a8:67:0f:
         91:62:2f:80:6c:71:b3:9f:c8:33:3c:a6:8c:b7:2c:b7:ea:03:
         00:53:f0:4d:7a:fe:73:31:4c:90:b4:01:88:27:97:59:ca:11:
         25:cb:6c:a6:e3:32:12:e6:ca:2b:2a:80:1a:24:5c:73:0a:6b:
         ff:a7:c2:ff:df:94:0a:3e:df:d7:10:34:10:57:4d:8c:93:42:
         1b:8b:11:87:7b:7f:98:34:f1:a9:3e:52:4a:4a:0b:19:59:fe:
         7b:44:4a:0a:94:cf:8b:46:05:a2:88:96:54:1b:43:07:a1:05:
         17:f1:ba:45:5f:18:7a:ee:57:ed:03:8b:bd:9d:0c:0e:da:a6:
         a7:db:87:a3:49:d1:8a:56:21:87:8a:3a:67:4e:c8:8d:db:b7:
         8c:7f:0f:03:95:fb:61:58:20:fd:e5:44:d9:62:31:97:e5:62:
         6d:33:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:09 2026 by rpki-client