Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmIh76GUn3W2kYJ6RSvRtxDw_Vk.roa
File:                     bmIh76GUn3W2kYJ6RSvRtxDw_Vk.roa (raw, json)
Hash identifier:          EiXIZKZtoo7o4UpaDNhY3qIC9FViNs9nCOcLDUQp6js=
Subject key identifier:   6E:62:21:EF:A1:94:9F:75:B6:91:82:7A:45:2B:D1:B7:10:F0:FD:59
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmIh76GUn3W2kYJ6RSvRtxDw_Vk.roa
Signing time:             Tue 31 Mar 2026 07:55:59 +0000
ROA not before:           Tue 31 Mar 2026 07:55:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5028 (0x13a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E6221EFA1949F75B691827A452BD1B710F0FD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:46:26:9c:37:08:7a:0d:1c:85:a0:c6:b3:
                    68:e7:d6:ce:87:8e:82:4c:02:b2:21:7d:f7:6b:2f:
                    15:45:30:63:97:3f:e8:59:4a:29:be:5b:b3:f5:78:
                    ac:aa:f8:ca:08:49:42:9c:af:21:75:8a:00:1f:9d:
                    10:0f:09:01:66:8f:6f:79:3e:48:8f:62:e8:1c:10:
                    3a:a5:f5:24:5b:4d:57:12:1a:1f:d7:89:3e:75:70:
                    8c:f4:09:2e:c3:e8:a3:f1:b4:c4:0c:ac:3f:4a:ee:
                    b0:5a:f6:93:2d:78:bb:19:19:34:52:db:91:08:23:
                    24:0b:63:71:db:50:05:a1:fc:75:49:8b:72:fc:9b:
                    ed:00:bc:0b:f6:63:48:bd:3e:e6:de:9b:bf:77:de:
                    14:a4:74:25:b2:60:e3:0b:30:61:b9:42:97:9e:d1:
                    ff:45:c0:57:cf:ed:17:d5:19:d0:38:b4:34:ad:18:
                    16:b2:ab:ee:d3:87:f5:25:8f:df:24:0c:0b:fd:af:
                    73:a1:28:f3:70:93:14:4a:8a:b1:88:93:5d:e9:7e:
                    f7:76:13:cb:51:7d:8b:b5:d9:d6:95:f9:9a:13:b8:
                    a3:e7:85:f9:72:fc:6a:1c:b9:95:8b:fa:f6:e9:8f:
                    c0:45:6c:e3:cd:8c:54:1f:6f:09:d9:d3:02:22:7e:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:21:EF:A1:94:9F:75:B6:91:82:7A:45:2B:D1:B7:10:F0:FD:59
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmIh76GUn3W2kYJ6RSvRtxDw_Vk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:6b:b4:84:c9:d8:eb:b7:0f:f0:29:7d:de:e0:03:6d:c7:
         1c:a6:94:3c:87:6e:66:d8:95:0e:5c:16:72:ad:f6:ac:23:b3:
         50:3f:ec:4d:1a:f5:5c:56:a6:9a:69:1b:a2:e8:ce:e0:b9:9f:
         9b:b0:64:cf:ed:73:87:16:62:40:4e:3c:8f:03:c0:76:20:e3:
         19:18:05:2d:01:e0:48:63:5c:b6:21:42:85:56:fa:08:8c:ac:
         ae:81:5b:2a:b4:d5:cc:4f:95:41:a6:e2:5f:7a:66:46:1a:a8:
         8b:ed:78:45:9a:a3:c8:c6:8c:db:6b:1a:b3:27:32:00:d0:3e:
         e5:28:04:52:20:fc:7a:ae:9c:03:5b:76:61:4e:89:52:2d:fa:
         48:b5:7b:db:39:1e:16:9a:cf:41:07:e6:ed:b7:b7:1a:43:00:
         df:05:e5:3e:ad:d0:e5:7e:98:61:4c:30:55:88:1e:d3:47:4a:
         33:7d:37:ea:f8:15:83:15:f8:75:e5:ab:21:82:00:d0:42:e7:
         bf:48:ef:d7:54:6a:65:28:91:a1:9e:b6:a9:b3:fb:3d:95:46:
         14:4b:72:e6:5d:0a:b0:6b:3f:1b:c3:00:1b:9f:9a:ee:53:83:
         8a:aa:bd:27:c8:3b:07:9f:91:3d:8a:da:99:6b:99:b0:c8:3a:
         29:67:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:59 2026 by rpki-client