Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bplJxBH79vY7gsr8DLFqia1wRh8.roa
File:                     bplJxBH79vY7gsr8DLFqia1wRh8.roa (raw, json)
Hash identifier:          MmZBr0lC5yX8e2ZCMUiYDPv+KSsSutd0GJLXhWwMroo=
Subject key identifier:   6E:99:49:C4:11:FB:F6:F6:3B:82:CA:FC:0C:B1:6A:89:AD:70:46:1F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1476
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bplJxBH79vY7gsr8DLFqia1wRh8.roa
Signing time:             Tue 31 Mar 2026 07:57:35 +0000
ROA not before:           Tue 31 Mar 2026 07:57:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5238 (0x1476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E9949C411FBF6F63B82CAFC0CB16A89AD70461F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:df:f6:61:01:c8:a6:c8:a7:23:87:00:6e:
                    df:7a:d4:9a:35:68:bc:42:80:55:41:95:5f:9f:7a:
                    09:24:40:1e:e4:c2:d9:50:5a:c0:57:16:d4:ff:cc:
                    03:85:32:04:a1:38:1d:db:11:c2:5a:2d:ab:86:99:
                    cc:ed:b0:c4:19:f7:c3:2c:d7:94:7f:c0:7e:12:67:
                    49:c5:9a:be:71:62:a3:80:93:35:2b:e5:1a:62:20:
                    a1:e0:39:a0:39:68:da:05:24:ec:63:0e:08:18:f8:
                    33:58:ad:13:8d:42:04:26:39:fb:9f:84:21:ef:77:
                    ce:ec:6f:c8:f0:99:ca:a9:1b:ef:b3:a1:c5:77:48:
                    cc:29:2e:8a:30:6c:1e:3d:91:29:eb:9e:f7:f1:2f:
                    64:73:41:40:bd:2d:38:aa:d4:32:61:ef:29:95:bf:
                    01:09:09:de:36:c6:ef:b7:de:19:58:06:eb:61:d8:
                    db:e8:eb:6a:3b:9d:c1:a0:06:79:b4:72:ae:4b:87:
                    d3:4c:a9:c8:e2:35:bd:8e:ee:48:b8:70:37:b1:67:
                    2a:c1:22:49:b2:f9:b6:c7:15:57:6c:05:ed:ce:89:
                    d4:de:14:b2:49:a1:90:6e:b4:be:b1:6f:bd:a7:2c:
                    d2:0e:76:b8:47:23:00:78:61:a7:a1:58:50:18:0f:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:49:C4:11:FB:F6:F6:3B:82:CA:FC:0C:B1:6A:89:AD:70:46:1F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bplJxBH79vY7gsr8DLFqia1wRh8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:0e:1e:6a:1c:0a:2f:ec:f7:47:c8:8a:86:6a:7c:b2:66:75:
         3a:f8:3b:bb:7c:33:8e:af:5f:44:89:52:7b:20:63:a5:96:92:
         8e:9c:0b:13:c7:6e:6c:1e:0d:ce:1d:13:3d:a1:bf:5f:eb:bf:
         c7:ca:06:12:35:27:14:98:4f:8d:98:83:1a:e9:c7:84:76:88:
         90:aa:4e:69:4b:a7:a7:88:2d:71:22:59:d2:b1:7c:d8:56:90:
         c2:f1:b1:06:3f:8e:28:3b:9f:f0:6e:c9:18:35:df:fe:1c:b8:
         fd:a4:d5:b9:51:e1:4d:05:b4:10:59:5c:3c:cc:c9:3c:07:95:
         c3:dc:f6:82:69:57:11:b2:ea:5f:81:39:27:46:40:0d:0b:0f:
         6b:88:89:14:53:c6:88:c3:54:d1:77:a0:9b:a7:97:e4:d7:18:
         22:8f:e3:87:ff:ee:bc:cd:89:1f:ad:84:52:02:e8:50:4d:39:
         23:e9:d0:8c:28:cf:96:07:4c:5b:18:3b:d2:ca:3b:76:48:32:
         a9:b0:07:1d:1a:c4:3d:72:ba:ab:a2:56:a5:be:d0:fe:7d:d8:
         04:d3:2a:2e:51:b3:cb:79:38:5b:5c:4d:af:30:8c:38:13:8b:
         d4:08:98:46:67:1c:93:4e:09:b6:fc:3f:52:10:b8:16:fb:1e:
         0c:70:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client