Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dauT3Z8ehZoFuzeTy8LkjNoCrCs.roa
File:                     dauT3Z8ehZoFuzeTy8LkjNoCrCs.roa (raw, json)
Hash identifier:          19sOGnWCgt5qUWIc6Jo52ZFORfQ23HHsrHBDbvfFGrA=
Subject key identifier:   75:AB:93:DD:9F:1E:85:9A:05:BB:37:93:CB:C2:E4:8C:DA:02:AC:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       173B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dauT3Z8ehZoFuzeTy8LkjNoCrCs.roa
Signing time:             Tue 31 Mar 2026 08:03:25 +0000
ROA not before:           Tue 31 Mar 2026 08:03:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5947 (0x173b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=75AB93DD9F1E859A05BB3793CBC2E48CDA02AC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:98:6a:40:02:2c:53:87:9d:17:72:64:e9:
                    35:0e:12:11:64:cd:23:dd:b4:14:07:33:cd:fa:c6:
                    5d:5c:f3:d2:b4:ed:c3:0c:5f:8d:06:31:fe:c7:ea:
                    e6:ba:19:39:d3:03:c4:de:bf:ac:8e:a7:1d:bc:c9:
                    d6:7c:54:24:9b:2f:3a:3e:39:6c:76:f0:08:4f:a1:
                    a0:0d:46:7c:c1:44:b0:11:a5:62:7d:5b:71:f9:1a:
                    f4:06:ef:59:fe:33:d2:53:ac:84:10:14:66:b3:6f:
                    db:5c:60:27:9f:2f:9b:cc:82:56:8d:3d:55:77:4e:
                    d0:a7:3f:30:6b:98:3f:f7:8a:35:a8:82:8f:07:79:
                    4f:41:36:cc:73:d4:db:79:ba:29:cf:1e:58:fb:56:
                    9a:ab:07:ac:64:e3:27:8a:a3:06:f2:13:2a:09:a8:
                    a0:56:39:09:c1:2c:c5:32:7b:26:02:51:c7:bc:77:
                    76:32:62:5c:22:f7:43:ab:aa:b6:b8:04:8b:59:1f:
                    20:39:13:61:f2:71:49:0c:ea:33:e1:80:96:2f:3a:
                    3c:55:68:54:f6:73:f1:68:91:8b:c4:96:b6:df:8d:
                    ae:aa:b9:1f:18:25:dd:5c:34:c3:bb:0a:b0:4e:00:
                    c6:bf:41:6c:a2:5d:78:90:00:1e:4f:b6:ea:10:67:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:93:DD:9F:1E:85:9A:05:BB:37:93:CB:C2:E4:8C:DA:02:AC:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dauT3Z8ehZoFuzeTy8LkjNoCrCs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:8a:ee:49:50:da:e0:93:f4:4d:59:8a:aa:a7:8b:14:0f:
         33:3e:19:eb:44:9c:d0:d7:9b:5c:3a:cc:8b:6e:1a:cf:24:3e:
         f3:5a:5e:cb:7e:b3:fb:ba:ef:f8:f3:01:cc:0d:83:74:60:6e:
         0c:4d:05:3c:a6:f2:f5:f0:a9:5a:94:30:5d:c9:f8:3c:a3:22:
         51:3f:2d:fa:bd:c6:9c:aa:a9:ac:2c:72:e1:f0:22:e4:56:a0:
         ab:61:df:48:12:ea:2a:30:a7:d8:62:21:56:49:d1:6f:38:84:
         69:da:14:63:1f:e2:36:2e:d7:f9:e8:29:b5:49:a3:bd:7a:0a:
         bd:0b:9f:2b:6f:5e:11:e2:0d:c8:36:c6:4f:4f:2e:5d:47:0d:
         cb:1f:47:fd:34:2c:53:c4:5c:5a:ce:9e:db:26:3d:ad:43:c8:
         4f:ba:4e:ca:ce:a1:04:91:0f:d0:00:a7:c1:ba:7b:ce:6e:7a:
         82:4a:11:dc:af:30:a9:d5:b7:93:66:ad:01:97:2c:92:eb:34:
         c5:d8:ac:d0:f5:15:8b:d1:6e:78:6c:e7:c8:12:12:20:53:89:
         e7:a8:1a:8c:6d:1e:e4:f3:0d:6b:79:83:15:86:47:d7:f8:f7:
         6c:59:a6:78:00:24:e2:50:15:6d:ee:47:34:52:23:5c:12:b4:
         48:74:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:19 2026 by rpki-client