Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3gBQPtzwn9gIVAsmKR7-w79l7o.roa
File:                     f3gBQPtzwn9gIVAsmKR7-w79l7o.roa (raw, json)
Hash identifier:          KVsMmKjgOGSHZuVMmdssFECMWTo9SnSLp73TpAmBPSE=
Subject key identifier:   7F:78:01:40:FB:73:C2:7F:60:21:50:2C:98:A4:7B:FB:0E:FD:97:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3gBQPtzwn9gIVAsmKR7-w79l7o.roa
Signing time:             Tue 31 Mar 2026 07:56:22 +0000
ROA not before:           Tue 31 Mar 2026 07:56:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5072 (0x13d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7F780140FB73C27F6021502C98A47BFB0EFD97BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:54:b3:65:e1:3c:6b:86:aa:11:74:6a:ba:
                    fb:d7:45:24:7d:9e:63:9f:dc:43:58:32:8b:61:70:
                    c6:c7:61:11:5d:bd:9f:0a:80:38:d1:d3:19:cd:de:
                    8b:9e:5e:6f:e0:30:c7:5a:e6:f5:82:3e:f5:a9:34:
                    b3:fb:9f:50:4f:0c:c6:a4:17:7e:4e:90:64:ed:2e:
                    51:11:63:b0:6d:f5:48:8f:9d:60:4d:a6:72:1c:83:
                    d2:48:f4:0a:07:34:09:4d:66:dd:ba:65:d9:0d:82:
                    b0:33:02:43:cb:bc:86:1c:7c:34:65:48:d6:95:b0:
                    86:4d:68:c3:09:9f:69:21:69:63:90:41:57:5f:c6:
                    54:db:d3:a4:86:49:1a:79:14:23:98:66:bb:fb:a3:
                    8d:57:5f:ed:a2:47:b3:60:7c:0e:42:3c:04:33:a7:
                    52:d4:9a:e4:05:bd:a4:b5:15:30:28:66:35:91:ff:
                    b0:52:13:a5:8d:13:e7:5f:9a:b5:bd:4b:51:32:40:
                    7c:92:d8:ab:8d:e7:3b:a5:86:b6:21:1d:38:15:3f:
                    90:b4:92:7e:99:15:d5:d5:0d:81:50:2a:0e:7f:04:
                    5e:16:70:af:13:0f:4f:62:88:f5:42:e8:c1:42:8d:
                    52:2d:c0:1e:23:7c:60:b8:35:3d:41:7d:a7:1c:af:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:01:40:FB:73:C2:7F:60:21:50:2C:98:A4:7B:FB:0E:FD:97:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3gBQPtzwn9gIVAsmKR7-w79l7o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:00:42:96:2d:6c:5d:25:6a:02:4c:cb:d1:b0:96:df:9d:ef:
         20:b8:dc:fe:19:ce:c7:76:c9:f2:e4:6e:92:f5:b3:30:b5:ec:
         1e:44:6b:3e:b2:9a:88:9c:3b:72:ad:94:33:6b:f0:f1:07:10:
         a3:93:6b:c5:fe:25:ee:07:a3:cc:c3:64:33:69:3f:fe:03:12:
         0c:f0:33:8b:ac:dd:ac:03:58:04:84:da:c2:eb:ba:71:7a:07:
         fc:61:3e:b7:d7:4f:de:d3:96:83:fe:3b:d6:fa:d8:d5:98:3f:
         90:92:63:93:a9:a2:bf:8b:f3:d4:e5:2b:75:e7:4a:77:4b:29:
         b3:bb:33:ee:3f:db:a2:63:c3:05:ed:a7:68:46:0b:de:19:7b:
         11:db:85:38:74:86:d7:43:fd:c1:bc:98:f4:be:ab:ad:87:98:
         7e:25:1b:e8:f6:0d:9a:d1:36:b0:c2:9b:8e:97:97:03:f1:94:
         da:fb:51:49:13:44:f3:23:54:83:ef:88:44:84:13:f1:f5:8e:
         75:78:f6:5d:68:2d:86:7a:3e:ba:4e:3e:b0:d8:b0:45:bd:4a:
         70:f2:ca:34:d8:e8:4e:7a:60:5b:36:4d:e8:ad:1c:e5:ef:cd:
         0a:8f:4a:8e:79:ca:79:d7:3b:3c:f6:31:32:69:89:9d:cc:4c:
         f9:de:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:17 2026 by rpki-client