Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa
File:                     gWsDHbSnSe4u8m44-TDee2joRLo.roa (raw, json)
Hash identifier:          ukkcS1f8CU/RvPQJjC4NlbLTG7P7xVOJM/AQKKiY7Bs=
Subject key identifier:   81:6B:03:1D:B4:A7:49:EE:2E:F2:6E:38:F9:30:DE:7B:68:E8:44:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa
Signing time:             Tue 31 Mar 2026 07:56:23 +0000
ROA not before:           Tue 31 Mar 2026 07:56:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5074 (0x13d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=816B031DB4A749EE2EF26E38F930DE7B68E844BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:e5:5d:8d:81:1f:a2:c8:ea:77:f0:52:80:
                    b1:64:29:d7:7f:a1:68:9c:6e:45:7d:40:f8:69:76:
                    c3:fe:90:4a:f8:41:a6:86:a3:43:f6:d8:69:70:a0:
                    dc:1b:07:df:5b:d2:b6:e6:88:01:b3:ff:32:72:7c:
                    d8:75:7a:53:58:46:c1:17:de:7c:11:64:32:ec:0f:
                    e0:d6:ec:c9:6c:8e:ab:ec:52:bb:b8:02:61:04:87:
                    69:06:b6:b0:18:4d:4b:db:88:87:9f:b9:49:dc:02:
                    60:01:ac:cd:b8:14:ae:f2:2c:4a:7f:03:ce:27:dc:
                    a7:22:2b:00:a7:f6:02:4c:6d:9b:d9:fa:8d:2b:b9:
                    21:5a:3a:35:07:99:a3:3b:59:69:d1:07:9e:b5:26:
                    07:86:ff:1b:58:be:3a:97:18:c1:4f:87:14:3c:58:
                    10:1c:ef:eb:47:1c:d2:aa:2d:70:44:b7:12:68:9c:
                    d0:9c:73:97:31:59:6b:14:4d:fa:bb:27:a7:ce:61:
                    8a:ca:aa:9d:aa:6a:a7:d2:78:82:62:b9:53:7e:21:
                    fb:34:31:b5:5d:11:74:99:00:7c:6a:f3:e9:68:27:
                    24:61:21:99:5b:a1:17:f3:36:54:99:13:0b:8f:88:
                    7c:10:45:d1:0a:2a:5f:e5:ea:cb:fe:e5:0a:a7:ee:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:03:1D:B4:A7:49:EE:2E:F2:6E:38:F9:30:DE:7B:68:E8:44:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gWsDHbSnSe4u8m44-TDee2joRLo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:04:9a:e5:6a:3e:1e:88:1f:29:c6:fe:8e:dc:84:41:5f:52:
         d3:58:60:4b:25:10:88:0f:f5:4c:01:a7:0f:66:47:bf:0e:58:
         e9:18:f1:9f:1d:c7:25:df:a7:f1:d6:bf:4b:6a:10:47:7f:6c:
         f4:8e:d4:fc:59:ae:e7:7e:28:3c:bd:fe:00:82:76:f7:20:9d:
         ec:5e:19:ec:58:91:75:5b:a1:a8:8e:5e:d9:fc:c7:b7:a3:d8:
         3a:b1:f9:bd:5e:ca:a5:10:52:10:60:e1:40:42:06:c5:ec:17:
         8a:4d:2a:88:39:46:c1:63:3b:58:96:e3:e4:a9:fb:d2:9c:63:
         e3:83:50:3c:9e:1c:99:dc:7a:d6:0b:1d:b6:d5:0c:33:c2:87:
         27:6c:c0:22:8a:4f:99:51:66:b8:7e:88:34:46:53:f9:63:d5:
         ed:ac:35:d3:0c:8d:52:fe:d0:90:65:9a:be:65:b3:ca:9a:ff:
         75:43:65:79:e4:7a:e9:b2:64:f7:f8:0f:ea:85:a7:7d:ee:f4:
         3b:6a:d0:d9:23:05:cd:13:79:23:56:a1:1f:08:fe:3d:ac:49:
         a4:41:8d:9f:bc:61:65:95:90:7e:17:7a:01:c1:36:1d:d8:30:
         1e:73:07:75:1c:74:56:7d:20:00:8e:73:1c:f1:fd:4d:91:b3:
         60:e2:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:58 2026 by rpki-client