Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjFe8H3bPVM2h0IwPgYOIVHh2zA.roa
File:                     gjFe8H3bPVM2h0IwPgYOIVHh2zA.roa (raw, json)
Hash identifier:          z8fIffJY4u7RNcYfPoHn/xkX4iI6NxgKH5kjDW/Lm0E=
Subject key identifier:   82:31:5E:F0:7D:DB:3D:53:36:87:42:30:3E:06:0E:21:51:E1:DB:30
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjFe8H3bPVM2h0IwPgYOIVHh2zA.roa
Signing time:             Tue 31 Mar 2026 07:56:27 +0000
ROA not before:           Tue 31 Mar 2026 07:56:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5083 (0x13db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82315EF07DDB3D53368742303E060E2151E1DB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:c7:9a:ad:0a:4c:6c:d1:6f:91:1c:a3:ef:
                    42:7e:b2:f7:49:25:69:62:e7:0e:df:83:ed:a8:ab:
                    9b:f7:08:37:b7:ad:1f:8e:2e:89:7b:86:2c:6e:a7:
                    5f:a1:68:79:15:26:63:da:45:47:04:c7:46:c2:6b:
                    c1:e2:45:96:ec:1e:7e:ed:e2:89:c8:c1:ee:33:a8:
                    80:43:b9:f1:77:20:f5:b8:6a:45:72:d0:5c:1c:35:
                    41:67:41:74:3a:1b:2e:4d:e2:9d:3e:9a:9c:b7:04:
                    05:1d:83:2f:1b:3f:6a:16:cd:d9:92:0b:ed:82:27:
                    b9:ef:12:f3:0c:d9:92:d8:b9:5e:17:bc:a2:c1:02:
                    23:32:2c:01:72:e8:eb:8b:4c:67:9b:91:1c:99:49:
                    fd:71:df:d3:11:e5:35:10:f1:68:b6:48:28:74:3b:
                    f9:08:f1:37:25:67:47:70:a8:1d:9f:5c:6d:38:94:
                    a1:8b:7d:6f:4a:47:00:93:a0:51:83:f5:03:ca:89:
                    32:da:02:ff:b2:d8:58:a8:77:a2:4d:d7:d0:3b:7e:
                    49:a2:15:dc:7c:8a:1c:57:fa:02:a7:be:51:2a:60:
                    12:f7:c6:a8:76:ed:74:f5:2b:78:1b:21:19:2b:56:
                    fc:36:fd:4f:ba:81:b0:50:40:6f:75:b3:b1:42:b1:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:5E:F0:7D:DB:3D:53:36:87:42:30:3E:06:0E:21:51:E1:DB:30
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjFe8H3bPVM2h0IwPgYOIVHh2zA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:52:61:9f:a2:bc:a2:8d:4f:2e:ae:a2:ab:bb:bb:48:13:
         02:e6:fa:a9:fc:7d:0d:68:bf:88:00:b7:f2:5f:0b:5e:02:19:
         6f:4c:2f:00:af:5d:e0:ed:5b:d7:1e:aa:18:3c:28:1b:82:ca:
         f9:33:93:9e:b5:9f:1f:d2:9b:6e:0f:4d:9c:7a:64:b2:29:9c:
         6d:11:f7:30:21:73:bf:f3:d2:81:22:fd:23:31:96:64:57:44:
         6e:7c:5b:04:d8:cb:61:51:2f:6f:e3:d6:9a:41:d7:36:9a:b0:
         0d:38:b2:4d:84:25:f0:b9:1b:7b:4e:36:5f:b7:74:4b:be:07:
         5c:95:ac:cb:9b:c9:7e:1b:98:35:e0:fb:88:90:69:8e:47:aa:
         1e:e8:41:e6:67:48:a5:40:47:88:77:f8:31:27:0b:13:ce:3f:
         59:4b:9a:2c:82:6b:ee:2c:04:66:71:97:06:6f:a8:3d:47:06:
         7c:cd:6d:ae:17:71:cf:fa:c1:f0:b5:c7:ff:29:05:62:1e:b5:
         09:5a:ed:24:7a:0f:4b:92:65:5f:da:c8:c5:b4:76:f3:e7:28:
         73:9b:a6:fd:5a:8f:27:2e:49:d7:8e:ae:ed:8f:10:9c:b8:e0:
         d5:bf:cc:d5:cd:ea:fd:e5:77:42:84:c4:6f:41:1b:ca:8a:cd:
         8a:d0:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:58 2026 by rpki-client