Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9oGCR-7wfs8OMgJSHliRdc8IX0.roa
File:                     j9oGCR-7wfs8OMgJSHliRdc8IX0.roa (raw, json)
Hash identifier:          N8xrlKBzXa7F8+uO9gBBej0Djea4iZ9VpoaMY8/pqOA=
Subject key identifier:   8F:DA:06:09:1F:BB:C1:FB:3C:38:C8:09:48:79:62:45:D7:3C:21:7D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9oGCR-7wfs8OMgJSHliRdc8IX0.roa
Signing time:             Tue 31 Mar 2026 08:00:05 +0000
ROA not before:           Tue 31 Mar 2026 08:00:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5544 (0x15a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8FDA06091FBBC1FB3C38C80948796245D73C217D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:31:5c:51:8e:b5:83:ed:e4:5b:75:da:8a:
                    aa:19:e6:07:a0:05:1a:26:c1:97:9e:ef:59:de:0c:
                    92:2f:3e:c9:85:ce:5f:96:bb:2d:6e:d5:5a:24:97:
                    ec:5d:b4:72:d1:89:9a:a2:e5:be:fb:ef:04:55:e7:
                    e6:c4:32:84:79:79:45:00:cd:30:35:47:4a:77:c7:
                    ca:c0:80:8f:7b:68:74:36:9e:bc:b2:c4:24:a6:f8:
                    c2:83:00:3a:0c:be:e9:8f:40:e7:f1:16:08:42:52:
                    96:e2:2b:ac:4b:76:d3:98:7e:9e:90:01:47:9c:f0:
                    3e:70:d8:d7:e6:c3:81:1a:f5:57:4d:46:2a:79:50:
                    14:5b:2a:18:fa:19:3c:23:00:4e:08:a1:ed:7a:b2:
                    97:f8:49:d4:fc:4d:1f:00:33:12:38:0f:ee:95:08:
                    70:16:b2:06:04:d8:b5:02:45:d7:af:f2:c3:5e:21:
                    7d:9d:2b:8f:4d:b8:6f:3d:f9:3c:05:82:99:62:4a:
                    78:4e:f5:fc:f6:ab:ba:25:2e:50:c9:95:c2:0e:9d:
                    7d:32:b4:c6:df:36:5d:fa:b1:25:f8:87:e1:4d:72:
                    c7:4f:bb:5d:5d:6e:b2:a0:76:05:02:43:a9:f9:a0:
                    64:f7:68:4e:9f:1f:bb:b2:eb:c4:28:5e:44:da:09:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:06:09:1F:BB:C1:FB:3C:38:C8:09:48:79:62:45:D7:3C:21:7D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9oGCR-7wfs8OMgJSHliRdc8IX0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:97:7f:5b:4e:62:57:5f:a8:e0:0e:43:93:bc:f4:74:42:
         4d:3f:48:0a:21:45:31:e4:9a:7b:28:94:4f:93:6b:9f:19:74:
         e7:45:95:d3:12:34:0e:20:25:8e:fd:72:ea:14:db:b9:89:ed:
         bd:8b:c2:27:2f:66:40:1d:fc:bf:18:72:5f:81:b4:56:8d:69:
         13:45:a9:a6:fb:93:b4:54:8b:b4:aa:52:cf:e4:58:92:71:44:
         57:35:c3:20:d8:77:cd:32:43:b8:49:eb:84:9e:f1:ed:4c:df:
         9d:5d:a5:1a:6a:cd:55:b6:07:af:1e:bd:9b:58:10:31:3c:7a:
         d9:6c:fa:97:a3:44:be:b3:90:d1:18:2c:84:0e:bf:a9:c7:77:
         d2:3b:ed:a4:48:ae:a8:d1:dc:ab:f1:03:48:e2:45:4d:30:fb:
         70:4a:4b:35:9d:5b:9b:52:0f:11:25:c1:24:e5:e5:53:c1:5b:
         32:f4:3a:41:3a:60:cc:36:18:aa:d4:6a:a3:43:cb:5c:99:ed:
         aa:76:78:4e:8d:09:0f:12:80:ab:c7:2d:0f:90:ce:5c:ab:7f:
         98:f7:28:cf:e7:05:74:87:7f:51:08:60:ce:6d:88:28:e5:82:
         a0:60:ed:b9:c5:68:50:57:1d:89:47:57:4d:26:ab:85:c2:a6:
         08:62:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:28 2026 by rpki-client