Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/js1LuNlsyYxChHXZHUDgpjt9_J0.roa
File:                     js1LuNlsyYxChHXZHUDgpjt9_J0.roa (raw, json)
Hash identifier:          4u2pbSn65u4Tcu4gMqlD5QXjnZwW+uoye369J8sG2dQ=
Subject key identifier:   8E:CD:4B:B8:D9:6C:C9:8C:42:84:75:D9:1D:40:E0:A6:3B:7D:FC:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1812
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/js1LuNlsyYxChHXZHUDgpjt9_J0.roa
Signing time:             Tue 31 Mar 2026 08:05:14 +0000
ROA not before:           Tue 31 Mar 2026 08:05:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6162 (0x1812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8ECD4BB8D96CC98C428475D91D40E0A63B7DFC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:7c:40:d2:b7:d7:e4:7e:62:3a:c2:0a:7f:
                    21:3c:38:f0:c8:07:d0:71:b3:c4:0b:ff:b9:f0:2a:
                    90:95:51:c6:1a:5d:e7:6c:2a:0e:7f:38:0c:06:cb:
                    29:8e:2d:c1:08:a9:94:14:7c:e2:b8:5a:95:fe:1c:
                    fd:21:da:8f:ff:37:22:a8:42:4f:5c:40:98:fc:d5:
                    e6:1c:d2:82:39:f1:3e:3d:4c:de:18:61:a3:08:5f:
                    b4:ce:a8:f0:9e:13:0b:a5:29:59:cb:fb:03:d4:db:
                    66:23:cf:b3:ec:90:2d:f4:27:b7:03:d5:b3:34:68:
                    0a:27:e5:5a:e8:97:6a:f5:8a:e0:1b:a3:39:84:b1:
                    b5:ea:aa:37:3a:8b:06:f2:dc:35:d3:d5:9a:54:e1:
                    a8:bf:6e:1e:17:97:e0:25:90:51:7d:29:3e:ff:84:
                    7d:7c:3c:e8:67:7f:08:95:58:f2:07:03:af:c5:93:
                    4c:7a:4d:2e:b5:88:75:75:d0:cb:02:aa:70:0b:1b:
                    7a:d5:ea:07:b2:d1:52:54:15:81:da:cc:58:ab:aa:
                    ed:68:22:ff:ac:3d:ff:0f:78:f6:b8:04:b8:ce:2a:
                    1c:63:2b:e0:95:5f:e6:19:c6:34:f3:07:61:ec:ae:
                    92:24:73:68:08:c9:cf:59:86:ae:4f:e7:23:a2:37:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:4B:B8:D9:6C:C9:8C:42:84:75:D9:1D:40:E0:A6:3B:7D:FC:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/js1LuNlsyYxChHXZHUDgpjt9_J0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:32:cb:da:2f:68:0b:b2:d6:ac:b3:e3:1f:a3:fc:a6:17:75:
         1f:ee:5c:9e:88:83:57:fe:1c:bc:44:2c:e2:91:3e:ec:9b:f1:
         3b:25:c6:ed:d2:94:c7:ad:e6:57:a8:56:f7:6c:f4:16:76:2e:
         46:0f:c9:f7:5f:a3:82:fe:2d:95:bb:51:76:43:3c:73:bd:98:
         ae:28:b7:29:57:d7:d0:bb:09:ed:7d:4a:c4:ec:d4:c5:95:62:
         ec:26:6b:fc:19:24:62:b9:eb:ac:93:10:78:c7:03:ef:a7:26:
         05:10:f0:77:69:90:77:a3:5e:fa:b0:04:87:53:a1:ba:9a:5f:
         6b:39:98:d8:5b:99:7a:49:eb:bc:6f:4a:a5:1d:d6:a6:f1:ae:
         bc:51:79:7c:60:e4:0f:d0:07:20:f9:2b:58:70:5b:07:97:0f:
         f3:07:0b:11:e0:51:7a:e3:5a:17:58:1a:89:fa:b6:22:b1:ad:
         ac:8f:29:f6:4f:d4:29:f8:0e:a7:93:9b:26:ed:37:13:08:e4:
         8f:fb:68:a3:98:48:36:17:e3:42:b5:bf:13:3a:8c:fd:64:88:
         17:ae:92:49:a7:6b:0c:f1:d6:16:ce:61:61:fd:95:68:95:f8:
         91:d7:4c:b9:83:c7:8e:b2:b7:92:d0:0b:db:d6:10:78:0f:4e:
         de:22:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:58 2026 by rpki-client