Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/no7nIMFA8Lly3stHffLtZZyZOCU.roa
File:                     no7nIMFA8Lly3stHffLtZZyZOCU.roa (raw, json)
Hash identifier:          2e3indFj1fX2G+4Bju4B5XwBb5+ipuoXWuAfdjEUEEA=
Subject key identifier:   9E:8E:E7:20:C1:40:F0:B9:72:DE:CB:47:7D:F2:ED:65:9C:99:38:25
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1691
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/no7nIMFA8Lly3stHffLtZZyZOCU.roa
Signing time:             Tue 31 Mar 2026 08:02:03 +0000
ROA not before:           Tue 31 Mar 2026 08:02:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5777 (0x1691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E8EE720C140F0B972DECB477DF2ED659C993825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ae:6a:10:20:02:3b:70:ca:bc:ab:97:85:ab:
                    41:86:24:14:42:2e:ea:95:b9:c9:3e:34:d2:73:9d:
                    fa:67:7d:98:88:5b:16:c6:4b:4e:32:43:ac:b0:48:
                    50:8f:29:df:72:21:18:20:d1:cb:72:96:50:9e:5f:
                    a3:5b:c1:be:0a:0d:59:d3:86:ef:af:6e:5a:c3:0d:
                    26:8c:08:a9:d3:4b:1e:da:a6:cb:0d:fe:e9:aa:c7:
                    ad:29:77:a8:9e:12:11:f6:99:83:bd:0e:7d:35:41:
                    73:4b:15:41:b0:90:fe:27:de:5f:12:b9:f5:33:de:
                    54:72:ed:46:68:58:e9:00:a9:27:e1:1a:93:08:1e:
                    9b:c4:df:56:77:54:8c:77:a5:56:32:fc:0d:43:b1:
                    10:4a:5f:62:4f:0d:2a:00:6a:92:8b:f5:3e:5b:cc:
                    d1:8c:82:32:77:81:3f:cb:59:8d:e7:cb:02:5f:e5:
                    44:03:68:1d:a2:ea:39:d9:b6:23:15:f0:21:ec:20:
                    d5:8b:7e:4e:4b:77:93:77:96:de:ce:59:96:ea:1a:
                    1a:ac:94:61:36:67:ea:95:b7:b0:12:93:00:ad:13:
                    f1:ff:e8:0c:56:24:8f:bf:38:16:c5:cb:4a:e7:d4:
                    ec:54:d7:71:07:3c:a2:12:05:e7:dd:1e:40:ce:31:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8E:E7:20:C1:40:F0:B9:72:DE:CB:47:7D:F2:ED:65:9C:99:38:25
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/no7nIMFA8Lly3stHffLtZZyZOCU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:16:d9:10:3e:f7:37:5a:55:69:c6:8e:71:2a:9d:0a:11:a3:
         0d:4c:ce:8b:cb:81:b7:fb:29:89:5c:25:c3:4e:03:d6:33:37:
         8b:64:2b:1f:27:2e:e4:41:9f:79:e4:b4:b9:94:50:cc:f4:9f:
         98:20:82:78:af:88:6b:2b:81:36:43:e2:04:ca:09:af:bc:da:
         18:4b:61:33:f6:ea:96:32:cc:b5:4e:d9:19:77:0d:35:71:7e:
         fe:be:9f:e4:60:0d:49:31:6c:6e:bb:d6:8f:ef:df:46:d5:97:
         35:4b:60:8a:41:fc:4f:60:b6:79:62:e6:41:d7:65:26:ae:e8:
         84:f2:5d:8d:aa:fd:54:95:1f:83:31:73:a9:11:8b:f3:d1:76:
         db:a0:6c:4c:84:a2:3c:f3:cb:00:a5:ab:90:1e:6e:3a:ad:64:
         4a:e2:83:b1:70:88:c2:bf:d9:ad:f2:f6:55:12:f2:e6:80:6b:
         09:b1:3d:d1:cc:8f:6a:f0:5b:f4:21:1f:45:ff:26:34:70:4e:
         06:aa:92:7b:79:9f:e4:08:13:50:78:3d:8d:8d:95:2f:7c:db:
         4d:3e:81:09:f9:6f:34:53:03:7a:25:ec:f0:ea:5a:b5:ed:d3:
         05:9b:46:11:86:56:26:f2:6e:55:84:03:48:fd:9c:2a:8e:7e:
         eb:24:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:40 2026 by rpki-client