Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rFMV1LBHA9f_sbTVerfS1mXkfSs.roa
File:                     rFMV1LBHA9f_sbTVerfS1mXkfSs.roa (raw, json)
Hash identifier:          eE55iRItdwHiF1gZFfyC52GeeNLqE8ra072ztkGuiwI=
Subject key identifier:   AC:53:15:D4:B0:47:03:D7:FF:B1:B4:D5:7A:B7:D2:D6:65:E4:7D:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1844
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rFMV1LBHA9f_sbTVerfS1mXkfSs.roa
Signing time:             Tue 31 Mar 2026 08:05:38 +0000
ROA not before:           Tue 31 Mar 2026 08:05:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6212 (0x1844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AC5315D4B04703D7FFB1B4D57AB7D2D665E47D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:f7:8a:0d:cc:e4:b8:19:78:ce:62:4f:22:
                    1f:b4:7d:5f:09:69:76:a6:17:23:1a:d4:0b:07:63:
                    70:5c:ac:21:f6:7d:da:61:e1:28:11:32:80:21:53:
                    5d:9e:57:78:04:6a:1d:f0:28:42:b2:13:db:2c:ae:
                    1c:eb:2e:f5:4c:2a:f8:e6:94:d8:52:d3:6d:69:2c:
                    58:7f:b5:a9:94:31:64:78:8c:43:db:e0:ae:01:43:
                    fd:64:b2:9c:24:00:1a:db:51:68:89:66:0c:48:36:
                    59:63:2f:e4:f1:32:84:18:e9:2f:3b:98:80:05:00:
                    dc:f3:c6:47:dc:ae:3d:56:be:04:01:ff:ba:44:02:
                    39:65:d6:78:51:b6:94:5d:81:3a:8a:f8:59:2a:c0:
                    04:a1:45:56:86:f2:b5:d1:fb:1b:d0:99:a6:7c:fd:
                    a2:43:45:63:97:7c:57:45:6b:5d:03:2a:9a:8f:d2:
                    b7:e0:86:24:3e:44:5f:4f:69:33:38:e5:60:64:8a:
                    ce:b9:12:83:5a:15:97:8b:5a:3d:15:17:8a:0d:7e:
                    56:eb:ad:4f:ff:9d:b7:1c:fd:ed:94:e2:cc:7b:10:
                    e2:37:02:40:2d:2d:25:ef:3b:20:b5:6c:1f:39:d7:
                    d1:00:e1:4b:c9:a8:c0:f5:35:a1:c9:ec:c5:18:3b:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:53:15:D4:B0:47:03:D7:FF:B1:B4:D5:7A:B7:D2:D6:65:E4:7D:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rFMV1LBHA9f_sbTVerfS1mXkfSs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:96:83:e2:da:1f:06:5d:1c:de:f3:0a:28:f1:14:09:e0:
         56:5e:ab:e2:1f:d2:26:ca:be:a4:8d:b2:f6:88:8c:5d:6b:c3:
         b9:dc:f2:bf:8e:b3:92:f9:5c:b6:49:54:a5:ca:03:d6:5d:0f:
         2c:92:89:85:c8:d8:5d:87:e9:ad:b3:c0:a0:e2:92:11:8f:41:
         16:1e:af:79:7c:f6:15:4a:a6:b8:c8:7e:9b:e4:ed:32:7c:0d:
         81:98:21:33:db:c4:f3:3c:bd:a5:e2:96:5b:7e:42:37:73:b6:
         d1:0c:3e:43:2f:b9:ef:9d:87:72:28:cc:d8:23:31:b6:f1:af:
         6f:f2:c0:4c:4a:c4:f5:70:49:ee:35:ad:3a:06:0a:45:0b:fc:
         35:e7:7b:77:14:6d:f3:d0:b8:29:84:b7:e5:6e:a1:53:34:53:
         f3:59:26:24:03:b1:46:4c:32:60:2f:83:fa:e9:08:ca:b5:f9:
         56:0c:a1:46:9f:e6:20:f3:32:8e:73:18:fe:81:bb:42:24:84:
         55:98:2d:a1:94:81:b7:1c:4c:76:dd:50:fc:4c:34:e9:2d:a2:
         1d:49:bc:a0:90:23:8a:b4:c7:68:e8:c9:e3:b3:9a:bd:cc:8e:
         9f:3c:d7:65:86:5c:15:ce:af:a1:d3:26:37:ce:98:25:9e:05:
         be:7e:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:55 2026 by rpki-client