Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNi4xAKaAJLPm2cP2L6jpKGV-V8.roa
File:                     sNi4xAKaAJLPm2cP2L6jpKGV-V8.roa (raw, json)
Hash identifier:          IpJK7iafZYfZdrmIMmMF2EOWoKe5o15IkOgxrdqWHSI=
Subject key identifier:   B0:D8:B8:C4:02:9A:00:92:CF:9B:67:0F:D8:BE:A3:A4:A1:95:F9:5F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1361
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNi4xAKaAJLPm2cP2L6jpKGV-V8.roa
Signing time:             Tue 31 Mar 2026 07:55:27 +0000
ROA not before:           Tue 31 Mar 2026 07:55:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4961 (0x1361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0D8B8C4029A0092CF9B670FD8BEA3A4A195F95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:04:49:c8:be:7f:ce:33:c8:bc:97:99:fa:
                    2f:5c:bf:e5:9f:80:41:c2:39:dd:e3:55:d3:e6:f8:
                    16:b9:f4:0b:40:6a:d6:13:d7:db:c8:bb:3c:5b:18:
                    72:c3:33:b6:c1:4d:8e:8f:46:bc:8d:0b:60:a3:15:
                    87:7a:ae:e7:94:87:e9:31:e7:62:33:be:03:93:b0:
                    cc:cb:c8:ed:e9:6f:fe:bc:48:a9:dd:35:20:7d:b0:
                    18:f4:96:e0:fc:be:2e:7b:92:b8:c7:0f:31:6b:ec:
                    30:e1:54:12:e5:5f:ea:0c:16:b4:f6:6b:1e:3d:3e:
                    cc:d1:fe:d8:4a:f9:13:e5:a1:82:bb:25:3c:75:ef:
                    f7:d7:d7:46:aa:2c:86:8d:19:40:ae:d9:c0:91:14:
                    f9:c8:a3:6a:3a:a8:f9:fd:07:3b:36:9b:20:46:4d:
                    95:ed:c9:8c:88:fc:0f:64:80:31:78:ce:9b:80:48:
                    7d:68:f6:25:8f:7d:30:7c:da:4e:fb:3b:54:82:fb:
                    61:00:aa:86:a4:1d:21:45:51:89:6f:af:ea:5d:b8:
                    c7:c3:de:76:71:a5:1e:10:62:64:30:2c:c0:86:d5:
                    6d:ff:20:37:b9:93:4a:05:46:6d:5d:5f:d9:3f:08:
                    b5:98:ba:e2:a5:c4:7b:23:1b:fb:5a:46:2f:2b:32:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:B8:C4:02:9A:00:92:CF:9B:67:0F:D8:BE:A3:A4:A1:95:F9:5F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sNi4xAKaAJLPm2cP2L6jpKGV-V8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:da:9f:81:7a:cb:6c:3b:f5:0a:e1:7e:a1:36:f4:db:70:be:
         3c:98:81:02:aa:ec:a6:30:9a:29:4c:d8:bb:25:02:90:df:c4:
         09:1a:7f:e4:f4:d7:14:48:66:69:cf:df:65:d6:b6:29:30:36:
         36:7d:7f:99:36:33:17:ae:e4:c8:d5:7d:27:d0:2b:cf:1e:ef:
         dc:1f:da:2f:3d:b8:17:d1:22:f4:6c:d3:e2:f4:91:c2:fc:b0:
         51:de:76:32:b5:02:a5:8c:d1:97:db:b9:df:8b:72:1c:8e:04:
         f4:7b:dc:8e:df:ef:39:07:b1:d6:4b:33:40:d7:fe:8e:69:2b:
         b4:2d:1f:01:22:91:19:09:94:d1:1b:8f:cd:b8:b0:72:25:36:
         47:32:d7:2c:90:95:68:70:fc:47:bf:5b:ae:8c:8d:34:d5:c8:
         d1:fb:57:e3:26:57:20:f6:ac:0b:45:71:1a:f0:0f:26:0a:9a:
         7a:a1:2f:36:95:88:4c:51:ca:2f:91:0d:8b:40:62:35:85:cd:
         b5:59:31:78:0d:68:44:5b:c9:e8:55:76:0b:75:2e:15:d2:ef:
         8c:71:60:b6:46:72:f8:f7:15:43:bc:22:a7:4e:42:bf:01:32:
         92:1e:13:9b:80:a0:7e:0c:1b:21:30:d5:d9:6a:42:8b:b2:0f:
         f9:b5:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:53 2026 by rpki-client