Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5INl2cuDjAfC-6429Bje5oopl0.roa
File:                     t5INl2cuDjAfC-6429Bje5oopl0.roa (raw, json)
Hash identifier:          9oR4CfJaJJqd49XL1K0w5pwykA05JCxQetO71CvSIVY=
Subject key identifier:   B7:92:0D:97:67:2E:0E:30:1F:0B:EE:B8:DB:D0:63:7B:9A:28:A6:5D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1676
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5INl2cuDjAfC-6429Bje5oopl0.roa
Signing time:             Tue 31 Mar 2026 08:01:51 +0000
ROA not before:           Tue 31 Mar 2026 08:01:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5750 (0x1676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7920D97672E0E301F0BEEB8DBD0637B9A28A65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:6f:e7:6d:64:3f:9f:03:2d:05:21:af:c4:
                    48:dc:0a:00:42:9f:e7:2d:e8:83:01:10:99:a7:1e:
                    50:9a:41:37:54:9a:55:4e:46:8b:c3:b4:fa:0f:13:
                    af:be:1c:d6:36:69:76:19:21:02:c5:83:07:88:1c:
                    4e:4c:cf:4b:ef:b0:f5:6a:1d:7f:9c:2d:45:fa:50:
                    05:fa:61:f3:9b:91:47:5f:39:5a:ea:1c:56:f3:a4:
                    88:b1:4a:41:94:00:32:fd:e3:11:62:37:40:1e:fb:
                    75:1f:d9:c8:42:0f:8a:90:86:65:a7:57:80:57:9d:
                    d0:3d:d5:71:59:29:cc:fb:20:6a:a3:0b:18:a3:97:
                    9d:78:b6:1b:b1:56:41:6d:7f:17:27:2d:d3:2b:f5:
                    1c:70:15:1b:7c:9c:04:bd:3c:f4:3c:ab:4d:04:e9:
                    2e:f1:90:80:47:d7:7d:62:ec:32:35:8d:bf:5c:3a:
                    eb:6c:2b:62:22:dd:f4:74:ea:18:fc:68:02:91:d5:
                    f8:88:f4:c4:14:f2:e6:5d:86:9c:91:e7:50:56:78:
                    c0:fe:d0:26:ca:0d:37:cb:1b:df:1d:2e:91:46:11:
                    05:ef:2e:70:5a:c3:65:97:13:d2:53:42:4b:c9:cf:
                    17:46:45:24:a2:61:d3:7c:a8:d8:78:c9:fd:74:06:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:0D:97:67:2E:0E:30:1F:0B:EE:B8:DB:D0:63:7B:9A:28:A6:5D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t5INl2cuDjAfC-6429Bje5oopl0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:7f:5b:03:2f:26:f9:79:f7:2d:60:cd:41:8c:55:56:b7:
         eb:ba:df:f9:9b:06:9c:f3:01:ed:54:ca:16:d0:4d:27:5e:d4:
         fa:31:f7:fb:35:77:c2:36:be:bd:6d:9d:ba:d2:09:8b:80:bb:
         7b:8a:9b:d5:cd:9e:b5:93:e4:81:89:d1:a6:fa:d3:2b:5d:2f:
         0d:8f:c1:71:4c:5c:34:c3:68:c3:db:36:47:74:6e:bc:e4:a7:
         91:99:b7:b8:e5:73:01:b9:65:12:07:58:c3:72:87:f7:4a:4f:
         ce:3a:5c:ee:55:bb:f7:ca:37:84:d5:02:9c:d3:3b:0b:c0:d8:
         c9:aa:55:ae:77:8a:3a:ea:02:b7:3e:5b:b8:77:b0:f2:25:fe:
         93:26:3f:0c:fb:28:a0:2f:f2:55:5a:79:03:ee:20:12:e1:a2:
         34:6d:27:5c:3e:4a:e0:b0:ff:36:28:02:b4:90:b0:06:5e:8c:
         a3:db:2b:76:04:03:75:3d:01:1f:3e:ed:ab:9f:6e:d0:30:8f:
         d2:44:8c:e1:ae:24:fd:25:17:69:f4:27:d2:0b:a0:07:32:56:
         1f:57:97:a5:0b:d0:1c:12:07:25:59:5b:78:c0:d4:2f:f5:30:
         b7:27:7e:f3:52:3a:e3:af:6e:67:9f:75:e5:fe:44:45:3c:b5:
         ae:b7:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client