Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vsryS2Sp8tOiNXWGEoE7N47peDk.roa
File:                     vsryS2Sp8tOiNXWGEoE7N47peDk.roa (raw, json)
Hash identifier:          wFrTOc3OnFh4vji4Fem3jweFc785fZiq1DUUeQjuT+A=
Subject key identifier:   BE:CA:F2:4B:64:A9:F2:D3:A2:35:75:86:12:81:3B:37:8E:E9:78:39
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1773
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vsryS2Sp8tOiNXWGEoE7N47peDk.roa
Signing time:             Tue 31 Mar 2026 08:03:49 +0000
ROA not before:           Tue 31 Mar 2026 08:03:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6003 (0x1773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BECAF24B64A9F2D3A235758612813B378EE97839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:85:df:09:2b:48:6b:86:a3:32:2c:99:21:
                    f8:bb:18:c4:12:c5:03:9f:07:e3:b5:f5:60:97:6c:
                    01:1c:0e:7b:47:b2:b3:9f:d2:f2:8e:9c:8f:73:2c:
                    46:d4:4e:a3:af:9d:ea:b7:cb:fc:23:57:ab:d9:09:
                    8d:5a:47:a9:aa:75:41:b6:13:0d:cf:27:3e:dc:3a:
                    8f:ab:fb:c4:75:c4:d4:4d:82:af:d7:b1:87:40:52:
                    09:25:90:9c:22:40:81:51:69:05:48:3d:03:93:78:
                    bf:2e:28:10:52:fa:5c:ac:91:46:18:37:e4:b2:b2:
                    37:09:95:ec:6b:dc:61:7a:52:55:7d:4b:c6:f0:ed:
                    b3:1e:d7:24:b7:dd:1a:12:57:a3:5b:17:89:27:6c:
                    3c:9e:a9:dd:c7:73:1d:04:58:9a:38:ea:24:b4:ce:
                    3b:de:bc:98:ec:7a:6b:da:e7:b5:b8:d0:d1:c8:13:
                    3e:09:2f:a0:0f:03:d7:2d:1f:79:aa:f1:e3:ad:3d:
                    6a:6f:e3:98:f7:6a:04:83:65:e9:7c:31:07:f5:68:
                    4a:ef:fe:19:15:cd:0f:ab:2a:b7:3a:84:e2:ec:23:
                    3a:c7:4c:08:71:ad:29:4e:0b:3a:d6:d4:74:60:06:
                    c9:d5:a2:fc:a9:f1:f6:4b:af:fa:ed:20:a1:60:02:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:F2:4B:64:A9:F2:D3:A2:35:75:86:12:81:3B:37:8E:E9:78:39
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vsryS2Sp8tOiNXWGEoE7N47peDk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:91:7d:39:b6:cd:3d:70:de:9b:c5:0c:d9:74:5c:de:e4:13:
         06:69:c9:65:98:ab:85:91:c6:30:20:d5:8e:0a:8d:9e:69:81:
         d5:27:4d:18:8c:8b:03:a6:66:66:1f:9c:f9:53:ee:2d:65:19:
         d1:61:38:4b:0b:de:6f:f8:ee:17:8b:ab:05:69:e5:99:59:ca:
         89:d9:94:91:5f:d0:18:55:60:34:48:23:e0:cb:e5:40:a6:f5:
         f7:bd:fe:19:c5:fd:92:ac:d6:0e:14:d4:62:c2:92:0e:33:b9:
         5b:22:a9:18:1a:2b:df:3e:11:90:16:af:ae:3b:80:48:9b:46:
         40:a2:c3:b6:ad:f8:49:80:56:1b:d3:56:fc:00:a6:28:cd:ec:
         5c:78:f8:3b:30:b3:2c:30:e5:f2:38:83:18:9b:10:02:63:90:
         8b:3b:b7:71:fb:23:28:97:ae:b1:55:89:18:b7:db:12:ce:46:
         00:c3:f4:ff:a1:10:30:6a:05:b6:48:de:2e:d3:78:3e:8d:6c:
         81:3f:bc:cc:26:0f:cf:2b:64:29:80:c8:2c:15:f2:d7:86:3f:
         4a:32:ae:b8:aa:29:04:db:ac:23:ac:ab:74:76:64:d2:af:16:
         e1:41:25:7d:71:17:18:8d:ed:04:71:ac:f1:0c:cc:f4:5e:6a:
         fb:b9:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:14 2026 by rpki-client