Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/x6tSy7nrgbw2vTFQfYLukmulUOE.roa
File:                     x6tSy7nrgbw2vTFQfYLukmulUOE.roa (raw, json)
Hash identifier:          O/QJjAhVbZZAorq8IUC+bxKmKLzKLwh2bBckf0PmNZE=
Subject key identifier:   C7:AB:52:CB:B9:EB:81:BC:36:BD:31:50:7D:82:EE:92:6B:A5:50:E1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1615
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x6tSy7nrgbw2vTFQfYLukmulUOE.roa
Signing time:             Tue 31 Mar 2026 08:01:06 +0000
ROA not before:           Tue 31 Mar 2026 08:01:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5653 (0x1615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7AB52CBB9EB81BC36BD31507D82EE926BA550E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:b0:c4:fe:e9:98:18:82:7a:3f:51:ea:0c:
                    9e:0a:b3:e0:07:16:1f:9e:c4:8b:40:04:5a:b6:8d:
                    6a:3a:15:13:14:31:bc:6b:b4:ea:ea:87:2c:ae:23:
                    ee:1a:9e:12:7a:69:04:f6:cd:58:bc:f0:48:1d:f9:
                    c4:1e:06:2b:20:72:27:1a:39:08:aa:05:8a:6d:82:
                    77:48:67:d7:22:b4:c5:fb:c2:07:d2:b0:20:7d:f9:
                    05:1a:10:3f:55:85:b0:09:42:a8:21:2e:81:0b:7d:
                    50:f9:8e:b1:81:82:0f:82:8e:94:00:d6:60:65:8f:
                    86:01:7e:c7:90:c4:61:53:6e:a1:20:f7:ab:af:8a:
                    6f:43:9d:8a:26:dd:f6:b8:57:54:55:35:bb:dd:9e:
                    7e:da:38:7d:67:39:50:70:c1:a2:1f:70:a9:df:4c:
                    a7:7d:8e:d2:88:12:a4:c6:47:f8:b6:0d:8d:05:7d:
                    16:68:ec:7b:2c:77:fb:28:c1:0d:6f:f5:b0:13:ac:
                    eb:bb:0e:49:38:3e:2d:bc:67:fd:ac:f7:1a:ef:ed:
                    72:b2:4a:c4:6e:e8:6d:0b:60:64:d4:52:08:6b:c7:
                    80:ef:25:c1:80:f6:61:b2:68:69:00:51:e4:2d:48:
                    34:4c:15:67:1d:1c:de:c0:0b:60:54:9f:af:61:5d:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AB:52:CB:B9:EB:81:BC:36:BD:31:50:7D:82:EE:92:6B:A5:50:E1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x6tSy7nrgbw2vTFQfYLukmulUOE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:e2:1b:73:6f:88:34:fe:a3:cb:fd:9f:4b:2b:56:ca:26:22:
         aa:ed:65:3b:df:3a:74:1b:58:6b:65:de:9c:a2:65:e0:11:f2:
         b3:7b:20:88:3c:71:63:4e:6d:6e:56:8d:36:9d:2f:d0:7e:08:
         ce:b6:a5:2f:a4:18:66:81:d1:7b:74:8e:f0:e6:30:32:8f:10:
         57:75:f2:1e:84:07:60:24:01:4f:3b:2f:b0:09:da:76:d1:50:
         16:65:e8:43:b2:83:d2:20:82:11:6b:bb:dc:7d:e5:65:40:d4:
         b0:e6:9d:5c:67:df:e1:69:28:4c:c4:93:e3:9f:89:b6:60:08:
         b4:bd:65:1e:91:2b:49:aa:77:d3:af:d5:99:a1:44:40:27:a3:
         9f:36:d5:23:ec:02:43:15:f5:a5:ab:11:64:14:a6:e5:2e:3f:
         c5:5d:f3:93:9a:71:ca:cb:b8:f7:b6:95:a9:5f:a7:9b:75:6e:
         18:e1:03:2b:09:4e:c1:a9:c5:ae:d8:6e:b9:84:c9:5d:b8:35:
         1d:e2:d8:54:65:47:7b:55:bd:0c:25:4e:e2:9e:53:05:a8:a1:
         73:d8:5f:e8:0e:6a:38:73:41:c9:ba:08:7e:22:3b:83:1f:85:
         8b:70:33:a3:4b:8b:81:eb:0c:26:f8:96:77:a2:37:09:3f:46:
         fa:9a:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:14 2026 by rpki-client