Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa
File:                     zGwFut1UQjehcTAD9QspNXtOLYA.roa (raw, json)
Hash identifier:          O30stCi301PxM39L4FswCsw+B3NQCfuhEedpTpfx9VY=
Subject key identifier:   CC:6C:05:BA:DD:54:42:37:A1:71:30:03:F5:0B:29:35:7B:4E:2D:80
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1644
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa
Signing time:             Tue 31 Mar 2026 08:01:29 +0000
ROA not before:           Tue 31 Mar 2026 08:01:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5700 (0x1644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CC6C05BADD544237A1713003F50B29357B4E2D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:00:64:fe:8f:14:be:8b:8c:66:a0:36:49:
                    ea:49:b6:bd:c1:6c:c3:98:e9:f0:e2:eb:96:74:a5:
                    3e:64:da:5b:a0:b1:28:7a:e6:6d:f2:0d:38:83:8d:
                    c8:32:ab:cf:8c:c8:5b:c2:10:ac:4b:d9:f9:f5:4f:
                    b0:63:7e:cb:73:52:60:f2:f4:d6:2a:57:c4:b5:e7:
                    1d:03:13:a4:89:e9:a3:4e:7b:96:c8:d4:3b:89:d1:
                    c1:01:58:50:dc:e2:9b:dc:e2:06:ed:00:01:31:36:
                    42:3f:fb:b5:f1:44:df:cd:b7:1d:ac:28:40:9a:62:
                    08:e0:cd:ca:ae:32:72:c1:38:b4:4c:01:0d:a9:78:
                    fe:5c:3e:a5:8c:72:27:e4:68:9f:c6:77:47:03:45:
                    ff:60:fc:62:2b:69:f3:3e:49:e8:ea:ab:b3:0d:a1:
                    a7:1d:33:c6:8d:4b:eb:13:90:2d:49:21:c1:69:c3:
                    06:d4:e7:03:d3:dd:ed:fe:ca:4f:58:e9:59:56:14:
                    e1:b4:d9:04:78:36:79:8a:f3:f6:dd:13:da:c8:03:
                    c0:72:cb:d1:00:56:3f:ac:b7:d7:0b:bd:1c:9a:b1:
                    18:84:2e:f5:63:0a:c4:f3:84:72:70:f0:38:c2:42:
                    b8:ff:f9:99:e1:3c:a7:b3:79:b3:b7:0f:5b:cf:37:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6C:05:BA:DD:54:42:37:A1:71:30:03:F5:0B:29:35:7B:4E:2D:80
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGwFut1UQjehcTAD9QspNXtOLYA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:72:67:87:4e:ac:7c:7f:cd:e0:f8:56:4a:47:27:03:30:07:
         78:ff:5b:97:d0:db:b7:c1:c4:99:98:6d:93:12:20:29:16:93:
         70:be:57:14:99:fb:c6:75:81:c0:af:ce:05:71:c5:8a:b1:c3:
         a7:a4:8e:d7:73:5b:55:fa:77:b0:bc:a8:00:6a:5b:50:de:4e:
         58:11:73:3a:4e:41:05:89:e6:4b:73:ce:f3:18:83:85:84:e6:
         a4:01:b6:8e:47:20:d9:81:08:a1:56:9d:a3:8f:4a:99:99:c8:
         88:bb:06:8f:18:96:dc:28:c4:8f:b7:1c:39:27:73:7a:2f:1d:
         c8:7f:73:ba:cc:da:f9:5b:e7:fe:41:88:28:5a:a3:61:de:46:
         b6:a4:99:d6:7b:54:b9:f3:a2:a9:94:c8:7b:09:16:94:74:9b:
         3b:ce:1a:a6:98:71:95:07:48:e0:c4:13:4b:9f:c4:91:70:e5:
         f1:a6:a3:92:35:e4:7a:93:d0:d1:d0:e5:86:47:13:eb:96:8d:
         c4:b3:c9:b6:5f:e9:00:0a:15:11:f2:d2:63:05:4c:85:b2:0b:
         a4:5a:71:36:c1:1d:45:15:b5:c4:25:ef:10:b1:2c:fa:df:6e:
         3a:8d:5b:15:d7:77:a4:bc:2a:c0:d7:e6:75:26:61:c8:66:fd:
         12:39:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:53 2026 by rpki-client