Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkaqOmTFU6o-G5iEfzz4jhqcGgs.roa
File:                     zkaqOmTFU6o-G5iEfzz4jhqcGgs.roa (raw, json)
Hash identifier:          rQtiJno7fqxm2x4VuZ9Kp9s/ePhWw6m5xuckD5elBi0=
Subject key identifier:   CE:46:AA:3A:64:C5:53:AA:3E:1B:98:84:7F:3C:F8:8E:1A:9C:1A:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1360
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkaqOmTFU6o-G5iEfzz4jhqcGgs.roa
Signing time:             Tue 31 Mar 2026 07:55:26 +0000
ROA not before:           Tue 31 Mar 2026 07:55:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4960 (0x1360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE46AA3A64C553AA3E1B98847F3CF88E1A9C1A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:ff:d0:50:0d:42:e8:89:c3:64:ab:1d:75:
                    64:0d:0f:0b:7c:f3:3a:9a:37:c9:52:75:ea:fc:26:
                    49:2b:5c:7a:14:32:48:e9:91:eb:d5:2f:f1:45:2d:
                    df:0e:55:3c:27:25:25:b0:37:05:fa:a6:39:2e:a1:
                    5b:37:27:6e:5d:80:d5:37:49:9d:17:a6:84:0f:a1:
                    18:11:f9:ee:b9:36:a3:b5:29:bf:d8:c8:ec:5c:cf:
                    ba:d2:42:2d:cf:a1:65:90:cc:1c:fc:4b:e9:d4:0d:
                    cd:77:f2:98:dc:30:d4:16:25:ef:0d:ca:21:37:b3:
                    4d:ca:97:c9:00:68:48:03:fa:a4:9b:70:29:5b:25:
                    e5:eb:92:d7:d9:2c:38:ec:e9:d4:94:45:a0:56:ec:
                    78:67:cc:b5:fe:e1:5b:91:59:6f:8c:6d:ef:a1:1a:
                    ca:86:37:7d:a8:fa:8f:1b:b6:57:e5:8b:af:27:d8:
                    45:6c:1c:67:5e:d0:43:6c:7d:cf:80:ab:74:ae:b0:
                    ff:87:d7:e0:55:1b:e7:93:1b:bb:e4:eb:69:57:1b:
                    03:22:67:9b:f7:69:cd:81:d6:06:83:08:1e:57:5c:
                    6c:bd:66:88:67:b0:66:5d:a1:49:eb:82:55:e8:ce:
                    87:29:e8:09:8d:1f:ec:c5:91:49:28:71:40:97:2b:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:AA:3A:64:C5:53:AA:3E:1B:98:84:7F:3C:F8:8E:1A:9C:1A:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zkaqOmTFU6o-G5iEfzz4jhqcGgs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:ad:c9:7e:25:e3:00:4c:b0:f3:79:df:a4:cf:56:00:4c:cd:
         d5:ee:1f:06:1a:0e:41:e9:c3:9a:a6:e5:c9:b5:ca:8f:5b:24:
         ae:3d:b0:7b:db:08:ed:89:73:83:5d:d5:d0:d4:3b:00:ac:79:
         36:ee:b3:d1:d8:79:64:60:62:06:10:f8:9a:d3:9d:bd:99:0f:
         7e:db:47:fe:2d:fc:2e:cd:28:3e:6c:c3:8c:6d:00:96:86:24:
         e9:b1:fa:1f:3d:0b:a2:1f:6c:23:8d:a0:4d:52:7a:8f:13:39:
         59:99:aa:d4:89:02:7a:eb:fc:da:d7:fc:b7:41:5b:99:18:a4:
         7c:c5:87:3b:2f:a2:52:b8:12:f3:42:3a:92:21:53:bf:18:48:
         4e:a8:a7:4b:8e:1d:87:fd:43:3d:2d:fe:3a:7c:dd:8f:a2:5a:
         42:94:a6:a0:4a:03:53:64:5a:2c:1e:15:a1:29:7d:87:c6:57:
         0e:8b:b2:4b:5d:6d:d6:04:1c:85:9b:73:f1:4c:39:a9:c5:9c:
         36:c9:10:4e:4e:17:ed:3f:48:f6:4c:51:d8:2f:d6:e2:81:a4:
         c0:f8:45:09:fc:e0:4b:dd:1f:54:d8:e3:8b:17:1f:9b:47:ff:
         44:80:84:40:7e:f2:61:29:19:35:36:4d:50:f9:bc:ba:57:d9:
         06:91:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:43 2026 by rpki-client