Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMtg5zSo6dl-m-vq8SnmLMteZPk.roa
File:                     MMtg5zSo6dl-m-vq8SnmLMteZPk.roa (raw, json)
Hash identifier:          VNQ21KxmAuIX4pT2JCra248YivVFX4ODTUsAU20F+vo=
Subject key identifier:   30:CB:60:E7:34:A8:E9:D9:7E:9B:EB:EA:F1:29:E6:2C:CB:5E:64:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       187A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMtg5zSo6dl-m-vq8SnmLMteZPk.roa
Signing time:             Wed 20 May 2026 06:31:43 +0000
ROA not before:           Wed 20 May 2026 06:31:43 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6266 (0x187a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 20 06:31:43 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=30CB60E734A8E9D97E9BEBEAF129E62CCB5E64F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:ff:e2:36:a5:e7:0d:17:a7:ae:7f:16:9b:
                    cd:44:50:b5:76:64:9d:43:68:92:cd:98:6b:9e:e1:
                    d6:ed:2b:21:b3:0a:dc:f7:e2:4c:47:6c:94:8e:26:
                    fd:5d:9d:e4:60:99:a6:7d:ce:4a:dc:fa:55:9d:65:
                    d1:d6:90:02:02:c3:4f:95:0f:71:97:2d:89:50:17:
                    65:c0:01:3a:c6:f6:d7:a3:6a:88:57:f2:61:76:25:
                    a9:68:e2:3c:d3:a0:d7:53:a5:e6:7c:17:51:f9:36:
                    d0:b9:f0:b0:74:58:86:43:cc:b0:84:0b:4e:60:f3:
                    49:03:6e:1e:89:cd:43:17:25:02:cd:91:ec:e4:d2:
                    26:ba:0a:23:49:2c:0b:54:01:58:b8:74:37:4e:f4:
                    07:25:7e:c5:4b:f1:37:01:98:9d:87:46:db:4b:a8:
                    a2:c0:59:03:7b:a7:57:70:e7:1a:d4:a2:68:a3:95:
                    90:5b:ac:88:12:49:f5:4c:ec:e0:53:8f:bf:c9:2c:
                    85:be:46:ec:18:bf:79:55:4c:6d:31:09:25:f9:f7:
                    f8:4c:ac:e4:6e:db:50:d3:53:5f:63:77:64:f5:fd:
                    9b:f3:f1:67:68:91:4e:a1:fb:0d:78:6f:32:6f:92:
                    9b:9e:5c:4f:68:ba:c1:9c:17:19:b3:58:31:b0:75:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:60:E7:34:A8:E9:D9:7E:9B:EB:EA:F1:29:E6:2C:CB:5E:64:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMtg5zSo6dl-m-vq8SnmLMteZPk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:4d:7c:be:80:73:f1:0d:60:d5:71:70:d0:55:cb:a3:b2:71:
         28:62:bc:18:f6:10:2d:c4:b7:aa:a9:37:dc:bd:fa:92:6f:ac:
         84:d3:11:fb:bf:6a:54:0f:7d:09:2c:a1:64:b0:1f:98:d3:fe:
         59:c9:c1:c2:34:11:bf:1a:0d:5f:75:93:68:8f:75:37:fd:e9:
         98:c5:80:28:3d:7d:dd:e5:96:f3:7a:67:85:47:2b:ea:41:65:
         ac:a4:30:f5:c4:62:03:65:51:31:bb:57:e3:6f:52:85:88:a0:
         21:8a:90:c6:59:89:ad:42:6d:ef:e6:f5:8d:ec:5d:11:3c:aa:
         94:db:a2:5e:cd:5b:96:69:76:a4:af:a7:b1:4a:71:86:39:d3:
         f4:a3:08:bc:27:b8:13:a0:84:35:30:bb:1b:ff:b0:c5:d6:f3:
         ef:66:32:cb:83:05:6d:8e:f8:45:b3:68:b2:99:3e:85:96:ee:
         31:61:58:99:cc:32:5e:e7:78:c6:9b:25:49:bb:95:3a:2c:50:
         8a:9e:36:4a:23:31:3c:14:49:3d:6b:5f:89:cd:56:36:be:9a:
         39:27:ad:66:b5:57:37:8e:96:b6:d7:9e:c4:8c:2b:7e:57:73:
         ee:5c:eb:31:9d:5e:41:6b:eb:3f:96:5d:1c:64:ce:c8:cf:ab:
         60:3c:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:10 2026 by rpki-client