Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOGJQkjVYh8aAlVPpP6t0K2paH8.roa
File:                     aOGJQkjVYh8aAlVPpP6t0K2paH8.roa (raw, json)
Hash identifier:          xKF6xO2ZPS5rC8Qo8jSXufXwGI2g1Oiv0o5t4+0DYsw=
Subject key identifier:   68:E1:89:42:48:D5:62:1F:1A:02:55:4F:A4:FE:AD:D0:AD:A9:68:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       187D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOGJQkjVYh8aAlVPpP6t0K2paH8.roa
Signing time:             Wed 20 May 2026 06:37:52 +0000
ROA not before:           Wed 20 May 2026 06:37:52 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6269 (0x187d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 20 06:37:52 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=68E1894248D5621F1A02554FA4FEADD0ADA9687F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:26:c9:ba:ff:c3:01:a6:02:26:a8:24:0d:36:
                    85:89:19:e8:39:17:38:51:8a:07:70:48:c0:11:fc:
                    ff:f0:35:3e:71:5c:48:10:6e:b8:87:a7:c5:7f:3b:
                    94:de:fa:40:97:3c:15:a2:81:90:45:ef:44:9e:dd:
                    bb:64:27:7a:7f:ea:2e:5d:45:7f:a5:e5:85:1d:37:
                    25:c7:94:d8:f3:37:fb:54:f4:49:22:5a:f4:40:29:
                    56:a2:ad:30:0f:df:98:3e:65:d7:92:6e:a0:c8:e9:
                    95:33:90:33:8b:8c:d6:fb:20:d8:7d:8c:09:6b:3e:
                    f4:37:a8:d6:42:e6:f5:82:31:0c:d6:b2:e2:dd:ce:
                    d7:25:a1:2c:18:a5:51:37:f4:36:78:dd:5b:cc:11:
                    68:f6:ea:8f:44:7c:0e:17:16:cf:10:16:59:c0:fc:
                    bb:84:93:fe:e6:0d:21:bd:47:44:bc:ea:9d:f7:80:
                    6e:38:28:32:55:d4:cc:a9:8d:c6:b2:a4:6c:19:d2:
                    41:53:31:0d:da:6a:fe:56:53:7f:f1:e6:31:95:13:
                    fd:90:9d:2a:50:50:57:26:8e:68:1f:ba:d3:22:11:
                    04:8a:16:4b:73:d1:cd:82:13:65:7f:ed:af:76:a1:
                    28:b5:b8:a0:e4:33:c4:b5:ec:b3:08:aa:bc:77:b0:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E1:89:42:48:D5:62:1F:1A:02:55:4F:A4:FE:AD:D0:AD:A9:68:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOGJQkjVYh8aAlVPpP6t0K2paH8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:19:a1:ba:48:22:95:31:62:79:56:54:04:59:91:a7:8d:66:
         db:b3:d0:5c:d8:4c:28:97:b7:90:5f:2f:1e:e5:97:50:8e:cb:
         07:88:f4:d5:06:8f:3b:e5:48:66:14:b9:0e:4b:01:c7:09:3e:
         bd:09:e2:39:3d:25:60:d2:b0:19:01:96:cb:ee:3b:d8:74:ae:
         6e:2d:72:95:0e:95:83:d4:d1:76:75:a7:00:e9:07:28:e8:03:
         1b:24:38:db:81:35:78:03:b8:ef:cf:31:01:7f:d9:11:06:e5:
         04:bc:00:39:cf:34:2e:a9:a4:8e:eb:8f:d6:c6:47:bd:81:4f:
         02:19:3b:56:58:3a:34:bd:17:1f:7e:ea:e9:63:e0:16:2b:4b:
         8b:b3:c4:22:7f:c2:46:03:3a:82:dc:3f:d4:29:06:bc:92:2c:
         8f:71:a1:0f:80:d4:d3:70:ef:7a:4e:e6:d1:49:e4:69:c7:44:
         fa:db:57:1f:ae:e9:31:73:f9:29:e9:7b:a0:d9:af:2d:c1:c5:
         9b:7d:96:e5:bd:dd:ac:4e:a1:ee:31:b6:fe:f7:d8:62:53:30:
         cd:3f:c5:68:db:77:e7:33:ab:45:11:0e:19:c6:85:4e:0b:79:
         c5:8b:c5:68:c1:43:d1:1c:e5:61:4f:f2:9e:2c:44:4b:65:59:
         ae:ac:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:05 2026 by rpki-client