Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
File:                     uN2nmHvMU7ACw2UlZYK6hb64rGI.roa (raw, json)
Hash identifier:          OC0GOLVNEBUVbll3Xav+N1dTIR/iaa/vhWCgQCjxHnI=
Subject key identifier:   B8:DD:A7:98:7B:CC:53:B0:02:C3:65:25:65:82:BA:85:BE:B8:AC:62
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1062
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
Signing time:             Wed 18 Feb 2026 06:41:43 +0000
ROA not before:           Wed 18 Feb 2026 06:41:43 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4194 (0x1062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 18 06:41:43 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B8DDA7987BCC53B002C365256582BA85BEB8AC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:8e:88:43:53:01:3f:16:04:a9:1f:19:80:
                    3f:7e:7a:30:17:f6:03:22:19:47:d2:89:d6:7e:67:
                    e0:3e:f6:59:57:3f:25:c8:82:f2:e3:d2:7e:8f:2a:
                    8c:eb:84:10:b2:8e:96:38:41:45:cd:e9:77:36:68:
                    db:fe:8a:ce:41:5d:db:c1:98:6d:48:22:e3:ea:2b:
                    f2:43:9c:63:66:37:11:e8:ab:b9:49:cd:11:c1:a2:
                    64:0e:2f:7f:2f:45:fa:e5:44:6c:fa:fa:ab:b1:dc:
                    9a:b1:72:77:47:3d:f6:4b:df:88:18:e7:58:06:fe:
                    8d:12:8f:75:13:b8:f0:47:d0:e4:d9:60:34:31:b3:
                    45:bf:cc:9d:6c:81:9b:dd:9a:d9:32:79:b3:79:7e:
                    48:0b:61:39:91:8f:18:56:1b:15:03:9a:ec:d0:ee:
                    4f:61:14:36:56:4b:cc:95:7f:61:15:89:c7:73:af:
                    3c:c7:23:e4:6f:38:25:ca:97:e0:fc:e7:f3:05:18:
                    5a:d5:6a:6b:8d:d3:98:27:a5:8c:bd:d5:30:dd:35:
                    d7:1e:f1:7b:ec:2b:52:1a:7e:7b:75:a6:ef:f8:f2:
                    fc:72:a7:19:16:2a:5c:c8:5b:c5:75:6a:e9:5a:5c:
                    07:91:d0:e4:be:10:90:c1:e2:43:23:80:0f:58:13:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DD:A7:98:7B:CC:53:B0:02:C3:65:25:65:82:BA:85:BE:B8:AC:62
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uN2nmHvMU7ACw2UlZYK6hb64rGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:7d:bb:21:ef:e1:fb:28:97:e5:7e:0d:54:ee:c9:55:a4:
         4f:15:aa:a0:7f:cc:52:58:ba:53:8a:82:b5:7c:f2:93:40:51:
         c3:cb:36:9c:c7:13:38:f1:50:44:4f:54:74:f8:20:5a:a4:0c:
         64:bf:59:e4:8b:20:c6:69:86:46:1b:a3:1e:f7:4e:9a:58:ca:
         86:56:02:58:b3:de:81:1d:5c:fc:63:4b:25:82:40:be:1d:16:
         fe:7b:e4:72:c7:22:33:e2:c3:69:9a:ad:10:7c:67:d5:8c:5d:
         ac:f0:7b:3f:43:01:3d:55:18:30:36:32:22:15:6f:3b:d0:ed:
         53:6e:c6:a1:c2:3f:a5:01:a8:3a:86:80:6a:f8:a3:bd:ea:dd:
         c0:64:47:4e:cb:f6:8e:d2:a4:ab:d2:f7:7e:8e:77:d1:d6:eb:
         07:b8:48:40:f8:e0:6f:48:4c:a0:87:39:8a:8a:97:ba:c5:79:
         f0:96:9f:c9:7b:0c:3d:74:5c:0d:4e:70:3e:c2:30:fd:5b:52:
         6e:51:81:73:62:43:93:d1:3d:ba:1d:f4:38:b7:83:f0:ed:d5:
         5c:e8:15:63:3f:58:6b:12:fa:e8:40:9c:c8:49:61:1c:9d:b2:
         a7:a6:35:ac:57:4a:25:ee:15:93:c7:87:2f:93:fa:ec:e7:24:
         b9:c2:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:19 2026 by rpki-client