Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DIE9uTpkMOKv4DBwZ4pxQIbd6jc.roa
File:                     DIE9uTpkMOKv4DBwZ4pxQIbd6jc.roa (raw, json)
Hash identifier:          WwuP1sZ+h1U2cdjYjLw+4IEEW2o5sW/frENHOtXAZfw=
Subject key identifier:   0C:81:3D:B9:3A:64:30:E2:AF:E0:30:70:67:8A:71:40:86:DD:EA:37
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04A4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DIE9uTpkMOKv4DBwZ4pxQIbd6jc.roa
Signing time:             Tue 31 Mar 2026 08:12:56 +0000
ROA not before:           Tue 31 Mar 2026 08:12:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        49.250.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C813DB93A6430E2AFE03070678A714086DDEA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:57:bb:d3:49:e2:cf:bd:6a:93:6a:54:61:
                    91:05:88:47:56:ff:5a:42:16:40:00:78:b9:f1:22:
                    b1:bd:a2:57:a1:79:e7:cb:62:29:83:45:89:3f:79:
                    93:db:56:22:c3:b0:c5:fc:63:30:05:c7:f7:e3:07:
                    6b:d1:c3:88:1d:44:51:87:ac:17:5d:dc:55:c7:50:
                    41:a0:04:64:5e:04:c4:73:4e:e8:08:f0:58:ed:9c:
                    6f:39:5b:80:c5:81:ec:63:a4:2a:70:23:95:10:18:
                    42:e8:25:29:1b:40:cf:b5:a1:d9:a9:7d:5e:86:ff:
                    99:89:71:f7:aa:e0:eb:1a:be:bc:71:52:e9:8f:98:
                    fe:b0:41:3f:fa:95:c6:9e:73:af:b0:0a:21:5e:79:
                    47:31:d4:67:27:d5:e8:3c:af:d5:4a:e0:2e:6a:1c:
                    f8:dd:9f:ba:02:f1:ff:8b:14:c7:65:86:b1:26:08:
                    f8:54:bb:fc:c4:66:25:46:33:03:a7:c1:bc:29:48:
                    5f:97:e4:09:f0:af:1f:c9:d8:74:81:60:06:49:02:
                    0a:40:ff:1a:df:27:e6:36:47:50:ab:f8:9d:46:77:
                    cb:1e:e8:cc:e1:c2:51:33:e5:c0:3b:ff:ca:62:53:
                    3f:2d:ea:a9:82:da:26:ea:81:51:23:1a:53:b6:4b:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:3D:B9:3A:64:30:E2:AF:E0:30:70:67:8A:71:40:86:DD:EA:37
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DIE9uTpkMOKv4DBwZ4pxQIbd6jc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:18:c6:21:8e:a4:ac:b1:f1:de:28:a8:91:ca:2d:94:a5:
         33:ef:3a:23:e9:4a:27:82:7f:55:49:c8:44:9e:88:fe:85:0d:
         03:da:f8:f9:ce:bb:49:a4:1f:7c:52:9b:9c:da:4b:b4:c2:ce:
         e8:6a:59:eb:c4:ef:3a:24:bc:4c:62:d4:0f:3a:a5:53:88:1d:
         ad:70:b1:84:d6:ad:d6:1f:dd:48:6b:ec:b5:32:99:0f:d3:d0:
         30:93:0a:07:7f:62:b6:3a:f1:bd:20:5c:d0:9c:f9:3a:28:0c:
         00:c7:cb:aa:f8:fa:f7:56:d0:9a:34:b7:e9:1f:8a:bf:a8:bd:
         85:95:13:92:c5:53:d2:a8:d3:a7:9a:16:1c:aa:fd:73:49:ce:
         81:30:b7:2b:dd:10:ed:92:f6:29:76:4b:0f:0a:e5:64:8d:e3:
         94:21:c0:25:9b:29:76:3e:67:1a:b6:d4:76:fe:69:23:47:2a:
         70:bf:0d:40:78:e1:88:0b:3d:57:95:55:13:c2:bb:b0:c2:4c:
         dc:50:e5:65:48:54:1e:a8:8d:20:5b:d5:63:32:db:ac:ee:d3:
         ac:0a:ea:71:c9:d9:04:aa:e5:ea:d5:af:69:fe:d5:2a:a3:17:
         48:03:c1:64:2c:71:e0:09:a1:49:5a:11:1d:a0:f9:4e:1d:10:
         85:2d:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:08 2026 by rpki-client