Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Vi-9PzpIldrvC0lDWJIBjJtwow.roa
File:                     -Vi-9PzpIldrvC0lDWJIBjJtwow.roa (raw, json)
Hash identifier:          D96SBX9FsZuuNkSRddPwO1Z0xGrPJF3PyoX51IUJRWQ=
Subject key identifier:   F9:58:BE:F4:FC:E9:22:57:6B:BC:2D:25:0D:62:48:06:32:6D:C2:8C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       128A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Vi-9PzpIldrvC0lDWJIBjJtwow.roa
Signing time:             Sun 01 Mar 2026 03:08:36 +0000
ROA not before:           Sun 01 Mar 2026 03:08:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4746 (0x128a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F958BEF4FCE922576BBC2D250D624806326DC28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:3c:4d:4d:57:37:72:35:a9:d7:82:67:32:
                    a3:44:9d:c6:4b:02:2a:97:d8:8d:41:11:ac:a6:8b:
                    b5:57:fa:30:34:d6:df:57:fa:86:91:e6:d9:7f:28:
                    0a:0c:32:44:c2:20:af:ac:21:1c:47:d7:5f:32:55:
                    11:c2:e9:43:9a:2b:c4:28:a0:3e:2f:5b:ab:9c:5d:
                    15:ed:11:b6:6d:93:de:12:28:33:0d:73:09:f3:a7:
                    3d:ba:ab:1d:21:24:a5:b4:4c:b1:8d:92:cb:99:58:
                    b4:4a:31:4b:e2:a3:d7:2e:94:70:81:4a:4d:6e:9d:
                    21:a3:a9:2a:56:10:fe:c6:ea:aa:b4:18:13:d3:4a:
                    fc:21:f9:ed:66:e6:d7:6b:33:9e:ae:c8:d1:20:39:
                    f2:af:45:f2:17:a1:ff:84:fb:6b:2e:15:31:3a:c2:
                    f4:61:0d:8f:f8:a6:ff:06:b1:af:2a:6f:d5:06:7b:
                    ed:08:24:b8:9f:be:14:5e:bc:17:95:bc:e0:61:2e:
                    ef:84:46:c4:3c:61:75:25:82:74:65:51:a4:02:5a:
                    67:33:d1:be:2c:4a:6c:d5:77:0e:b5:9c:d4:09:58:
                    f3:05:be:78:63:93:cd:6c:cf:6b:06:64:c8:88:0c:
                    00:1d:a5:3e:66:a4:6d:2a:90:b7:93:48:7d:40:f4:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:BE:F4:FC:E9:22:57:6B:BC:2D:25:0D:62:48:06:32:6D:C2:8C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-Vi-9PzpIldrvC0lDWJIBjJtwow.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:a9:a6:d9:50:aa:4e:3e:70:6e:ca:14:c5:52:ea:a3:78:
         4c:73:64:5a:dc:0c:e0:a2:24:f2:a4:4c:f9:72:10:99:b8:4e:
         70:82:9c:af:54:8c:30:f5:0c:d0:62:08:89:27:b1:c7:df:a9:
         67:45:ce:a0:3a:f7:a8:e5:a5:7d:45:9f:10:66:e5:84:eb:22:
         7a:98:48:53:72:40:47:5f:1a:ef:6b:51:12:4c:5a:2f:f2:96:
         7d:89:e7:f5:af:cf:a5:c4:07:01:cf:c9:49:0a:83:dc:b6:0b:
         d0:d1:5a:e2:08:31:43:43:64:fd:5d:6e:d9:13:ec:3a:ef:4d:
         65:1d:b0:d4:04:48:83:87:33:1f:7c:20:af:6b:e6:ed:14:17:
         c6:aa:46:5c:bb:79:f2:0d:93:89:bf:aa:4a:f4:ad:b7:61:42:
         4e:ae:f4:42:d4:6c:8e:7b:2a:c4:5c:ce:a6:56:b5:a2:5f:a6:
         d1:ce:d9:ab:5a:45:86:90:23:f2:15:05:f2:2b:a5:97:51:dc:
         17:b5:de:d9:5f:38:dc:ae:bd:d6:1a:69:10:04:9f:91:7f:0a:
         a6:30:26:be:d3:2e:31:ea:0a:29:76:23:59:16:87:4a:8b:f1:
         2a:84:7b:c6:3c:14:b9:17:b2:e9:a4:f1:83:07:7f:50:f3:99:
         69:19:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:33 2026 by rpki-client