Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-W-dmzIpR_mCcbAm38zTHk9lstA.roa
File:                     -W-dmzIpR_mCcbAm38zTHk9lstA.roa (raw, json)
Hash identifier:          biKD6T1TjU2/F2AlQMc2GKtOgGcoPw+uferczPNBh68=
Subject key identifier:   F9:6F:9D:9B:32:29:47:F9:82:71:B0:26:DF:CC:D3:1E:4F:65:B2:D0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1251
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-W-dmzIpR_mCcbAm38zTHk9lstA.roa
Signing time:             Sun 01 Mar 2026 02:56:42 +0000
ROA not before:           Sun 01 Mar 2026 02:56:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4689 (0x1251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F96F9D9B322947F98271B026DFCCD31E4F65B2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:05:fc:01:db:1a:d7:e6:86:65:86:4f:ea:
                    e9:86:b6:d0:09:c7:1d:1a:ad:97:db:72:c8:6d:b2:
                    7f:c9:0d:ae:59:fb:3c:b5:3d:a6:f8:0d:0a:38:ea:
                    73:75:f8:6c:e9:0a:48:fa:98:04:23:8e:45:93:50:
                    66:bf:4c:ec:c8:71:13:d7:31:23:7e:95:10:fa:6c:
                    f9:97:94:74:79:14:e9:ba:76:2f:a9:72:40:f7:63:
                    ed:89:d8:8c:74:2b:b8:94:42:94:d9:c4:f1:ba:ff:
                    1e:3a:87:55:83:72:11:10:1b:18:11:00:96:ab:22:
                    b3:0d:d0:d0:24:dc:af:15:8b:1a:d5:d4:ed:de:b3:
                    cc:ce:a0:c9:59:3d:ee:37:19:29:ff:1d:b5:d1:63:
                    66:12:06:62:08:10:cd:4d:9b:68:e2:0c:b7:ef:dd:
                    87:9e:b9:9b:65:96:e8:ae:0d:90:cd:58:6e:15:ba:
                    e9:07:6e:fd:6e:cf:b7:70:52:2c:f1:1e:05:52:ea:
                    22:55:00:02:e7:b8:1e:bc:c9:38:3f:ef:0c:43:21:
                    3a:14:33:5e:7a:07:40:09:c3:f1:30:63:cf:0e:bd:
                    cc:40:66:84:5e:52:78:bc:74:56:ab:ca:03:3d:4c:
                    0d:af:34:f5:9c:76:08:e8:55:34:ce:a6:83:9e:a4:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6F:9D:9B:32:29:47:F9:82:71:B0:26:DF:CC:D3:1E:4F:65:B2:D0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-W-dmzIpR_mCcbAm38zTHk9lstA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:84:78:e1:72:3c:cc:4b:a9:ae:0c:3c:89:c3:cc:4a:53:c8:
         9a:c8:f7:b8:a2:5f:ac:63:02:3f:c0:8d:18:0e:6b:c2:54:45:
         8c:15:f9:0d:b1:b0:8c:e7:58:82:82:95:71:6e:84:e6:f9:29:
         75:c7:19:ab:be:77:29:51:9c:8b:3e:55:2e:9c:7a:f6:b6:1e:
         99:2f:e4:fa:f9:d4:08:cf:d6:41:80:dc:8f:74:dc:ed:2f:62:
         03:4c:82:66:64:c0:c6:fa:0c:5f:69:29:5b:fb:cc:52:7e:0c:
         6c:d1:29:4f:f5:db:ed:5d:d5:e9:de:28:1b:b1:96:c3:4c:7a:
         e4:84:5f:61:e9:d8:7c:a6:ce:6c:0b:fc:88:4a:84:ea:00:8d:
         28:86:e2:e6:a7:c9:c3:f4:1f:b3:bf:d5:9c:4c:51:5a:07:9e:
         e8:f4:07:ca:68:9b:82:c1:e5:ab:52:cc:54:1d:4d:32:78:f1:
         b4:8e:8c:b4:0d:ef:05:04:91:4b:8b:51:9f:52:9a:c8:01:56:
         a4:78:e7:15:18:6b:09:55:80:25:15:36:91:25:c6:ba:10:e0:
         94:47:27:f7:8a:d7:b8:97:f8:ec:06:ca:2a:c7:9d:a7:12:75:
         1b:86:29:e9:d1:f6:7c:60:b1:35:d7:3c:0d:92:e6:09:91:ba:
         30:11:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:46 2026 by rpki-client