Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
File:                     03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa (raw, json)
Hash identifier:          UE5YVBvIoXDpACNU+FYdSs1OBezFz3LFE0MSWX260Gg=
Subject key identifier:   D3:78:DB:54:4E:EB:D6:34:FC:85:44:3B:63:D5:5B:8D:90:2D:80:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       133D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
Signing time:             Sun 01 Mar 2026 03:40:35 +0000
ROA not before:           Sun 01 Mar 2026 03:40:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4925 (0x133d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:40:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D378DB544EEBD634FC85443B63D55B8D902D809E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:8c:87:34:68:2b:ee:7d:86:5e:95:43:73:
                    f9:e7:8f:fe:10:56:8f:d1:de:f3:28:f8:62:65:0b:
                    5e:54:40:d0:ec:68:42:67:3b:52:59:f7:25:05:6a:
                    7a:99:04:73:51:09:c2:c3:c4:b2:a4:24:51:38:a0:
                    7d:8b:7d:2a:21:8a:84:3c:58:6b:84:42:66:b5:fe:
                    b1:c3:e5:36:15:51:bd:e4:fc:ea:51:8a:27:08:91:
                    22:bf:77:3f:4e:ef:99:ca:2f:60:8c:a5:2d:88:94:
                    b5:fb:95:a8:86:ac:ab:d4:f1:7d:ef:bf:dd:cc:ea:
                    75:32:c2:b2:6d:3d:b4:7b:29:3a:05:86:f3:f6:5d:
                    3a:b9:ce:ec:e7:e4:a5:8e:ba:03:3e:32:27:86:cc:
                    2c:29:ed:39:b0:d8:ec:6b:a4:4c:49:f6:04:e4:eb:
                    33:fb:ea:2e:3a:8a:1b:36:b5:a8:d6:36:46:80:8f:
                    fa:8a:a3:10:f4:db:e4:53:94:fb:b7:db:81:a2:e2:
                    0f:f5:6c:1a:dc:79:b6:f0:f4:fd:b7:13:1e:73:2b:
                    f6:74:d2:f1:6c:6d:bc:75:be:d6:d0:ba:1d:b8:4b:
                    68:2b:96:57:24:d7:3e:c9:6a:7b:8d:c0:02:6a:ff:
                    7b:a8:e3:8e:24:d7:47:48:9a:59:b8:af:33:64:1f:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:78:DB:54:4E:EB:D6:34:FC:85:44:3B:63:D5:5B:8D:90:2D:80:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/03jbVE7r1jT8hUQ7Y9VbjZAtgJ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:87:ec:7b:af:b6:06:5e:a6:3a:4b:4f:c0:d7:57:2a:75:
         37:0e:41:0c:d3:5e:01:d4:c7:a7:ed:1c:d9:60:57:17:1f:6a:
         9b:23:db:75:ec:c5:77:e8:7a:85:e1:69:ee:15:5c:25:41:eb:
         23:4b:90:da:40:21:23:6a:c2:a4:27:2f:5d:5e:98:21:86:23:
         79:28:bf:bc:cc:f0:f4:25:f4:cf:ea:f3:6f:2f:af:57:67:c1:
         c2:4b:ca:0b:42:10:7a:86:5e:83:8a:8e:7a:49:18:af:72:9c:
         15:d0:19:24:84:70:f4:ae:22:4a:79:52:ac:ad:e6:e9:d8:5a:
         db:41:01:47:b0:c1:7b:94:17:84:aa:43:55:58:c0:ef:68:df:
         af:46:e5:8a:3b:3a:21:55:44:1b:39:d3:fd:31:81:5a:37:53:
         78:b9:21:b5:9c:72:56:6e:77:ad:fc:07:44:68:51:f6:1c:68:
         75:e0:5a:6c:b9:3f:f0:a4:74:ed:7c:bf:7a:6c:5d:9d:e1:ca:
         d0:f4:85:52:1f:c8:3e:9b:13:4a:f3:f5:93:9f:4e:d7:59:0c:
         f6:de:52:7e:14:aa:44:8a:e3:2d:ea:6d:4e:99:5e:f0:3e:35:
         60:91:3c:ef:fc:c3:b1:7f:23:3e:25:2c:2c:ce:b9:64:55:55:
         ab:75:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:34 2026 by rpki-client