Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0mdlF0TNHmUlYFR8qfZ_ARBk5rg.roa
File:                     0mdlF0TNHmUlYFR8qfZ_ARBk5rg.roa (raw, json)
Hash identifier:          ETwPA162qFSXVVqNlBHO9GH6t4gaPsLD49OvL/6scIw=
Subject key identifier:   D2:67:65:17:44:CD:1E:65:25:60:54:7C:A9:F6:7F:01:10:64:E6:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0mdlF0TNHmUlYFR8qfZ_ARBk5rg.roa
Signing time:             Sun 01 Mar 2026 03:12:40 +0000
ROA not before:           Sun 01 Mar 2026 03:12:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4799 (0x12bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:12:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D267651744CD1E652560547CA9F67F011064E6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:38:d6:07:58:3d:6b:3e:c9:61:3c:25:26:
                    36:a7:a4:f5:fd:76:1a:64:fc:74:b0:b7:b9:6d:d5:
                    4f:43:e9:51:23:d4:f2:84:de:22:a5:dc:22:1f:3e:
                    e3:6c:73:65:a5:dc:82:83:26:dd:f1:e2:57:37:78:
                    ab:99:cb:e3:d8:89:96:e2:2c:79:40:41:e8:1e:76:
                    09:3e:32:4f:56:09:39:61:38:68:01:45:5c:ad:e2:
                    fb:e6:9e:fa:b1:61:c9:a8:2d:36:59:10:84:bf:a8:
                    36:0d:df:cc:ba:ec:b4:60:9e:df:53:96:a4:15:6d:
                    ec:36:65:48:d3:d8:d3:82:3f:b8:1d:a3:6f:8e:49:
                    fc:6f:a0:45:de:8a:72:04:85:5f:5a:cf:12:e2:08:
                    21:67:0f:f2:fc:77:91:a0:c0:a2:ef:f7:57:0f:b3:
                    32:f7:81:e4:1d:37:39:f8:57:60:67:99:03:6e:a6:
                    12:6d:25:e3:a7:85:11:0c:aa:78:ef:d1:83:d8:c0:
                    c4:70:46:f5:c6:50:6f:68:1c:81:af:df:75:ad:29:
                    d5:de:42:4b:66:ef:d4:16:1e:a3:3c:db:40:15:b9:
                    6a:a4:1b:4c:d3:26:99:82:3b:59:ed:c7:e5:b8:34:
                    01:11:7d:6f:6e:fe:74:df:ec:83:59:f8:56:8c:80:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:65:17:44:CD:1E:65:25:60:54:7C:A9:F6:7F:01:10:64:E6:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0mdlF0TNHmUlYFR8qfZ_ARBk5rg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:f6:a8:92:f6:8a:09:01:02:cd:d4:c1:1e:90:83:2e:24:
         f3:b1:d7:ce:1a:1d:17:3b:d6:8f:a9:8f:e6:df:00:9c:1d:8a:
         56:24:57:32:3f:28:6a:b5:33:30:bc:ff:72:30:2a:c0:3a:0f:
         c1:6e:f8:4f:71:4c:ea:0b:bd:92:54:d5:ad:6b:32:6c:b1:a9:
         e6:2a:f5:cc:00:4c:01:01:26:c6:c4:2f:43:09:98:8d:c0:ff:
         a1:39:1d:31:58:56:9c:f8:b1:28:9b:7e:99:c6:6f:ff:04:e0:
         82:a3:fb:8c:6f:b4:03:57:df:4a:69:ee:93:81:7a:e9:23:6c:
         c3:30:79:db:38:2b:ec:24:d7:d1:07:83:f5:6a:cc:1c:2c:d8:
         ed:50:ad:39:10:e5:93:2e:1c:85:59:9f:13:25:08:11:c9:6c:
         cb:0f:a1:fb:37:90:3c:ee:10:8a:49:63:e6:06:d2:66:98:64:
         cd:91:de:f9:a7:99:4d:b2:37:74:46:59:43:15:01:aa:d4:cd:
         f0:3a:cd:8c:3c:89:e5:0b:89:4a:16:06:f9:a0:52:80:89:10:
         d9:06:b9:6f:88:1c:34:28:eb:05:5f:f2:9c:d9:1b:44:a7:06:
         c8:65:3a:29:b3:6a:a8:0b:84:b2:01:18:55:11:31:86:6f:08:
         c9:59:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:17 2026 by rpki-client