Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6SQLTPaiRP6e3EB91BHlh41blhM.roa
File:                     6SQLTPaiRP6e3EB91BHlh41blhM.roa (raw, json)
Hash identifier:          or+3k3SeRFgGQatnuL07Rj/vjaCd5KzEumCPD3k+bqE=
Subject key identifier:   E9:24:0B:4C:F6:A2:44:FE:9E:DC:40:7D:D4:11:E5:87:8D:5B:96:13
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11AA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6SQLTPaiRP6e3EB91BHlh41blhM.roa
Signing time:             Sun 01 Mar 2026 02:31:23 +0000
ROA not before:           Sun 01 Mar 2026 02:31:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E9240B4CF6A244FE9EDC407DD411E5878D5B9613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:a8:33:bb:fe:a2:b6:ad:2e:9b:d3:c6:65:
                    a5:6d:ce:40:55:99:f7:0f:8b:7d:4c:57:28:c5:50:
                    81:21:8c:82:11:9d:b2:2a:2b:a0:f7:5d:65:ed:94:
                    8c:f5:0e:34:3d:91:68:2e:bf:98:55:07:bd:4b:e9:
                    c0:6e:c6:87:6d:33:f4:47:90:c2:24:1b:fd:5b:79:
                    5c:f5:06:25:48:e1:10:c5:eb:d1:4f:78:02:88:4d:
                    ac:47:c2:98:7d:a7:e5:ac:86:a5:15:75:ef:a7:cc:
                    68:5a:4b:b2:fa:1d:82:bc:0f:1e:72:29:b1:d2:30:
                    7f:cd:40:e1:5c:16:d4:c6:18:04:7e:5f:4d:24:3b:
                    e4:16:4a:14:61:02:93:e3:3c:60:f0:ed:92:3b:22:
                    c2:86:e7:1e:9d:21:24:df:fc:73:ed:3b:d4:cb:3b:
                    dc:25:e8:30:f6:af:74:19:74:56:7a:74:c6:48:b1:
                    8a:d1:82:d4:b4:b4:a6:e5:b6:d2:b6:f1:d4:ee:38:
                    d1:47:5c:58:82:96:46:55:c6:2a:3d:98:6f:fb:dc:
                    69:80:df:ac:ca:7b:59:d7:fa:ed:a9:82:e7:9f:1c:
                    3b:f1:80:7f:3c:b7:d1:81:76:b6:1c:86:c4:4d:f7:
                    43:e6:18:50:56:72:11:94:37:24:22:0c:36:b6:7c:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:0B:4C:F6:A2:44:FE:9E:DC:40:7D:D4:11:E5:87:8D:5B:96:13
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6SQLTPaiRP6e3EB91BHlh41blhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:01:b8:84:62:29:a6:40:26:ad:70:06:65:1b:9b:6c:a3:27:
         74:84:92:48:ad:c3:66:1f:7f:aa:a0:9d:2f:f1:60:f7:16:f0:
         4b:e7:eb:87:14:45:d6:b8:7a:14:09:07:40:bd:47:0c:4a:fb:
         05:d6:45:4d:01:9d:7b:d3:21:ed:08:5c:c9:07:fb:42:59:fb:
         7f:72:d3:17:d6:07:84:38:3c:e6:3a:f0:f4:dc:f0:f4:86:1e:
         62:ca:e2:60:52:f7:95:ae:aa:f4:9f:d6:a0:18:02:f2:ce:82:
         d0:18:33:e6:7c:0f:9a:4f:a3:fe:d9:b8:89:f8:cb:42:97:65:
         a9:59:e6:f9:17:52:4d:d7:6c:a1:d7:f1:48:87:de:7b:19:74:
         c7:e9:5f:c9:c7:f0:3f:af:80:2a:8b:93:8a:1c:9c:2e:dc:4a:
         d6:85:80:51:ce:31:ce:48:a4:9c:02:90:bb:47:b6:fa:9c:21:
         85:85:28:ea:e1:f8:40:55:92:1f:0b:52:70:5c:88:82:37:58:
         67:a2:e0:79:e9:5f:39:ff:f5:f0:cf:37:d9:c2:80:f5:fa:4a:
         1a:01:91:71:e2:8f:1a:e2:17:bd:4b:a6:5c:07:36:1e:14:51:
         bc:2b:6c:90:03:0a:95:76:28:98:3d:ce:9a:fe:91:34:56:65:
         dc:25:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:27 2026 by rpki-client