Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uUvzoc9_UYMZdLThOQs4iO5BI4.roa
File:                     8uUvzoc9_UYMZdLThOQs4iO5BI4.roa (raw, json)
Hash identifier:          KLM6xJo1DH/eqo+94Hk/7QNxizD/yUYhr6GSprSZhIo=
Subject key identifier:   F2:E5:2F:CE:87:3D:FD:46:0C:65:D2:D3:84:E4:2C:E2:23:B9:04:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1097
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uUvzoc9_UYMZdLThOQs4iO5BI4.roa
Signing time:             Sun 01 Mar 2026 01:44:42 +0000
ROA not before:           Sun 01 Mar 2026 01:44:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4247 (0x1097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F2E52FCE873DFD460C65D2D384E42CE223B9048E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:b2:94:b6:48:e4:71:74:2c:0b:47:ac:d6:
                    21:c4:5b:c9:44:ee:75:6f:17:c9:3b:ad:18:17:7e:
                    47:94:b6:b8:ba:35:99:47:50:ab:f9:71:0c:31:b7:
                    f6:6e:46:12:d4:7f:2a:ac:be:c4:c5:65:0f:73:ed:
                    16:a9:fc:e9:12:ce:07:de:70:f0:30:e2:3f:6e:13:
                    7d:84:57:e0:a5:65:2e:27:b9:d4:c6:9c:93:4f:9c:
                    70:0d:e5:ea:f5:75:6a:4e:f7:8b:8c:63:95:e1:c3:
                    a9:86:8b:60:dd:ed:58:01:ff:ea:3f:c1:40:c0:24:
                    f5:d9:28:ab:a5:bc:8c:01:7e:2d:0a:56:9e:00:e5:
                    cb:55:8e:7e:4d:c0:cf:23:c8:1e:ee:99:71:d0:c8:
                    0c:39:71:29:26:b7:ed:a7:41:fd:5a:cc:75:5d:44:
                    5f:2a:aa:14:7a:e1:4b:23:98:0b:b5:99:19:d8:d6:
                    ef:e6:39:0e:72:54:1c:5e:a5:d1:3f:13:88:be:33:
                    0d:20:02:a0:e7:83:5c:fd:df:0d:86:5c:22:8a:03:
                    81:03:d1:98:b5:27:bb:73:19:99:97:36:57:a6:af:
                    7c:38:42:53:0f:77:7e:3e:c8:30:ff:c4:f2:fb:ba:
                    bb:4f:03:65:11:42:b3:7a:9a:b7:07:9b:28:b9:6e:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E5:2F:CE:87:3D:FD:46:0C:65:D2:D3:84:E4:2C:E2:23:B9:04:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8uUvzoc9_UYMZdLThOQs4iO5BI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:10:11:ba:ea:2a:8e:bc:08:55:43:cf:4f:eb:0b:62:f8:2c:
         96:48:85:81:ce:eb:27:9d:dd:7f:1e:c5:53:f6:3f:a8:48:48:
         25:32:1c:5b:0f:9a:6c:da:11:dd:f8:7e:94:85:9c:13:1b:3e:
         1e:e9:b7:c4:09:d6:50:35:40:c2:58:ad:b9:7f:c4:35:a2:f6:
         0e:d6:c8:86:e0:ba:71:78:ea:e2:48:4a:1b:7e:8e:99:85:3c:
         4e:d2:95:81:60:98:5b:d7:0b:9a:4f:6f:64:64:6c:a7:2b:c5:
         28:b4:bb:e6:29:7a:2c:03:06:e3:87:58:f6:e4:0b:0a:33:b1:
         e0:3f:2c:47:e6:77:22:24:37:06:7f:3f:b8:26:87:c4:dd:89:
         bc:8d:72:b9:01:c2:64:97:d1:8d:ff:48:a4:d7:de:00:95:31:
         a7:0c:c2:48:1c:70:06:a2:a1:65:20:7d:2a:91:1b:5a:c2:29:
         f7:e1:21:41:7a:40:90:b8:c6:87:87:4e:10:0b:e4:eb:a3:1b:
         b4:a3:fc:8b:db:3b:53:db:18:f1:7e:7f:20:57:cf:80:39:4e:
         a4:13:03:74:7a:30:de:e7:93:71:b9:3f:ca:9b:78:69:85:f6:
         69:56:08:c0:f0:ef:f0:42:f3:28:0b:14:21:0b:18:5a:cf:31:
         8f:da:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:58:26 2026 by rpki-client