Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A47QKllRQrcGVv2d7i5SY96quNk.roa
File:                     A47QKllRQrcGVv2d7i5SY96quNk.roa (raw, json)
Hash identifier:          RYsvRO8CFL9NvLZkLzZAtL7stQeVKSbiUi1mkelYAo0=
Subject key identifier:   03:8E:D0:2A:59:51:42:B7:06:56:FD:9D:EE:2E:52:63:DE:AA:B8:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       121D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A47QKllRQrcGVv2d7i5SY96quNk.roa
Signing time:             Sun 01 Mar 2026 02:52:19 +0000
ROA not before:           Sun 01 Mar 2026 02:52:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4637 (0x121d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:52:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=038ED02A595142B70656FD9DEE2E5263DEAAB8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:7f:92:2c:a9:57:31:26:3c:02:39:00:88:
                    2c:22:3e:2e:02:58:a2:7f:c1:d4:92:91:2e:6a:a4:
                    70:be:84:cf:23:c0:58:66:c5:2e:af:70:e0:d3:49:
                    06:77:12:da:6a:4e:a1:5a:32:8b:d6:fb:ac:44:86:
                    93:0b:d0:b5:56:89:50:c2:ad:ee:98:90:37:85:c4:
                    e0:0a:8a:2c:44:c8:8d:dd:44:b9:35:64:af:59:a5:
                    4f:d4:89:21:ff:64:a6:fe:f1:6f:56:8c:b2:b4:05:
                    e7:a2:8b:26:d0:fb:43:67:27:15:18:94:42:96:76:
                    80:28:ac:a1:80:95:15:d9:08:a4:d3:8e:32:31:a0:
                    69:9d:97:35:05:74:72:7f:7e:0c:c2:05:3b:67:bd:
                    cf:08:d5:7a:7d:92:16:49:11:90:57:50:36:4f:4a:
                    52:92:f7:00:da:d9:5a:e2:ff:8b:70:f8:a4:cd:18:
                    e1:92:ed:5f:fc:6e:b9:a6:83:d4:ba:24:ca:4c:7c:
                    79:26:05:25:57:b4:57:db:38:0c:2d:28:d0:1f:97:
                    0f:d9:e5:c6:fe:04:44:18:33:3f:5b:f4:f0:ed:aa:
                    6f:40:ae:a8:ac:4a:1e:d5:b8:5a:4b:74:fd:29:6d:
                    fc:a3:82:a0:43:d5:50:9a:32:9c:a5:e9:bb:50:53:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8E:D0:2A:59:51:42:B7:06:56:FD:9D:EE:2E:52:63:DE:AA:B8:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A47QKllRQrcGVv2d7i5SY96quNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:e9:93:2d:f3:2d:b4:f7:9e:0c:9a:ad:13:1e:44:b1:66:c1:
         27:3f:dd:0e:7b:a6:31:e5:50:3f:86:a5:b4:95:aa:76:53:b8:
         3d:b3:90:cb:80:f6:0d:0a:f8:bd:b4:e7:98:a7:4a:59:30:20:
         18:bb:95:47:9e:c6:84:30:b0:d0:46:1e:45:0e:b5:bf:c9:be:
         6d:e6:b4:13:da:67:70:a3:8a:d0:d6:91:35:72:42:01:22:b5:
         58:f0:76:07:03:89:50:55:10:cb:3b:da:fb:4a:ad:70:05:11:
         fc:87:b3:f5:f6:da:98:95:af:1c:2f:dc:5a:54:0d:e1:f2:c6:
         f6:f5:d2:64:2a:97:ba:3f:49:66:fa:f8:a7:cb:57:a4:40:d9:
         5e:f9:69:a3:5e:28:5c:1e:89:90:be:58:89:84:38:1c:58:1e:
         29:47:be:81:e6:2b:fe:ef:be:36:c7:cd:9a:bc:a9:e6:18:4f:
         06:59:66:94:9a:51:50:d2:9d:39:d6:f9:d6:10:18:54:a6:89:
         33:97:07:66:88:02:ea:75:19:1f:4f:e4:ad:d0:7a:af:85:8d:
         4b:f9:9f:ff:17:24:88:e4:43:0c:d6:0e:2c:a0:ef:73:7c:f4:
         04:cc:0b:d5:c1:2e:37:7d:cd:ec:fa:b1:6c:02:41:3f:65:1f:
         f1:85:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:33 2026 by rpki-client