Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVTUoHAYmFgf8ZLiC9ShF2fp40w.roa
File:                     AVTUoHAYmFgf8ZLiC9ShF2fp40w.roa (raw, json)
Hash identifier:          nPD08j3U7L/562WIPXBCPNy+VZMzyeOVZUw2uCk0ZXc=
Subject key identifier:   01:54:D4:A0:70:18:98:58:1F:F1:92:E2:0B:D4:A1:17:67:E9:E3:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1102
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVTUoHAYmFgf8ZLiC9ShF2fp40w.roa
Signing time:             Sun 01 Mar 2026 02:02:56 +0000
ROA not before:           Sun 01 Mar 2026 02:02:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4354 (0x1102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0154D4A0701898581FF192E20BD4A11767E9E34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:c2:93:e8:25:17:61:80:76:54:b8:de:f0:
                    2f:bf:13:87:a7:f0:91:4e:ea:1f:47:40:6e:35:d1:
                    ed:aa:a6:0b:3e:52:1b:9b:c5:ac:25:04:07:66:04:
                    a3:18:05:8d:bb:db:6a:78:03:34:c4:fd:a0:f9:ba:
                    e6:51:03:80:ca:8a:86:d7:b4:b3:a5:8b:1b:61:05:
                    10:d6:a0:29:16:71:3d:c4:df:43:ca:24:f0:5c:3d:
                    58:a1:9b:c4:dd:1a:ae:ac:c4:cd:82:7d:1e:8f:f4:
                    24:7f:3d:fd:5b:df:73:b9:71:4c:c0:c0:af:03:56:
                    66:8e:69:87:2b:f8:fc:f7:42:e1:f9:82:8b:e8:f4:
                    82:89:ac:4d:74:0f:23:a8:cb:e8:ef:4c:11:43:8d:
                    51:8e:75:d1:32:84:c2:cc:b2:bc:c7:59:0f:f0:55:
                    5a:ed:2b:94:c8:97:9c:6a:57:4f:f7:3e:19:2e:5f:
                    e9:79:18:d6:b7:b8:27:fe:b3:27:58:5a:c4:1e:58:
                    ac:d7:a5:93:ea:b6:37:41:60:47:45:63:10:74:c0:
                    fb:8b:ef:eb:c1:13:33:0d:18:85:b0:44:b1:c1:4d:
                    11:6f:01:4b:69:c4:af:49:0c:b2:30:2d:d9:7c:b3:
                    b2:ca:68:a7:b3:bd:34:f4:10:2a:15:d2:7e:56:eb:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:54:D4:A0:70:18:98:58:1F:F1:92:E2:0B:D4:A1:17:67:E9:E3:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVTUoHAYmFgf8ZLiC9ShF2fp40w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:d7:c6:ad:1f:14:af:92:5d:f3:a0:bd:26:d6:2a:3c:61:1f:
         65:9a:53:8c:cc:ac:f1:c0:cb:ee:2b:5d:83:b4:06:58:31:e6:
         a9:50:0e:4f:91:c7:a8:d5:91:34:5b:87:11:ca:9f:32:08:5b:
         c1:d9:58:4c:f6:60:63:71:7b:a0:a6:64:34:b8:55:a2:2b:cd:
         18:c7:4c:4f:c3:7a:65:f8:3b:83:14:33:b6:14:4e:84:53:18:
         58:e2:73:e3:ff:1c:a9:68:17:2f:77:6b:47:ce:ad:cd:79:89:
         29:3d:bb:56:84:b8:26:0d:36:a3:93:d8:b7:ef:e8:df:a7:98:
         30:6a:24:90:f4:49:1f:de:77:d5:c3:d5:56:c9:c4:f6:83:02:
         59:e4:ee:a3:e8:2f:78:1e:04:e6:46:04:06:c0:cb:2c:39:a8:
         b9:5e:e7:4b:aa:12:c3:fb:b3:6c:d9:c6:c1:e7:03:5d:13:9d:
         30:af:bd:3b:57:64:f5:f2:b5:d0:a2:68:81:74:89:cc:52:f0:
         be:32:7c:df:cb:21:12:5d:39:cb:aa:f2:f9:a0:a0:8c:1f:bb:
         47:aa:3a:fb:24:ae:35:d4:64:b6:d6:39:f0:03:e4:f9:87:0d:
         d0:b5:2c:0e:95:48:a3:b3:02:d5:48:f2:64:15:dd:be:91:fc:
         0a:ee:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:11 2026 by rpki-client