Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
File:                     BL070BqVVZYhwkGhPNw15gBOSio.roa (raw, json)
Hash identifier:          pNA0bycg3UiHZMztwPK7GW/hvE5gTQs0VKduJRT0Plk=
Subject key identifier:   04:BD:3B:D0:1A:95:55:96:21:C2:41:A1:3C:DC:35:E6:00:4E:4A:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
Signing time:             Sun 01 Mar 2026 01:54:44 +0000
ROA not before:           Sun 01 Mar 2026 01:54:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4301 (0x10cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:54:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=04BD3BD01A95559621C241A13CDC35E6004E4A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:ac:50:fc:58:2e:09:78:51:59:06:28:dc:
                    62:0a:0d:11:85:05:a6:1b:79:1c:5c:b3:e1:76:74:
                    4a:b7:1c:bc:cd:b1:be:0c:40:cd:c5:1a:af:63:9c:
                    7c:72:56:8f:24:e8:2a:bb:8e:97:af:d0:03:98:d1:
                    98:0b:7c:b1:50:2f:30:c3:f5:f0:42:fa:47:82:ea:
                    c5:35:d2:03:21:67:75:15:d1:d9:2a:0d:13:63:d1:
                    ae:d7:8e:c4:3b:32:68:5c:ea:33:60:c7:fd:d1:b4:
                    95:5a:00:23:8a:e8:d8:dd:67:f2:cc:2f:3f:84:a7:
                    34:5b:a3:4f:72:11:95:84:5b:03:b8:63:c6:ba:9b:
                    2a:a6:44:b8:5c:a1:ec:24:ea:75:cc:3b:21:78:06:
                    85:26:c1:4c:38:0a:9f:e7:c0:60:42:ea:fb:5b:2c:
                    ab:44:38:bf:e3:ab:d3:9a:d8:4b:1b:d5:a8:06:9f:
                    4c:ee:48:bf:b3:51:1e:e6:17:f7:ea:0a:cc:e3:88:
                    cc:90:ef:2b:e7:29:09:e5:d9:4a:09:28:33:00:d5:
                    b3:1c:7c:10:7b:18:a4:68:11:37:ae:63:4e:85:d2:
                    97:f2:20:e3:20:b3:28:09:63:1b:78:bc:08:db:b4:
                    18:bb:92:b7:73:e6:e4:72:66:21:fc:46:fe:63:6b:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:3B:D0:1A:95:55:96:21:C2:41:A1:3C:DC:35:E6:00:4E:4A:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BL070BqVVZYhwkGhPNw15gBOSio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:d5:a7:4b:d0:05:6d:8d:c0:84:d2:24:d1:ae:72:51:c1:
         9b:d9:e3:10:48:7e:d7:d4:5c:07:0b:49:04:e9:54:4b:0e:dc:
         0e:c4:fe:18:0d:52:72:3d:7d:d7:14:99:b4:b2:bf:c1:37:d3:
         4f:ae:74:0c:dc:84:f6:c4:47:65:a9:82:22:b1:46:38:f0:1c:
         a0:52:d3:2d:ad:60:b0:d8:ce:c8:c4:3c:f8:5d:65:f9:c6:26:
         1a:97:30:54:2d:dd:43:a3:2b:77:a7:84:f8:e1:32:61:4a:78:
         30:63:5b:43:75:14:9d:f5:cb:65:e4:8c:03:d0:b1:50:5f:d3:
         7e:8a:30:57:96:fe:10:d6:64:8d:52:ae:e6:3f:a2:c2:1d:d3:
         57:3b:47:a2:e6:a1:9c:70:c4:05:96:b2:32:ef:39:df:dc:d1:
         ac:27:92:71:12:37:65:ac:4f:18:f4:31:82:e3:4d:a0:10:b4:
         ac:4e:10:7f:c3:7f:0f:96:8b:8f:55:49:7d:e5:38:22:20:11:
         1d:bd:cc:cd:c7:b9:5d:7a:31:07:c6:7d:92:e1:cf:c6:d6:8a:
         97:14:d7:c9:1b:db:66:d4:02:40:85:57:b9:cf:47:d3:6b:dc:
         98:93:99:72:96:04:15:94:e2:a6:be:10:8d:ab:9b:4b:37:cc:
         9e:a8:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client