Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bng7b8jaM-fEjU2HVG0JmXx6jDU.roa
File:                     Bng7b8jaM-fEjU2HVG0JmXx6jDU.roa (raw, json)
Hash identifier:          knwZcc7nIiEYe9PET2mFFpmdp9oG/u7p5RElXUbR22Q=
Subject key identifier:   06:78:3B:6F:C8:DA:33:E7:C4:8D:4D:87:54:6D:09:99:7C:7A:8C:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bng7b8jaM-fEjU2HVG0JmXx6jDU.roa
Signing time:             Sun 01 Mar 2026 03:27:57 +0000
ROA not before:           Sun 01 Mar 2026 03:27:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4860 (0x12fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:27:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=06783B6FC8DA33E7C48D4D87546D09997C7A8C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:48:5a:08:31:54:52:29:9c:11:f1:0b:0f:
                    13:68:81:4e:7e:19:f3:a2:db:7b:51:8b:62:22:df:
                    39:9e:31:93:25:dc:f6:0e:13:41:0d:a7:1c:1c:b4:
                    68:d1:b4:f5:27:db:cb:f7:81:1c:6c:d2:f0:a5:bf:
                    70:9c:45:aa:54:7d:47:01:1e:eb:dd:5a:3e:f5:51:
                    3f:14:a4:b3:a5:d8:c3:ab:2a:d4:c5:ed:cc:1c:3b:
                    62:f5:8d:16:db:9e:8b:cc:30:a6:96:22:b4:60:8e:
                    a6:b9:92:c1:af:6e:8e:04:8b:6d:ca:0f:b9:6d:23:
                    6b:4a:32:95:07:e2:90:d6:e4:25:55:d5:f7:80:92:
                    75:2d:22:57:84:39:06:3c:67:ef:06:92:e4:6b:85:
                    77:4a:20:a8:c5:48:57:80:c9:5d:ef:39:09:8d:9d:
                    9f:24:06:b0:e0:b2:68:b5:e0:a0:14:6d:5b:44:8f:
                    d3:d4:97:6f:8c:21:a9:b8:58:84:35:94:f8:c0:3e:
                    bc:1e:6f:9d:6d:0e:f5:ac:1a:93:23:be:04:d2:9e:
                    9e:42:5a:31:df:99:8a:d7:fc:07:80:b9:d0:81:4a:
                    cb:dd:af:2f:7d:b1:d9:ad:93:ce:94:90:54:6d:5a:
                    e2:c0:45:5c:ee:8e:47:65:b4:aa:f6:df:86:b4:ac:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:78:3B:6F:C8:DA:33:E7:C4:8D:4D:87:54:6D:09:99:7C:7A:8C:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bng7b8jaM-fEjU2HVG0JmXx6jDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:7f:76:fc:34:9e:3d:af:38:8a:71:be:c3:b5:46:7f:be:
         52:60:4e:12:a9:b0:b9:17:a8:0e:d5:52:58:10:1c:b3:a0:11:
         bb:dd:c6:b0:0a:2f:37:51:63:ba:70:0e:56:22:d6:49:10:44:
         36:80:53:8f:ba:ab:f2:7a:98:9a:4d:7a:c7:ff:3d:bf:55:59:
         f1:52:8d:85:eb:68:86:4a:6f:13:8d:c2:c3:b9:9c:1f:db:7a:
         08:f5:73:49:9d:af:a1:79:17:ca:01:95:79:0e:b5:b9:cf:bb:
         e4:b1:17:7a:87:23:e8:42:99:80:d9:e2:69:5f:b5:4e:8d:c8:
         ec:bf:91:0a:71:b5:11:5f:4c:92:11:ac:03:14:25:ad:5e:b2:
         e7:a0:68:ac:80:e1:43:13:81:89:0a:df:73:6d:9a:e9:7f:45:
         4d:b4:f0:04:63:93:59:d1:ef:ab:39:2c:97:bc:cb:3c:4b:60:
         aa:6b:6e:70:34:a1:d2:8a:e0:96:4f:41:a6:5d:fe:c2:4d:04:
         0e:52:3e:d6:d6:1e:b0:bc:b0:43:f3:79:51:10:d9:7c:48:15:
         0e:4e:2f:56:96:eb:60:2b:dd:e2:8c:a3:16:ab:c6:cb:8f:1c:
         97:72:be:a5:1a:66:8c:f3:c2:5f:e6:09:c1:77:fa:e6:fa:c4:
         af:2b:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:19 2026 by rpki-client