Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
File:                     DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa (raw, json)
Hash identifier:          leaWGVf36zaxrjfA8Yq1zUmbNrJNqZDIN/9kDSea5RI=
Subject key identifier:   0E:4B:10:92:F5:24:0E:B4:37:7A:3F:00:83:76:97:B6:9B:CA:82:77
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1332
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
Signing time:             Sun 01 Mar 2026 03:36:25 +0000
ROA not before:           Sun 01 Mar 2026 03:36:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4914 (0x1332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0E4B1092F5240EB4377A3F00837697B69BCA8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2b:45:6d:28:28:ba:ab:66:8d:40:e3:ff:ae:
                    87:0e:ff:68:6a:74:e0:b2:15:c1:69:4a:1d:34:7a:
                    60:8a:c3:74:f3:a8:59:bf:89:0f:98:80:e5:cf:81:
                    c5:c1:4e:7f:54:c0:fe:fb:41:99:3e:ed:28:83:14:
                    24:3f:2a:99:c9:01:6a:89:83:c4:6b:6e:d3:99:92:
                    39:25:77:fa:cc:e8:2a:ef:13:93:83:ea:c1:81:8e:
                    a3:4e:f7:53:bf:51:d5:ec:7c:3c:a9:6c:fe:d9:f7:
                    89:3a:52:69:ef:d1:f9:87:70:72:2e:0a:d9:9a:5a:
                    f0:ec:7c:c7:3b:88:3a:43:01:f2:1d:06:2a:a7:d8:
                    99:f6:58:03:b7:0c:a1:14:f4:09:fb:0d:5a:47:0d:
                    69:7a:91:f5:8e:fc:9a:f4:7a:61:cc:64:fb:cc:af:
                    67:16:46:d7:10:f7:96:0f:f6:5a:fc:48:5d:a2:f0:
                    5a:15:37:67:10:04:1a:e1:26:39:7e:8a:45:62:80:
                    3a:62:98:f8:95:a7:76:69:73:90:3f:bf:5b:13:f8:
                    9c:e1:2c:9e:2f:82:52:07:d7:ed:a7:2b:66:9c:63:
                    6b:94:60:db:07:87:36:13:1b:e9:a0:97:c7:72:1f:
                    aa:64:a2:20:85:bb:26:75:33:ce:b8:24:92:0a:d3:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:10:92:F5:24:0E:B4:37:7A:3F:00:83:76:97:B6:9B:CA:82:77
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DksQkvUkDrQ3ej8Ag3aXtpvKgnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:15:be:e1:78:1f:7a:85:ef:3f:cd:25:83:b8:ff:16:5d:1d:
         1f:47:cd:6f:b2:8d:b2:87:af:24:f3:6b:96:f9:ac:34:70:7b:
         7d:43:26:87:d4:a7:7e:8d:61:94:c1:17:0c:ea:d6:62:18:c7:
         d3:84:0a:58:75:69:d6:16:41:40:83:a5:f7:ba:93:bb:40:2b:
         d2:bf:c4:64:f8:d9:9d:49:ab:bd:ad:99:6c:26:73:84:33:96:
         64:47:2c:48:f3:47:64:82:88:89:19:e7:59:b1:4d:87:06:dc:
         2a:cb:1c:72:2e:87:ee:2b:87:64:11:cf:43:d4:47:a2:af:9a:
         24:3a:78:b6:b0:14:93:fb:40:f5:52:a1:d6:5a:3f:e3:e8:a2:
         2e:c4:4d:83:56:51:6d:ef:68:82:96:e2:5d:1b:cd:53:38:db:
         b2:d3:18:a3:99:6c:79:7b:36:68:6b:af:a3:6b:14:55:59:7d:
         14:6f:e5:6c:f4:35:cb:33:82:31:95:15:f4:d2:c6:76:52:42:
         63:de:77:4f:02:0d:b1:59:5d:12:02:b9:8e:d4:59:09:e9:69:
         c7:2e:a6:00:ee:e7:9d:f5:71:1a:8c:9d:61:1c:4e:6f:72:12:
         5c:15:34:c3:7e:5a:9f:bf:9b:40:82:85:fd:cc:cc:0c:dc:9a:
         cd:05:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:08 2026 by rpki-client