Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E7wRN6P4tIz4mu9de0bgx_SZsGw.roa
File:                     E7wRN6P4tIz4mu9de0bgx_SZsGw.roa (raw, json)
Hash identifier:          UXRSvH9iDwFZ5rVwXfGV4i5NN9Kl1krcpb4DC5jidY8=
Subject key identifier:   13:BC:11:37:A3:F8:B4:8C:F8:9A:EF:5D:7B:46:E0:C7:F4:99:B0:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1101
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E7wRN6P4tIz4mu9de0bgx_SZsGw.roa
Signing time:             Sun 01 Mar 2026 02:02:55 +0000
ROA not before:           Sun 01 Mar 2026 02:02:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4353 (0x1101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=13BC1137A3F8B48CF89AEF5D7B46E0C7F499B06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:93:ce:d0:4c:e3:6b:ba:e9:04:9b:a3:bd:
                    a3:d9:b1:57:c6:cf:c1:59:61:71:3a:35:dc:bd:1d:
                    b0:2b:48:06:17:91:b5:c5:49:8e:85:76:78:f1:8f:
                    cd:78:7c:77:b7:26:b9:85:1a:bd:bf:28:14:b9:1c:
                    3e:cf:12:6f:10:fe:64:f5:f0:0a:d1:a0:d4:d6:f5:
                    16:0a:92:ca:8a:e9:b2:7f:28:b9:2c:66:d2:5e:76:
                    b4:65:4d:8f:39:22:2d:7d:91:7b:2b:6c:ba:4e:61:
                    a7:63:22:63:c3:d6:34:eb:64:a4:6e:2f:66:14:80:
                    44:72:1d:68:06:4b:34:d0:98:b0:53:4c:67:72:ba:
                    25:4d:f6:4e:a3:a6:60:66:ae:07:5d:c1:b1:c4:0b:
                    56:7d:ff:81:62:2e:87:6c:5b:78:44:de:68:0d:fc:
                    e3:40:dd:50:47:d6:61:82:fd:c8:76:26:9d:3e:63:
                    52:fb:27:66:85:e2:b1:d5:7f:7a:97:c2:18:58:3a:
                    14:f4:89:35:60:08:e5:e0:5e:93:5a:1d:a8:ee:62:
                    5e:de:76:25:ad:b8:b2:96:03:78:e0:f2:55:e8:a3:
                    76:d3:b2:54:7b:a2:2a:2c:06:c9:33:e6:dd:3e:40:
                    8b:37:8e:23:66:0a:9b:2e:8c:dd:fb:01:aa:7c:0f:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BC:11:37:A3:F8:B4:8C:F8:9A:EF:5D:7B:46:E0:C7:F4:99:B0:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E7wRN6P4tIz4mu9de0bgx_SZsGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:a5:d5:ef:fe:0b:8f:77:24:49:98:3d:3f:9a:e0:a0:6d:
         4d:c1:26:d4:e8:e4:b3:04:12:14:19:42:a5:10:5f:7d:f8:07:
         39:d6:fd:db:77:4e:a3:17:5b:25:fa:fd:27:7d:ce:6d:fa:c3:
         82:ff:af:1a:ef:2f:36:2f:fd:96:89:bb:1b:f1:4d:82:32:52:
         b8:ff:38:61:ad:cd:90:0b:36:6c:87:82:fe:24:78:12:0e:9b:
         bd:b0:8d:0d:d4:76:bb:44:02:c4:6a:e0:61:e7:e1:c0:4d:d0:
         c2:2f:e8:2c:22:d2:87:a0:21:1f:fe:7a:37:a0:0a:80:5b:2c:
         54:a1:35:a7:ef:1b:6a:b9:3d:b5:44:3c:cc:d2:af:47:db:f4:
         b3:69:ea:d7:ab:84:aa:0e:e6:71:48:30:fa:fa:e4:85:41:c9:
         90:e1:5e:6f:05:9c:d7:f5:9c:bf:62:3f:54:39:3b:b2:76:f0:
         54:55:8a:d4:4b:87:be:dc:30:1e:e5:a2:8b:21:a7:3e:5e:a1:
         89:f1:3e:65:9d:2d:82:91:94:d7:50:ac:b3:b6:43:5d:76:f4:
         68:d5:b5:f7:01:a1:81:f5:18:39:d0:e2:2f:31:62:02:a2:e7:
         5b:44:61:a4:75:a9:1a:34:2f:4e:72:1e:63:55:da:f1:63:aa:
         62:8f:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:07 2026 by rpki-client