Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Egzi3UvYLsTRjOIEYa6ubPPpNNQ.roa
File:                     Egzi3UvYLsTRjOIEYa6ubPPpNNQ.roa (raw, json)
Hash identifier:          CiLbLru63fF8p70TfGJqSaiZzRhREz4QEJvpb9OSfIs=
Subject key identifier:   12:0C:E2:DD:4B:D8:2E:C4:D1:8C:E2:04:61:AE:AE:6C:F3:E9:34:D4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1202
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Egzi3UvYLsTRjOIEYa6ubPPpNNQ.roa
Signing time:             Sun 01 Mar 2026 02:48:32 +0000
ROA not before:           Sun 01 Mar 2026 02:48:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4610 (0x1202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:48:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=120CE2DD4BD82EC4D18CE20461AEAE6CF3E934D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:e5:42:b6:ed:a0:5f:e2:77:fd:ba:97:46:
                    44:51:81:e6:e9:c4:24:e3:c1:ef:bd:49:4f:eb:24:
                    9a:09:0b:b4:85:aa:b5:0b:5e:40:cb:23:e5:6a:53:
                    a1:09:3b:a4:68:f7:29:48:f7:99:1a:3d:7b:89:fe:
                    83:e7:9a:d0:59:d1:e3:4f:de:3e:6b:83:d9:85:f7:
                    c7:c0:8d:18:4a:73:5c:ee:3b:05:ef:1b:c7:d3:a4:
                    c6:30:1c:ec:8b:65:30:10:13:45:4d:9c:23:4c:e7:
                    d9:37:31:39:6c:f4:26:d7:31:45:e9:59:4e:a9:09:
                    40:fc:a8:7c:59:e1:46:47:92:98:df:e7:03:71:83:
                    82:c3:2c:56:8c:fc:5d:a0:60:49:0f:55:66:42:6b:
                    ae:e3:ab:81:d4:3f:0e:c0:11:aa:8c:e1:50:1c:2c:
                    9e:5c:70:22:fa:a3:5e:a1:6c:17:29:bd:6d:48:2f:
                    91:b6:6b:63:ba:49:73:e2:8c:eb:20:5d:39:30:62:
                    9f:bb:14:47:b5:d4:69:fb:35:c6:38:e2:97:d6:37:
                    c8:ea:06:ab:43:cf:b0:84:3b:d1:a4:40:7e:93:46:
                    4a:21:32:7a:8a:56:ef:c5:48:d4:15:3f:12:ed:9e:
                    85:07:6b:71:fb:b6:54:52:40:79:b3:1b:e2:a0:21:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:E2:DD:4B:D8:2E:C4:D1:8C:E2:04:61:AE:AE:6C:F3:E9:34:D4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Egzi3UvYLsTRjOIEYa6ubPPpNNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:8c:b5:8c:87:5c:e3:47:a0:22:a5:c3:07:d6:6c:c2:47:f6:
         c2:16:fd:1d:86:71:e9:cb:46:1f:be:ef:19:dc:ce:34:b1:b2:
         ae:9c:e0:e6:fa:d2:23:87:de:96:f9:24:2f:7f:f5:6a:7d:89:
         62:bf:0c:b2:84:8e:49:02:f4:44:54:57:ac:54:93:2f:04:79:
         09:8c:b6:d6:1c:04:40:1a:9e:de:ca:d1:2c:2b:ab:d4:c2:96:
         32:0a:5e:57:14:e5:1c:f3:68:30:eb:7e:32:e7:3a:ff:2e:b7:
         64:8a:48:58:e1:bd:74:35:b6:fd:64:01:a2:de:f0:77:8b:eb:
         59:88:d2:f6:67:da:66:4c:be:39:23:8c:0b:58:d7:36:d1:33:
         f2:c1:c1:12:aa:2a:a1:34:62:25:6e:e7:b0:99:f1:26:de:e2:
         a6:6e:9f:1b:2d:21:15:51:7d:52:d0:60:47:ab:48:6c:d6:b5:
         b6:ad:98:e3:d3:b7:67:89:4c:3d:5c:2e:cf:3f:95:eb:91:b2:
         0e:5a:2f:7e:b8:5c:87:ef:55:60:09:7d:1f:70:2d:ac:4d:31:
         26:00:20:37:1e:47:5c:d9:f9:cc:02:0b:31:0c:dd:a6:1f:20:
         ac:e2:c4:c9:aa:51:f3:a9:04:dc:65:2e:4b:2f:63:93:83:0c:
         8c:2c:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:34 2026 by rpki-client