Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
File:                     K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa (raw, json)
Hash identifier:          3puPevPH61Bb8qEy3AgeJbJLimvaE1veAjjDpQcR1O0=
Subject key identifier:   2B:40:9E:83:4F:43:13:78:5D:FA:B4:2B:B0:C8:42:54:3A:A3:88:68
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       130E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
Signing time:             Sun 01 Mar 2026 03:32:28 +0000
ROA not before:           Sun 01 Mar 2026 03:32:28 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4878 (0x130e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:28 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2B409E834F4313785DFAB42BB0C842543AA38868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:8a:72:7c:02:9d:6f:53:60:12:30:25:37:
                    7c:e7:07:87:25:10:5b:23:22:42:a4:f5:f9:71:a7:
                    94:6d:6f:0c:03:b9:f8:77:43:a8:12:47:a3:41:43:
                    9c:07:f6:a5:89:bf:3c:17:3f:c2:9b:38:ce:d5:3f:
                    cd:37:9e:5d:66:4c:a1:be:a5:a9:d4:eb:32:5d:44:
                    4c:cf:77:5f:6f:59:20:1c:ea:3f:bb:85:db:04:4c:
                    5c:fc:e3:21:a1:d0:87:e6:87:ba:89:27:4b:51:77:
                    74:e4:78:ed:d6:8d:d4:dd:10:f1:4b:c5:2f:31:17:
                    a5:20:3e:8e:73:d1:e0:ff:eb:9d:5a:c5:5f:fa:84:
                    f1:e1:16:59:0c:52:9b:b9:1b:ee:dc:05:db:c9:2c:
                    32:bd:9d:d7:1e:9e:57:28:55:4e:54:0f:63:30:ea:
                    5e:d7:00:16:d3:cf:14:bb:0c:84:b7:d8:1d:68:8a:
                    3f:a3:75:ed:18:d3:50:9b:a1:47:38:67:0e:d7:e8:
                    58:ac:27:23:a3:68:2b:2a:f3:ef:58:f6:29:07:92:
                    ba:1e:24:7b:f0:d4:4a:b6:97:96:5e:20:2a:ac:7d:
                    49:25:18:7b:7d:6c:d2:4a:d4:85:55:c3:ed:b7:68:
                    5d:e7:c0:54:f5:f0:04:d1:d4:32:44:de:f9:6d:40:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:40:9E:83:4F:43:13:78:5D:FA:B4:2B:B0:C8:42:54:3A:A3:88:68
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K0Ceg09DE3hd-rQrsMhCVDqjiGg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:c2:7b:ee:a2:68:ea:17:2f:26:96:ac:92:ab:27:38:7e:
         69:88:35:eb:66:15:6e:df:2c:1e:b7:11:f1:90:ab:9b:75:39:
         52:9e:70:c5:0e:e4:0d:fd:d7:8b:26:1d:45:7d:85:ea:4a:30:
         8d:8d:fa:a9:92:7c:50:e5:7d:6d:25:32:ab:da:24:f1:46:c0:
         de:bc:ac:8b:6e:b1:dd:89:31:e4:7e:ce:2b:bd:ee:d4:50:59:
         f6:f6:2f:e5:f4:4a:75:47:99:47:18:92:3f:55:27:8d:24:7d:
         59:57:71:a9:0e:77:27:94:a6:48:81:89:83:32:23:2a:3f:f5:
         09:80:92:31:a1:99:70:a6:8d:9a:b9:80:11:a5:3e:d3:cb:05:
         a8:79:5b:fe:d7:00:f5:e2:68:91:ba:1a:11:da:ad:87:6f:b9:
         88:fb:64:e5:e2:59:28:fd:33:25:0e:ed:95:05:1b:ec:a1:26:
         da:46:6b:15:6e:da:ea:cb:fb:d2:cb:7c:4e:9d:80:35:89:60:
         4f:41:b2:e7:35:0a:66:81:18:d7:a7:8d:8c:bd:a7:29:47:09:
         c8:17:ae:b7:cf:dc:08:8a:38:82:5f:82:a3:87:ff:91:d9:42:
         2d:fb:51:83:dd:64:1f:22:fe:8b:3f:0a:e6:f9:b7:db:87:13:
         47:78:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:06 2026 by rpki-client