Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KgRnwGA7qjV4YAnCHJmFg0-cgvI.roa
File:                     KgRnwGA7qjV4YAnCHJmFg0-cgvI.roa (raw, json)
Hash identifier:          laiqd/zZxcG6bcZtKT9lEEHOx6I3AAdYJR3/tJETbT8=
Subject key identifier:   2A:04:67:C0:60:3B:AA:35:78:60:09:C2:1C:99:85:83:4F:9C:82:F2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KgRnwGA7qjV4YAnCHJmFg0-cgvI.roa
Signing time:             Sun 01 Mar 2026 01:58:50 +0000
ROA not before:           Sun 01 Mar 2026 01:58:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4345 (0x10f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:58:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2A0467C0603BAA35786009C21C9985834F9C82F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:b0:d9:2c:ba:e7:dd:12:ae:a7:d6:6d:6e:
                    19:a9:08:6d:6a:10:f2:18:ee:d2:24:dc:ef:67:79:
                    25:7f:26:4e:2f:8a:90:da:c9:2a:ce:7e:9b:a8:68:
                    15:0a:45:f7:be:92:13:70:bb:7d:34:d0:98:24:5d:
                    d0:83:2b:42:5f:c0:27:87:01:c8:b7:4c:db:c6:69:
                    81:b2:a9:87:3c:e3:fb:91:fe:8f:89:ec:70:c4:52:
                    ce:86:ed:0d:e2:44:54:95:6e:ff:f1:6a:c4:dc:c7:
                    f2:c9:49:6e:c0:d3:73:5b:de:b1:f3:1c:d6:a8:a9:
                    45:7a:70:ea:68:40:9b:dd:e9:fa:d0:82:14:06:34:
                    03:d1:80:7e:4e:53:bd:c3:5a:26:d0:ac:08:b6:59:
                    d3:d2:ec:1d:b5:26:63:13:af:fe:8d:8e:4b:b8:c2:
                    65:3f:8e:f0:e6:90:79:fe:d3:61:88:14:4c:16:da:
                    8a:05:36:17:7c:cd:4e:5b:e1:5f:ad:0a:48:80:35:
                    63:a6:fb:7f:6b:0a:1d:43:ea:02:61:8c:99:ed:5a:
                    56:37:48:10:1a:25:31:29:34:5b:56:8a:29:e8:f6:
                    09:6b:9b:77:09:c2:0f:06:25:58:c8:83:99:08:30:
                    13:4e:0b:42:ef:a9:64:3c:1d:c4:a4:db:9c:3a:c6:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:04:67:C0:60:3B:AA:35:78:60:09:C2:1C:99:85:83:4F:9C:82:F2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KgRnwGA7qjV4YAnCHJmFg0-cgvI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:58:ca:65:fc:b3:f5:2a:44:a4:3b:96:94:8f:50:5b:5b:
         32:52:a0:12:f6:ac:49:25:07:ff:aa:b0:52:66:ac:26:e8:7f:
         25:37:2b:09:4f:9e:de:04:f9:71:09:ba:ee:0d:7c:f5:3f:6c:
         64:bc:f3:83:18:d4:fb:9a:88:f0:56:49:ff:a4:08:a0:f9:78:
         16:e5:b9:5c:1d:3c:d4:40:0a:c4:b3:18:42:43:d5:a6:47:5b:
         f5:12:2f:06:f8:e0:6e:d8:44:2b:46:fe:8c:c3:3a:5e:5b:0b:
         32:43:ba:cd:6a:6f:e7:c2:55:68:c9:8b:86:f3:89:74:d0:f6:
         fb:5b:41:20:4e:1d:4c:6c:98:ad:5f:5c:5f:41:15:73:20:42:
         23:74:4f:04:02:8c:ad:42:25:01:f9:f8:75:b6:27:35:4a:05:
         98:f1:5b:92:39:0c:83:61:53:af:48:a5:06:58:28:4e:00:df:
         bc:35:5f:8d:d3:fe:49:fc:36:dd:7a:eb:15:b3:2b:1c:1b:74:
         ff:e3:5d:f4:f5:bc:1c:2a:97:3b:fc:10:c6:57:81:d0:9f:90:
         b6:07:cf:dd:78:12:ac:f8:18:38:9d:78:cd:57:eb:79:65:42:
         36:63:ef:09:48:fa:f7:47:4a:68:9f:c6:e7:74:32:c9:8a:6c:
         98:df:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:41 2026 by rpki-client