Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LO052rIin72MoFd-Af7b61X1N_o.roa
File:                     LO052rIin72MoFd-Af7b61X1N_o.roa (raw, json)
Hash identifier:          547/nV7PTuuT0+MsJInTM+5jMuWXT7bFUJJA2+2Lpm4=
Subject key identifier:   2C:ED:39:DA:B2:22:9F:BD:8C:A0:57:7E:01:FE:DB:EB:55:F5:37:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LO052rIin72MoFd-Af7b61X1N_o.roa
Signing time:             Sun 01 Mar 2026 03:20:46 +0000
ROA not before:           Sun 01 Mar 2026 03:20:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4844 (0x12ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2CED39DAB2229FBD8CA0577E01FEDBEB55F537FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:0e:d1:99:14:ba:72:27:ef:2b:e7:43:d5:
                    1a:80:a3:39:15:58:f0:16:1a:a1:6d:ce:65:7a:20:
                    03:c2:8c:48:0c:b1:ed:6c:3b:17:db:97:6a:33:50:
                    27:d2:32:92:16:02:d3:c5:e7:18:ad:76:e7:66:3d:
                    ea:b4:6c:db:03:31:69:6c:09:1c:a4:c1:2c:fb:c1:
                    1a:2c:6f:2f:f3:db:c2:df:0d:d2:eb:fe:13:10:0b:
                    24:47:77:ff:4f:3f:19:97:8c:bb:8c:7d:fd:7c:27:
                    c0:d7:36:44:b5:ee:14:8e:be:c9:0e:3b:6c:e6:14:
                    a7:69:c3:ad:02:1b:d7:5e:c5:5f:17:aa:ca:1f:51:
                    3e:62:ef:95:b3:20:b5:2b:f9:1e:cd:45:16:03:b6:
                    3b:af:c2:3b:16:48:f6:10:e2:eb:ad:b4:9f:c1:0f:
                    f9:e6:f4:dd:fe:8d:34:9d:62:1a:18:35:2d:28:ae:
                    6d:31:7c:6e:a6:3b:49:c0:b7:4f:f8:ee:be:39:a9:
                    35:29:0c:c7:ce:e8:c4:47:c7:f1:9f:4c:60:ea:92:
                    9c:dc:03:03:ec:92:ce:e6:8a:cb:6a:e7:8d:72:fd:
                    64:43:23:72:8d:79:e0:03:f9:8d:6b:eb:97:32:47:
                    ff:12:ff:3b:7a:75:da:f9:1c:f2:35:10:df:a2:cd:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:39:DA:B2:22:9F:BD:8C:A0:57:7E:01:FE:DB:EB:55:F5:37:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LO052rIin72MoFd-Af7b61X1N_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:16:f2:7f:e0:46:ba:2b:5f:01:46:18:57:55:3d:2d:bc:cd:
         07:ea:6d:e7:27:b4:b4:75:07:c4:b9:01:a7:42:95:e3:35:99:
         7c:04:33:47:68:aa:cd:a2:44:e3:e0:8c:78:9f:8c:59:b1:53:
         e4:2e:ae:e4:d5:e5:d0:75:fa:29:0a:1a:49:c4:26:8c:af:0d:
         28:1c:c5:7a:3b:54:4c:9e:99:52:5a:33:f7:95:c9:53:8f:8a:
         92:ec:65:2f:37:94:02:c2:e1:57:23:77:ca:e0:c5:be:e6:f3:
         68:2b:cf:e6:80:4f:f8:ce:e1:94:bb:ab:92:0a:38:4d:3a:6a:
         f7:dc:8b:c9:8f:3c:dc:c1:e4:3a:82:37:8f:38:4b:0c:33:33:
         12:ce:f5:37:69:a0:97:7a:42:eb:6c:71:0a:10:75:e9:89:91:
         56:7f:b0:b2:ad:71:cd:de:1e:2f:25:74:d5:b7:98:15:b5:d0:
         a7:52:88:6e:78:55:c5:a6:be:1f:18:ac:b6:29:58:08:3a:4a:
         4b:e8:d4:14:77:8b:1f:a7:d3:55:90:9e:08:ed:18:f6:7b:c2:
         dd:ec:88:da:aa:1e:85:37:82:6e:34:2a:46:e1:a9:d8:9b:c3:
         04:92:48:46:17:b0:4f:1b:55:0c:7e:a3:e8:da:13:78:bb:9f:
         1c:11:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:54:14 2026 by rpki-client