Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LTI_oOyxwwK62oUhEumvjNpSDGU.roa
File:                     LTI_oOyxwwK62oUhEumvjNpSDGU.roa (raw, json)
Hash identifier:          YDT5YfDeR9Cy5URN7/GyKcxq9Btahsp5Q3+mH7YuLqk=
Subject key identifier:   2D:32:3F:A0:EC:B1:C3:02:BA:DA:85:21:12:E9:AF:8C:DA:52:0C:65
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LTI_oOyxwwK62oUhEumvjNpSDGU.roa
Signing time:             Sun 01 Mar 2026 03:20:44 +0000
ROA not before:           Sun 01 Mar 2026 03:20:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4840 (0x12e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2D323FA0ECB1C302BADA852112E9AF8CDA520C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:d2:e5:67:ee:ec:16:46:27:16:e3:3b:7b:
                    e2:fc:67:21:72:f3:58:38:d3:74:a4:91:9e:00:3e:
                    b9:d2:70:d6:9c:b8:4a:ad:c7:db:b4:c8:1a:80:7b:
                    00:47:29:7a:7d:14:76:dd:29:44:63:a6:b4:e2:4a:
                    0e:74:02:6e:53:e0:eb:f8:17:34:d6:f2:c4:2b:f6:
                    62:42:9f:eb:31:cf:5b:2f:05:e6:dd:f4:2f:57:cb:
                    47:df:94:f9:07:99:b7:eb:c0:71:2e:7e:d7:59:f7:
                    a3:4c:ed:36:54:79:80:8a:72:7c:a1:b0:68:a1:dd:
                    84:b9:42:38:10:f0:ab:ae:19:af:1d:4d:74:95:90:
                    59:a8:39:05:41:5c:57:6c:4d:ec:ea:8b:5c:9e:3c:
                    96:ac:90:f5:42:bf:0f:c1:c8:a6:ab:ae:34:a0:88:
                    9e:d2:cc:4f:73:3f:d6:e6:7a:5e:e6:16:31:63:4e:
                    fa:da:9d:25:31:7d:c0:eb:df:38:86:54:77:00:02:
                    8f:0c:9b:d0:72:92:80:3c:60:3d:8c:cf:12:f3:40:
                    95:7e:8e:49:d8:8d:76:40:b3:94:ff:35:ca:32:b8:
                    6b:7e:4b:04:b2:bf:71:ec:81:0d:76:28:9c:62:13:
                    3e:e5:5a:09:66:b5:9e:50:b0:05:d4:4d:ed:56:ca:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:3F:A0:EC:B1:C3:02:BA:DA:85:21:12:E9:AF:8C:DA:52:0C:65
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LTI_oOyxwwK62oUhEumvjNpSDGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:cc:d3:b2:15:d3:09:26:ca:b9:dc:97:ab:b7:a5:c7:88:
         16:f7:a3:21:24:f6:e0:3e:6d:18:69:5c:99:43:9e:e4:f9:6d:
         06:dd:50:8f:dc:fc:14:82:ef:36:61:c8:2b:57:37:92:8b:61:
         8a:86:48:32:d3:aa:27:44:ad:42:83:a9:40:de:01:45:25:77:
         b2:0a:1f:51:13:a6:43:7c:34:89:ad:36:80:09:e9:64:5e:4f:
         f7:0d:50:9b:a1:66:87:bb:4b:b4:65:8c:64:67:6d:ff:17:d2:
         34:c9:2d:9c:31:25:d0:7a:6c:38:ac:0f:9d:4a:2b:02:ed:a6:
         bc:dc:0b:1e:dc:2b:01:1d:f6:bf:e4:65:25:f1:5e:44:03:dc:
         39:9d:fe:b6:1c:08:e4:67:91:6e:70:6d:f0:a2:7a:83:aa:ea:
         70:a6:34:2f:a6:5d:53:b9:d8:58:de:d7:5b:02:d1:cb:05:c3:
         d8:fd:d2:5b:e5:a1:d8:d3:ef:1d:3d:67:34:bf:1d:e4:7e:b5:
         9f:d5:90:d5:5b:d5:6e:53:7d:a3:e1:17:17:f2:6d:ca:90:d0:
         53:de:87:50:13:c1:65:43:ac:be:f1:bc:bf:c7:7c:db:2a:45:
         ed:4d:fe:32:61:56:68:fc:cd:24:f3:7f:84:11:e1:71:77:1a:
         52:60:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:29 2026 by rpki-client