Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MT0nUzFmJlfjn_Lx372WXhKbUXs.roa
File:                     MT0nUzFmJlfjn_Lx372WXhKbUXs.roa (raw, json)
Hash identifier:          i4NNvPo0k1GOZ/JtyOYGefm1e3ueXGlVI85g2Zgsm/g=
Subject key identifier:   31:3D:27:53:31:66:26:57:E3:9F:F2:F1:DF:BD:96:5E:12:9B:51:7B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       110A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MT0nUzFmJlfjn_Lx372WXhKbUXs.roa
Signing time:             Sun 01 Mar 2026 02:03:00 +0000
ROA not before:           Sun 01 Mar 2026 02:03:00 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4362 (0x110a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:03:00 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=313D275331662657E39FF2F1DFBD965E129B517B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:e5:16:c8:18:a4:4a:f3:1c:91:f0:39:fb:
                    b0:06:0d:d6:03:67:a6:98:c5:4d:a1:e1:1c:5f:49:
                    b9:63:2d:50:7f:14:0b:cc:a6:d7:30:8a:bd:6e:e3:
                    63:85:ba:31:bd:74:42:6e:4b:04:71:c2:71:99:3d:
                    d4:f9:06:d2:80:b9:09:a0:97:ad:77:cb:a9:91:8e:
                    ad:ef:57:09:e4:e0:51:c8:aa:c1:43:59:c2:93:36:
                    d7:bd:17:60:73:09:23:20:04:86:7e:b6:77:2a:38:
                    24:35:19:00:66:9a:47:78:3a:91:f2:b0:61:0b:ef:
                    84:89:d3:cb:74:3f:46:81:08:ee:3e:da:ed:a0:75:
                    b3:f0:01:37:0f:4a:5c:7b:6e:bb:1f:c5:5b:7f:c3:
                    fe:3f:b1:a0:63:17:b4:2f:92:b2:fa:61:bb:72:17:
                    dd:f4:a0:d2:c9:ad:e7:81:49:ee:d2:63:00:91:0b:
                    59:5e:c3:5d:a7:50:05:5f:6b:f4:27:a7:30:85:b2:
                    55:35:4a:69:e6:cb:fd:8e:6c:78:dc:f6:73:87:91:
                    c3:1b:29:7c:98:e9:8c:6e:7d:1b:43:52:3c:d0:7f:
                    25:fd:8c:ab:f0:11:67:f4:95:ab:95:55:ca:d7:a1:
                    4d:cb:7b:a4:a2:74:6b:3a:26:c0:91:da:3f:6f:71:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:27:53:31:66:26:57:E3:9F:F2:F1:DF:BD:96:5E:12:9B:51:7B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MT0nUzFmJlfjn_Lx372WXhKbUXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:a4:da:d2:26:f9:82:95:20:2f:d6:fa:dd:e7:56:4d:9f:
         d3:89:9f:cf:48:61:dc:f4:08:fe:ab:de:3c:89:fb:89:3e:35:
         84:20:5b:b6:64:bf:ff:6c:2b:79:72:95:25:dd:5a:c8:1a:9e:
         18:68:60:a2:92:17:b4:99:42:de:98:c4:4c:d9:7c:63:09:a4:
         f6:fd:c7:9b:cf:f5:44:e6:3d:ed:b6:10:d5:fb:96:08:6a:f0:
         6f:a2:31:01:cc:75:8d:6d:df:15:07:ce:ea:1c:bc:bb:42:dc:
         7b:54:0c:46:a4:5f:8c:69:ea:1a:75:69:e0:6f:9c:a3:9f:f2:
         6e:6c:0c:97:eb:05:7a:b6:38:b3:88:be:9f:b4:cc:f7:a9:79:
         03:e8:9e:5a:f2:81:92:51:68:7b:22:5d:68:9f:50:67:76:17:
         66:e9:34:74:39:43:f2:52:44:21:16:a6:5c:2f:50:43:94:18:
         f6:70:ab:9f:cf:a5:d7:4f:4d:06:ff:04:53:cb:01:2a:4a:4e:
         04:3e:84:9b:b2:a2:53:26:39:3c:21:a6:5a:68:15:e5:e6:2e:
         ee:56:9b:80:92:1c:55:f3:fc:af:d1:87:c6:10:0f:fd:ea:ed:
         f0:fb:90:06:72:1b:68:c6:13:76:83:fa:1c:c5:d2:ea:ec:fa:
         bf:21:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:35 2026 by rpki-client