Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
File:                     OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa (raw, json)
Hash identifier:          YwoH/uMQDJLALMdrkGUr5YORBQWhWx1VgbaRr6/hDG4=
Subject key identifier:   38:4A:49:78:07:AE:51:D8:D2:77:0F:22:32:6F:6D:DF:14:D8:58:B5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1135
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
Signing time:             Sun 01 Mar 2026 02:12:42 +0000
ROA not before:           Sun 01 Mar 2026 02:12:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4405 (0x1135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:12:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=384A497807AE51D8D2770F22326F6DDF14D858B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:bb:d5:e4:2a:7c:c6:c5:69:42:3e:05:f5:
                    b7:7b:53:8f:32:88:ab:94:c9:af:d8:a2:b5:26:f6:
                    b5:ac:d1:9e:10:ae:a4:f3:69:3a:be:3b:0f:36:ee:
                    d8:0f:2e:95:6f:1a:05:65:95:6a:6b:c8:d0:7a:86:
                    d1:bc:18:5e:91:0e:c0:5e:3d:7d:5a:e3:43:56:21:
                    03:ad:57:fb:9e:30:be:4b:d5:cb:c9:a4:07:ac:bd:
                    1a:5c:83:10:65:c1:64:2d:00:38:f8:c1:af:fd:db:
                    8c:aa:ca:1d:a2:13:8c:65:0d:48:de:e7:3e:56:78:
                    55:db:9c:d0:a7:b8:0b:0c:c8:2a:e1:de:14:e3:c1:
                    77:f2:9d:b6:28:a1:6d:7e:09:22:07:89:c2:9a:90:
                    80:7c:0f:2e:03:5e:bb:60:a4:80:ae:8c:eb:c0:c9:
                    ef:8b:eb:f7:05:09:03:20:60:86:21:2f:53:82:fa:
                    1f:46:ff:63:ca:07:1d:f1:3d:1d:d5:13:9f:04:65:
                    81:ac:20:65:51:1e:e7:d7:e3:3c:59:c6:8e:15:f8:
                    0e:56:62:14:1a:9a:e6:b1:38:b4:72:7a:8a:d6:db:
                    1e:24:ae:69:49:b1:6d:a4:c9:93:cb:fa:cd:52:7b:
                    8b:11:99:d6:6d:af:08:af:ac:08:ff:f5:30:40:88:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:49:78:07:AE:51:D8:D2:77:0F:22:32:6F:6D:DF:14:D8:58:B5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OEpJeAeuUdjSdw8iMm9t3xTYWLU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:5a:6a:1a:3a:e5:34:df:fc:a8:4a:e3:d2:e3:60:2a:be:ca:
         74:e4:76:fa:09:e0:14:f3:5f:de:56:44:9b:c5:96:4d:af:29:
         44:f1:31:5c:7a:bd:38:11:36:2c:3f:c9:39:de:93:a1:fc:01:
         fd:48:df:0a:cf:61:a4:fa:c1:a7:29:30:6e:b9:b7:65:b2:db:
         97:22:c7:d1:b7:57:fd:87:89:87:18:96:e3:f2:57:fd:d0:1b:
         de:91:02:a2:49:3a:a5:b4:78:a8:1a:df:c4:8e:82:70:63:85:
         27:ed:31:e7:fc:9c:25:96:43:f1:82:f4:3b:2d:33:cb:18:88:
         1a:21:c4:65:0e:d1:14:e4:81:36:24:6b:c6:ee:15:16:92:91:
         83:78:9d:be:86:4a:71:1b:7b:d6:1c:2e:2e:ba:a7:38:20:f5:
         3d:1d:7c:ee:42:aa:2b:5f:87:4f:ff:06:de:64:44:71:43:e9:
         8c:64:99:02:03:e8:de:e6:33:d8:56:1d:43:d1:fd:f6:c5:f9:
         f2:80:cf:a9:58:8c:ae:05:ef:66:9e:f4:74:c4:98:08:85:f6:
         e1:8a:b1:d1:e3:a3:30:2b:2a:d8:07:4b:ae:6e:0c:7d:ef:ae:
         40:93:f5:6e:91:f8:9c:a6:fd:4a:11:59:76:35:ac:b5:7f:c2:
         5a:36:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:40 2026 by rpki-client