Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SbXPFtZmaIIwy57DFJFinSb8O0A.roa
File:                     SbXPFtZmaIIwy57DFJFinSb8O0A.roa (raw, json)
Hash identifier:          MISRj3CFAqAm7HyS6NmVRqUNtoWOYHvBBDvE1NUkVe8=
Subject key identifier:   49:B5:CF:16:D6:66:68:82:30:CB:9E:C3:14:91:62:9D:26:FC:3B:40
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       117E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SbXPFtZmaIIwy57DFJFinSb8O0A.roa
Signing time:             Sun 01 Mar 2026 02:26:58 +0000
ROA not before:           Sun 01 Mar 2026 02:26:58 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4478 (0x117e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:26:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=49B5CF16D666688230CB9EC31491629D26FC3B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:2e:d7:e5:04:94:c6:f1:4b:56:be:39:30:
                    24:1e:16:66:1f:ee:6c:5b:a9:57:c8:6f:1e:96:cd:
                    d5:8c:43:f3:38:63:c5:54:51:c7:41:37:2d:66:60:
                    5c:43:54:2d:a5:01:e5:b2:0b:ca:c7:c3:d6:80:15:
                    ce:6c:67:b6:8d:c9:65:f7:53:58:d5:d2:b7:bc:86:
                    ca:ae:f5:33:71:2f:8e:43:77:c8:2f:c5:1b:61:a8:
                    00:6c:b9:e3:71:65:4d:e8:58:34:e0:d8:08:a2:6f:
                    27:29:07:b9:2c:41:ae:25:b6:9a:40:e8:a8:32:92:
                    df:4c:a8:5c:6b:e1:d5:60:37:cf:f6:1d:73:99:5b:
                    46:cf:5b:14:d0:a6:d5:c8:60:dc:94:0f:0c:bd:ca:
                    85:9b:b1:3b:f3:3d:22:28:53:df:fb:2b:19:53:c5:
                    df:53:b0:61:9c:12:a3:2e:7d:92:d1:b1:e0:fb:92:
                    76:cd:2e:0d:ea:92:56:ac:7f:92:f3:9d:67:12:78:
                    88:ee:a2:c5:0b:22:03:9a:5a:b4:84:a0:47:b8:66:
                    fa:2a:83:58:61:99:4d:8f:c6:42:20:85:d3:7e:b9:
                    e0:48:13:2b:d0:17:31:11:5b:c4:5d:31:55:2e:fa:
                    98:bc:9c:0c:8c:bd:19:1f:3a:71:07:02:60:43:9a:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B5:CF:16:D6:66:68:82:30:CB:9E:C3:14:91:62:9D:26:FC:3B:40
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SbXPFtZmaIIwy57DFJFinSb8O0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:dc:14:c3:eb:98:3e:41:35:7d:a1:34:09:cd:c2:35:28:
         53:41:ea:b4:f1:49:00:ce:f6:95:a3:3b:3c:13:ba:1b:32:7f:
         f4:2e:f9:69:f6:a3:2c:6b:37:99:6e:d2:6f:9b:30:b5:92:e7:
         7d:37:2d:91:78:3b:2a:39:2a:00:c3:2b:65:4c:85:9c:e4:33:
         a5:fa:78:96:47:4f:97:73:44:02:7e:97:d9:af:81:03:1e:4e:
         4f:6b:3d:2f:42:ec:2e:32:f8:72:b7:c8:d0:44:5a:c3:a6:ff:
         fd:9e:e2:2c:03:4a:35:a5:a5:c2:32:d1:39:6e:68:01:ab:8e:
         a0:e5:29:ae:1a:be:39:42:62:bd:60:1e:51:b7:f4:4f:b1:57:
         0e:b3:db:2c:79:7d:c6:1b:3b:33:50:cf:60:89:bf:6c:77:f1:
         36:b5:f1:fc:d6:86:63:71:0a:75:67:fc:e4:ed:be:34:b1:f2:
         c3:fc:77:1e:4b:81:75:7e:56:7b:e7:32:20:ad:eb:72:2b:61:
         6a:80:f6:fb:a7:46:c1:11:86:2a:9c:e4:c7:cb:81:74:a7:f4:
         15:c4:23:ab:27:b3:5c:6f:0f:57:0b:1b:27:1c:f7:fb:82:a6:
         8a:d1:40:c3:64:21:86:0d:8b:53:40:fe:50:4e:68:1f:06:e6:
         b5:eb:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:26 2026 by rpki-client