Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tgtn7b_Mjsjcks-gkq55CMTvbDo.roa
File:                     Tgtn7b_Mjsjcks-gkq55CMTvbDo.roa (raw, json)
Hash identifier:          tV26AVJRdDDy+Ogrt8qsggmmC1otrTKVz4DSMr9W7Z4=
Subject key identifier:   4E:0B:67:ED:BF:CC:8E:C8:DC:92:CF:A0:92:AE:79:08:C4:EF:6C:3A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1279
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tgtn7b_Mjsjcks-gkq55CMTvbDo.roa
Signing time:             Sun 01 Mar 2026 03:04:38 +0000
ROA not before:           Sun 01 Mar 2026 03:04:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4729 (0x1279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:04:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4E0B67EDBFCC8EC8DC92CFA092AE7908C4EF6C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:52:11:ba:01:05:f1:60:c3:9e:9c:fb:1c:
                    99:dd:44:76:fd:db:d2:61:25:c9:b1:20:e2:34:b6:
                    c0:4f:c0:2a:11:3e:4a:c6:f2:b6:d3:49:f0:90:4d:
                    b7:d1:78:29:23:57:ee:73:96:2f:13:52:1e:91:8c:
                    59:2c:88:c8:b9:21:61:4c:fe:8c:85:df:e0:3a:33:
                    ee:18:d3:b8:51:a7:c4:52:15:b6:54:df:4d:09:f2:
                    16:40:eb:f7:4e:db:7d:d1:ae:e6:05:ef:e9:59:15:
                    fb:37:89:92:40:31:bd:af:f8:a2:8a:6e:06:91:7e:
                    c0:a8:20:5c:bd:78:30:e3:f5:cc:73:89:d0:f8:15:
                    41:38:4e:45:f2:48:ca:31:04:52:a7:3f:33:6b:7f:
                    73:2b:37:39:ae:11:d1:86:1e:ac:11:fc:e2:b1:59:
                    48:ba:93:b0:25:18:3a:97:2d:8e:0c:4a:54:6c:42:
                    1a:ea:06:ca:f5:35:45:ad:d9:1a:04:a1:67:98:20:
                    79:76:7f:84:3a:36:83:ca:94:8f:1b:f8:1a:0a:ea:
                    d7:45:1d:ba:93:42:5d:d4:2c:19:c0:f3:20:aa:11:
                    be:2b:5f:23:40:d5:a2:9c:00:0c:57:eb:a7:38:15:
                    fc:84:0e:51:4b:06:23:79:7b:51:19:87:0d:7e:bc:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:67:ED:BF:CC:8E:C8:DC:92:CF:A0:92:AE:79:08:C4:EF:6C:3A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tgtn7b_Mjsjcks-gkq55CMTvbDo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:92:01:f6:04:77:38:0a:e3:f8:4c:fb:17:c1:83:8d:62:
         2c:05:00:be:f1:5a:5a:d9:24:ea:36:96:2a:7e:9f:d7:b7:f5:
         cf:2b:97:7b:76:e5:8f:71:47:84:ee:ec:bc:00:d3:41:78:f3:
         0f:11:c2:04:21:27:73:cb:fe:92:d2:a8:9c:90:12:57:dd:44:
         7b:be:ea:0a:27:9a:2e:d0:41:dd:53:ed:fe:45:b4:a2:4f:3d:
         c4:07:ad:94:b3:60:3f:72:c5:2a:f8:a3:73:7c:96:33:0e:f1:
         68:af:0f:3b:d4:d2:91:56:f1:bb:76:98:13:6f:44:5e:5b:39:
         67:5d:8e:f5:09:ee:55:5e:42:8e:b6:c2:b4:ee:40:70:a3:e0:
         cc:e7:0a:8e:76:17:7f:e4:49:29:ae:ce:50:8a:38:c4:94:b2:
         5d:b8:4e:1f:32:d1:f7:5b:3c:11:11:72:4a:57:8c:ec:8d:6f:
         b2:42:6a:8d:67:00:e9:2f:51:75:39:9c:69:1c:1d:83:c0:27:
         85:47:bd:7c:19:b0:e9:3e:99:c8:5c:b6:11:14:c3:fa:56:ca:
         07:b0:31:35:a2:16:16:e4:1d:58:26:7f:27:36:23:99:df:ef:
         43:a5:b3:80:b9:74:be:17:f8:06:e6:45:66:cc:83:39:a0:a1:
         5d:a9:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:07 2026 by rpki-client