Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TlgTde5VMSOLCnUtrBlCa0i78cg.roa
File:                     TlgTde5VMSOLCnUtrBlCa0i78cg.roa (raw, json)
Hash identifier:          rRdE63yb76Q2TQpaTJSg7iMHxyCDn8sHcsSqKE4fq1A=
Subject key identifier:   4E:58:13:75:EE:55:31:23:8B:0A:75:2D:AC:19:42:6B:48:BB:F1:C8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11C3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TlgTde5VMSOLCnUtrBlCa0i78cg.roa
Signing time:             Sun 01 Mar 2026 02:36:30 +0000
ROA not before:           Sun 01 Mar 2026 02:36:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4547 (0x11c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4E581375EE5531238B0A752DAC19426B48BBF1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:71:17:a4:2d:05:6a:e4:96:8e:4d:62:a5:09:
                    6b:cf:b1:4a:a4:ef:9d:0b:da:2a:18:8c:55:a2:b4:
                    0c:03:d4:f1:e8:43:a5:f7:b4:62:ab:45:f4:70:a2:
                    51:d6:e1:1e:5d:9c:15:54:15:49:4f:32:0e:e1:df:
                    f5:e3:10:4b:a7:b9:e3:cc:19:a2:65:43:c0:9b:22:
                    30:38:5c:68:94:e9:7b:c8:67:1a:2e:a8:1f:91:80:
                    27:83:de:aa:fa:dc:a3:66:c3:ae:20:92:67:c1:95:
                    9e:87:cb:72:05:0d:df:09:43:c4:99:f2:7a:fd:36:
                    da:8a:32:d3:d0:fa:bc:26:0e:2f:24:3b:d6:af:17:
                    b6:56:63:eb:da:c7:7a:01:50:e7:96:a9:f1:10:3e:
                    c5:1f:91:f0:fe:c1:c7:1c:fa:c0:b9:29:e6:bc:d6:
                    65:de:78:26:98:a4:71:6f:c3:f6:5a:f8:7b:bf:c6:
                    18:88:22:1c:2d:0a:7c:91:87:7a:89:40:fb:ad:0a:
                    70:be:51:d6:65:44:a5:ee:17:7f:e9:22:27:eb:95:
                    6e:0d:c3:e5:77:3b:eb:0c:61:d7:c4:5d:3e:c9:46:
                    74:48:b5:1b:68:03:6d:6a:3a:4b:67:4f:da:ce:9c:
                    2e:03:ee:64:4d:74:3a:a2:d1:9c:e6:fd:e8:ea:d5:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:13:75:EE:55:31:23:8B:0A:75:2D:AC:19:42:6B:48:BB:F1:C8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TlgTde5VMSOLCnUtrBlCa0i78cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:05:21:78:9b:05:10:b0:52:b8:f1:26:50:5a:38:c1:ea:af:
         0a:c1:51:66:ec:36:3d:9f:ca:de:a5:ae:66:7e:86:e7:f4:69:
         f2:29:9e:66:9f:8e:4c:0c:fa:41:22:8f:9f:df:1f:08:e2:f3:
         96:1f:e5:5d:91:8f:93:3f:f6:e6:9a:ba:8b:d2:bc:13:ba:95:
         aa:cb:04:2a:9e:75:bb:af:8b:33:f3:d6:7a:49:25:f0:e8:06:
         0f:73:f8:81:16:6b:89:00:7d:fe:91:fb:c2:aa:1a:6b:05:b5:
         38:e6:5e:9a:d0:dd:1d:8b:5e:8d:9f:57:c0:66:52:fd:b9:f8:
         80:a0:54:03:a5:6b:3d:bd:4f:cc:23:39:b8:58:57:d9:89:4e:
         7c:47:fd:6b:15:db:88:fa:52:00:fc:27:57:82:8c:67:23:ab:
         90:b0:94:cf:11:37:e8:e9:ea:4c:7e:e5:77:a0:94:d0:52:34:
         42:bb:4e:82:d3:97:39:e8:cc:05:d6:08:78:20:a6:83:5e:74:
         44:ae:50:1e:32:82:89:b1:23:e0:d0:5f:4e:f6:4f:92:39:ac:
         62:f3:1e:cf:b2:0c:72:8f:44:21:d7:ca:2f:ad:a1:b9:a3:3f:
         a3:0e:9b:3f:46:27:74:1b:5c:c5:3d:3a:4e:44:c7:09:fc:9f:
         b8:e7:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:39 2026 by rpki-client