Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
File:                     Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa (raw, json)
Hash identifier:          drIwzGbBUWlyqTjtRB4M8EH7aUX3d2WMRjndIRQCoRk=
Subject key identifier:   52:AA:DF:E1:8E:0D:03:82:70:98:35:24:3F:D2:94:F0:D2:1F:68:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11DA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
Signing time:             Sun 01 Mar 2026 02:40:43 +0000
ROA not before:           Sun 01 Mar 2026 02:40:43 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4570 (0x11da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:40:43 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=52AADFE18E0D0382709835243FD294F0D21F68E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:2e:a0:0d:33:4e:e9:c0:ba:0f:21:53:db:
                    fe:e7:da:5e:62:a8:52:1f:12:55:62:36:37:29:69:
                    15:61:06:9a:8b:5a:95:c3:f4:b5:15:c5:94:c1:93:
                    bd:d8:91:01:be:c3:e8:72:57:88:be:4c:d3:3c:77:
                    a5:d8:5c:33:5f:28:9a:f9:7a:1b:c4:d9:ac:3f:ac:
                    34:21:6b:ed:0b:f3:36:7c:6e:19:e3:de:e9:1f:75:
                    5a:79:27:48:ac:0e:74:6f:1a:d8:69:42:8a:24:09:
                    7a:e4:8e:9c:89:14:8a:5f:38:cb:5d:21:aa:28:e5:
                    1e:a9:a4:15:9e:25:77:8f:4c:2e:c6:db:c2:2b:79:
                    e4:7c:13:5d:64:07:68:fb:d6:04:c9:88:df:a4:3e:
                    a3:84:1b:42:c0:fe:91:4e:df:e3:76:e0:d4:15:6a:
                    c3:05:d5:f5:24:47:f8:23:ef:21:d8:4d:16:de:40:
                    92:55:4b:20:62:12:25:8e:bc:9f:00:72:c8:c4:25:
                    5c:de:d3:ea:6a:72:e0:71:b7:ac:fd:a7:ba:6f:95:
                    39:74:ae:c0:97:0b:34:21:48:aa:99:8b:61:89:92:
                    c2:68:90:a9:74:61:63:69:a7:e4:c6:2f:85:26:a6:
                    8c:0b:c4:9d:20:15:50:f9:19:e0:b8:d3:41:be:e6:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AA:DF:E1:8E:0D:03:82:70:98:35:24:3F:D2:94:F0:D2:1F:68:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uqrf4Y4NA4JwmDUkP9KU8NIfaOY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:68:74:8f:09:52:03:7e:a1:41:5a:82:57:1c:84:73:a0:cc:
         ab:d9:8f:e1:ab:91:f7:e6:dc:5b:3e:0d:ab:51:60:ac:f1:01:
         34:a4:42:14:02:e8:2d:a5:f8:a3:ae:36:90:bd:0b:99:2a:bd:
         a0:3a:8b:e5:c9:5f:4c:dd:88:da:27:f7:8f:5d:73:9f:c7:ef:
         a4:57:3e:17:8e:5d:ff:30:00:3f:ac:64:75:51:85:f1:86:3f:
         0b:76:11:1a:95:d0:16:61:48:c1:43:3f:61:28:b7:43:20:fd:
         6c:ce:3b:75:70:08:ab:d3:92:bb:14:fe:21:e3:ad:f6:18:72:
         b5:58:2e:a3:4f:1f:73:db:ad:ca:a0:f7:6a:af:9e:d8:1e:29:
         87:f2:df:b7:f9:04:12:3b:bb:e7:77:25:80:91:ae:6d:b6:f0:
         b3:80:a7:a2:d1:81:78:51:3e:ab:dc:4f:74:3e:40:dc:5d:67:
         61:8b:9c:0e:26:e3:70:10:2d:58:84:ce:aa:3d:72:27:a5:1f:
         b3:6b:13:e5:79:bc:18:7e:25:ff:e8:09:4b:8e:83:5f:08:97:
         31:75:c3:1a:d1:28:7e:74:f3:90:24:ed:84:58:a5:10:24:21:
         ef:5c:ab:fd:f4:ca:18:16:e6:40:86:18:b8:09:2b:c8:81:ac:
         f9:e1:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:27 2026 by rpki-client