Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vh2mSKN_oCvEvZHVrRhST7_XK7o.roa
File:                     Vh2mSKN_oCvEvZHVrRhST7_XK7o.roa (raw, json)
Hash identifier:          VGF4+rrx82vpZ4WYYtdbuZg80cissf0xPJnIzGjE/WQ=
Subject key identifier:   56:1D:A6:48:A3:7F:A0:2B:C4:BD:91:D5:AD:18:52:4F:BF:D7:2B:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1076
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vh2mSKN_oCvEvZHVrRhST7_XK7o.roa
Signing time:             Sun 01 Mar 2026 01:34:25 +0000
ROA not before:           Sun 01 Mar 2026 01:34:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4214 (0x1076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:34:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=561DA648A37FA02BC4BD91D5AD18524FBFD72BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:93:b4:ea:b0:59:0b:fd:dc:b0:97:af:d0:
                    ab:f2:91:1f:38:f5:4e:43:c5:bf:6c:f7:dd:f6:1c:
                    1f:d7:bb:d2:27:a4:cd:e6:47:0e:71:6f:4a:81:b3:
                    08:65:86:52:cf:14:ad:ed:52:46:84:c7:d2:0e:f3:
                    fd:1d:69:6e:bc:45:cb:36:0a:d4:8e:0a:6b:18:86:
                    e1:2b:8b:99:8e:54:fb:a9:d6:c1:04:ea:76:ec:c6:
                    98:c1:26:0f:cf:83:23:53:bd:c7:21:08:39:da:b2:
                    26:51:91:1f:ae:b2:7b:45:cd:78:fb:9d:9e:ea:c5:
                    a5:66:40:b2:9d:34:7a:66:45:fa:cf:4c:87:6c:55:
                    6e:92:4a:62:2d:17:78:71:04:3a:9a:eb:5c:5b:0d:
                    7b:33:92:ea:e5:fa:bf:75:48:1f:47:dc:0f:9d:52:
                    35:6f:9a:ca:9a:17:36:32:12:80:50:56:9b:ad:b7:
                    43:30:12:3b:6d:b9:32:74:23:a0:25:18:0d:fa:54:
                    e4:a3:65:b9:cd:4f:b4:de:cc:22:29:93:a6:2d:38:
                    ea:1a:07:a9:80:30:0b:54:4b:5a:96:5f:bf:ec:42:
                    66:07:8b:8b:3d:18:92:d6:43:c4:6e:3c:26:9a:46:
                    d3:ac:dc:c5:bd:9e:99:4d:3d:eb:6f:16:0b:69:4c:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:A6:48:A3:7F:A0:2B:C4:BD:91:D5:AD:18:52:4F:BF:D7:2B:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vh2mSKN_oCvEvZHVrRhST7_XK7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:61:f4:80:42:1a:3f:74:5b:f1:fc:7b:bb:1a:83:71:0f:
         a4:60:98:06:7b:de:10:34:a7:a0:31:ce:03:b0:c3:51:93:32:
         ba:b4:63:76:7e:9e:64:97:9b:22:ea:2c:76:63:3f:b9:fd:8e:
         f4:aa:bf:21:b1:0a:9f:c0:44:25:f7:0b:84:17:60:12:ae:bc:
         31:0a:05:3c:4e:1b:b4:4e:ed:47:98:c2:d2:a8:ee:c5:a1:d3:
         b0:90:27:1b:65:06:69:d9:51:cc:df:f9:5b:4a:c2:7a:ae:b7:
         5c:9a:b7:67:b1:48:24:07:ef:05:ee:18:c0:ed:50:c6:4b:4a:
         04:28:d6:4d:6f:14:5c:c5:52:00:c3:16:ca:ba:07:14:2d:e0:
         5c:46:4a:4d:4d:06:cb:5e:7f:44:13:4e:b2:a5:7a:b8:c4:23:
         79:38:68:3e:80:14:0a:db:f7:02:ad:62:b9:c9:61:3e:c8:2e:
         1f:37:67:d2:e1:82:69:00:88:26:79:68:7c:78:cf:06:39:c9:
         7b:a7:87:b2:69:1d:b1:28:d6:ca:44:1a:e1:2f:05:4e:b9:d4:
         5e:90:48:34:21:42:56:a7:2d:3c:63:47:d7:11:8a:c6:b6:08:
         6d:a6:e5:07:37:18:d3:cd:d4:06:65:68:e6:88:43:61:3d:de:
         12:c6:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:16 2026 by rpki-client