Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RpFPysSa417oTOGtArdoIk4MFA.roa
File:                     _RpFPysSa417oTOGtArdoIk4MFA.roa (raw, json)
Hash identifier:          91/qHHR8rG1Dmd1YDWGL07A7c2k1z1ASjw3k6L956NY=
Subject key identifier:   FD:1A:45:3F:2B:12:6B:8D:7B:A1:33:86:B4:0A:DD:A0:89:38:30:50
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       134C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RpFPysSa417oTOGtArdoIk4MFA.roa
Signing time:             Sun 01 Mar 2026 03:40:45 +0000
ROA not before:           Sun 01 Mar 2026 03:40:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4940 (0x134c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:40:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FD1A453F2B126B8D7BA13386B40ADDA089383050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:b9:41:f5:43:ca:1d:73:d5:73:57:17:95:
                    75:8f:c4:a0:2d:5e:7f:54:ed:e4:ed:99:a8:98:ef:
                    bc:c6:54:5b:33:f4:eb:7b:64:3f:a1:26:e9:fb:8b:
                    d6:54:fa:29:60:d6:23:c1:47:e8:54:4d:e3:a7:d9:
                    33:1f:c9:37:b2:57:54:2e:25:0f:b2:ae:00:34:bd:
                    ce:05:7c:64:c2:88:45:c5:4d:ff:31:ed:b9:cb:7e:
                    ba:f6:c7:ab:82:f3:bf:fd:38:56:79:f0:91:4f:f4:
                    dd:92:41:8d:cc:b5:77:05:7e:d5:94:82:01:52:69:
                    f2:80:5b:30:fb:14:d0:bb:dc:44:63:ea:c6:71:55:
                    8f:87:9c:6c:da:d7:29:75:f9:de:d5:0b:03:6a:1f:
                    de:5c:f9:c5:aa:e3:7e:6e:74:9a:10:ee:47:24:b6:
                    2f:06:99:59:ed:2c:40:c8:2a:83:0e:7d:e5:f3:a2:
                    47:4f:9a:6c:e9:3e:90:ba:e0:8d:6c:ec:55:71:fc:
                    d2:ff:a2:41:d2:8a:30:15:c7:10:45:15:7b:03:7f:
                    b2:a0:64:8f:6f:5d:fa:7b:e1:09:09:15:c8:52:23:
                    a0:ea:07:ed:ee:b9:44:19:dc:c3:14:d6:42:09:f7:
                    bd:14:51:54:11:54:d6:a5:68:76:6e:e5:2b:35:fd:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1A:45:3F:2B:12:6B:8D:7B:A1:33:86:B4:0A:DD:A0:89:38:30:50
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RpFPysSa417oTOGtArdoIk4MFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:4b:68:19:3a:2b:89:13:ee:3f:6d:4b:6a:dc:a1:d1:90:ae:
         b0:77:b3:b1:08:2a:4a:1b:24:ce:55:9f:05:11:dc:60:96:4a:
         a3:7e:f2:1b:f7:70:7d:f1:1b:6e:c4:c5:5f:56:fa:0b:d2:95:
         59:e8:32:37:6a:eb:77:1d:32:78:04:e9:56:65:d7:43:5f:27:
         4a:82:d8:2d:4e:6e:02:df:13:59:ed:2c:ad:14:1b:ac:1a:b4:
         4d:0c:ad:84:3e:dc:09:c1:98:92:de:d3:4f:6d:d5:e0:41:f5:
         7a:4f:e7:ca:92:1c:52:e1:f2:b1:d4:9c:94:a4:a3:ff:e4:75:
         90:0a:d5:aa:7c:e0:af:7c:c2:62:29:f7:a2:a4:df:35:53:c9:
         20:68:df:a9:ce:b9:89:be:38:d8:6b:cf:3f:c6:b7:7c:ef:ae:
         ea:66:e1:35:24:00:87:5a:bf:7d:f7:8b:02:75:dd:20:e2:d2:
         3a:0b:b1:c1:22:6d:bd:4b:e2:a1:36:be:5e:85:72:6f:c9:54:
         1b:3a:6f:c8:49:a4:aa:6c:dc:b1:38:e9:1c:5a:4a:09:6e:90:
         8f:3b:b1:f2:1c:16:0e:09:50:02:de:86:f9:77:c7:1a:6e:d1:
         a8:89:18:17:1f:06:bb:c3:39:cf:9e:cd:35:32:64:29:1e:f5:
         fb:5a:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:53 2026 by rpki-client