Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aayV-C9pyQsqKMejHXO_kdPviTs.roa
File:                     aayV-C9pyQsqKMejHXO_kdPviTs.roa (raw, json)
Hash identifier:          Kr4P6GO4tNWVveBW5/x41e21G/DmKjQVX2/vaxxRNCg=
Subject key identifier:   69:AC:95:F8:2F:69:C9:0B:2A:28:C7:A3:1D:73:BF:91:D3:EF:89:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aayV-C9pyQsqKMejHXO_kdPviTs.roa
Signing time:             Sun 01 Mar 2026 02:40:38 +0000
ROA not before:           Sun 01 Mar 2026 02:40:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4562 (0x11d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:40:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=69AC95F82F69C90B2A28C7A31D73BF91D3EF893B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:be:5e:87:bc:8d:9e:92:72:ba:52:ec:3a:
                    80:7d:47:ea:88:ad:05:45:a6:71:f0:7e:cc:a4:1f:
                    f1:c9:a6:c9:68:88:86:f9:e7:ed:f3:35:08:39:b1:
                    b5:51:2e:8a:24:25:2e:02:04:1b:77:19:78:43:b9:
                    bc:1a:4a:fe:49:4c:9c:24:04:14:0d:67:b2:cb:70:
                    c5:ac:a7:3f:6b:b3:1b:4f:7a:85:43:14:80:18:82:
                    ef:ee:31:ef:07:ae:99:78:33:4a:17:21:b0:6d:2f:
                    73:c0:65:5d:50:53:60:af:c8:26:ce:5d:9d:bc:bf:
                    fe:42:13:4e:1e:30:fd:2b:36:2b:bf:13:a3:2a:80:
                    ba:dd:da:0d:f1:d8:58:ce:a0:c1:8e:f1:d3:55:9e:
                    85:1c:94:a0:08:9c:8d:05:d1:27:ce:ee:7f:f1:19:
                    5a:98:ee:33:43:46:99:90:b7:9e:88:d5:f0:6a:08:
                    39:b9:39:fc:64:07:c4:7a:25:6f:fb:fc:26:da:74:
                    59:7e:d9:36:fc:23:42:f6:27:ac:9f:9f:df:ef:36:
                    54:8c:43:39:42:84:02:2a:86:59:66:08:4e:82:87:
                    70:7f:37:ea:86:62:8a:64:bc:00:e9:b4:7b:b2:de:
                    f8:ce:e7:13:3a:1e:54:be:26:4a:01:3a:a4:ce:e1:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:95:F8:2F:69:C9:0B:2A:28:C7:A3:1D:73:BF:91:D3:EF:89:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aayV-C9pyQsqKMejHXO_kdPviTs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e3:48:5c:ec:cf:c2:9b:c4:33:93:9d:e6:bb:35:ac:8d:c3:a6:
         f5:6f:3a:8c:70:c0:65:6b:ba:fd:99:b4:78:0c:e9:61:45:e0:
         0d:a3:9b:83:f8:62:2c:2b:c9:6e:ff:b8:71:75:59:c2:8f:34:
         f8:ae:2a:98:b9:ab:4e:cf:7b:fb:22:55:92:fc:ca:2f:3d:d5:
         93:7d:eb:2e:f3:36:cd:dc:37:a7:f7:c8:72:d1:5a:71:ee:d5:
         f2:bb:26:d4:ea:1e:1a:87:38:c3:0e:71:77:3c:65:41:13:ae:
         22:35:b8:52:15:5f:4f:93:62:8e:49:48:fc:60:e7:2e:9c:c8:
         e9:f8:72:a6:61:82:ef:85:d8:00:0a:fb:ba:7f:33:30:d6:47:
         5c:02:f7:83:99:d2:44:8f:fe:e6:08:d0:84:f3:2d:34:9e:95:
         dd:d6:a0:b7:93:0e:5c:fe:f4:99:b7:b1:26:d0:19:8d:98:83:
         37:cf:0c:be:83:20:d7:f4:6e:eb:1c:8f:ad:98:73:ca:10:8e:
         67:5b:4c:9d:09:36:46:1c:72:4a:c6:b7:37:aa:54:89:85:df:
         c4:6e:c7:8f:78:d7:36:8d:2f:f1:c5:d3:a0:c9:24:83:dc:bd:
         1b:e1:d9:eb:6b:e5:f5:0d:a8:e4:15:ec:e0:71:be:ad:99:3f:
         4e:5a:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:51 2026 by rpki-client