Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b49vj535HfB-svaOvVubYjOsOYo.roa
File:                     b49vj535HfB-svaOvVubYjOsOYo.roa (raw, json)
Hash identifier:          enFszt/mn5ouZ4SDGJagZb7XeX4r1Q5JbYcl0g/VVdI=
Subject key identifier:   6F:8F:6F:8F:9D:F9:1D:F0:7E:B2:F6:8E:BD:5B:9B:62:33:AC:39:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       126D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b49vj535HfB-svaOvVubYjOsOYo.roa
Signing time:             Sun 01 Mar 2026 03:04:31 +0000
ROA not before:           Sun 01 Mar 2026 03:04:31 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4717 (0x126d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:04:31 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6F8F6F8F9DF91DF07EB2F68EBD5B9B6233AC398A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:04:1b:e2:38:eb:db:c7:34:48:e6:a6:e6:
                    84:51:4b:5c:33:36:24:f4:e5:b5:9a:a5:83:37:fa:
                    ab:52:6c:34:9a:72:c5:64:2e:63:87:80:3d:31:f3:
                    e5:1d:ac:30:a0:53:70:4f:8e:2e:80:17:2f:09:37:
                    9e:21:df:c4:bf:3f:71:1a:ad:a9:15:38:de:6e:9f:
                    76:d1:d5:95:bd:14:ba:0d:eb:93:97:57:21:6b:d7:
                    c0:64:fb:7d:3d:1a:fe:4d:ee:df:d6:14:79:46:c3:
                    c6:a4:2c:0b:c5:6b:b0:5b:24:a0:28:07:78:fe:cd:
                    ce:8d:34:c0:3b:f1:f7:24:b6:1c:7f:e3:e1:c3:00:
                    91:40:95:af:ce:10:08:a4:1f:f4:a1:9f:a3:00:b9:
                    3c:e7:ef:79:ff:51:74:49:1a:f1:3e:97:8c:0b:4b:
                    93:6c:af:c2:8f:6d:a5:42:2e:11:a8:63:9e:f7:3b:
                    a4:76:ee:a7:87:a4:65:c2:41:0e:c0:7e:5d:33:d0:
                    88:1c:7e:41:6b:4c:0e:44:9c:41:10:50:4b:2a:3c:
                    06:79:3b:b5:5d:9e:57:ad:ff:fd:62:44:fa:27:fe:
                    6d:72:de:c7:fc:aa:e5:3b:32:2d:19:96:4b:de:6b:
                    d5:d2:f7:34:c5:e4:9c:08:03:65:aa:c7:c4:eb:9a:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8F:6F:8F:9D:F9:1D:F0:7E:B2:F6:8E:BD:5B:9B:62:33:AC:39:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b49vj535HfB-svaOvVubYjOsOYo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:4d:9b:3d:31:af:4a:ac:d5:17:f6:72:7d:84:e1:8c:08:
         ae:17:5e:c7:07:da:2d:f2:47:8c:4b:9a:18:0d:c6:84:1f:b6:
         30:f2:fc:13:3a:dc:04:6a:3a:67:3e:ff:fd:ab:b8:e9:ae:a1:
         72:c8:dc:f7:9f:7c:19:2c:38:68:b4:d6:39:76:ce:f0:ea:75:
         c4:23:a2:39:4e:49:8d:d9:10:cb:c1:64:af:ef:64:d4:05:fc:
         0c:87:11:3e:48:c0:5d:6b:bd:88:2e:e2:16:96:0c:0e:f0:c6:
         a5:b5:67:64:3d:e9:f3:2d:aa:32:b2:0b:97:1b:71:36:33:9a:
         12:7a:44:b3:12:a9:40:57:e0:e1:39:8a:bb:60:4d:90:47:3a:
         6e:eb:e2:1a:2a:ee:6d:d1:a0:2c:aa:df:aa:d9:34:d1:9d:66:
         d2:f9:a4:7c:7c:cb:96:a4:47:87:a1:c2:cc:66:9d:5b:62:f4:
         1b:f3:f9:cf:4f:b6:05:03:3d:5f:b7:f1:57:6d:b4:c2:33:c8:
         90:f2:9f:25:92:eb:b1:41:63:fa:fb:b6:1c:b4:49:35:49:13:
         07:c9:82:dd:5d:d4:b1:be:8b:77:f4:b3:bd:c0:68:cb:ef:d3:
         15:2f:34:69:88:55:36:cb:5a:6d:7f:6e:22:fa:39:6e:60:22:
         71:2c:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:06 2026 by rpki-client