Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bzGnwiFj7Dw45HA7ChsLhovxs24.roa
File:                     bzGnwiFj7Dw45HA7ChsLhovxs24.roa (raw, json)
Hash identifier:          J4TwVVLgBY6kDY0dBoNg4ULFo/dLSni+LTZ3n4SNTMY=
Subject key identifier:   6F:31:A7:C2:21:63:EC:3C:38:E4:70:3B:0A:1B:0B:86:8B:F1:B3:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1220
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bzGnwiFj7Dw45HA7ChsLhovxs24.roa
Signing time:             Sun 01 Mar 2026 02:52:20 +0000
ROA not before:           Sun 01 Mar 2026 02:52:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4640 (0x1220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:52:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6F31A7C22163EC3C38E4703B0A1B0B868BF1B36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:96:a0:de:07:4d:b1:78:b7:7e:8f:ca:be:
                    42:35:e5:67:b0:12:a8:47:d8:78:80:2c:b9:d8:fe:
                    56:b6:32:42:9f:4a:70:b5:b3:b5:87:2f:4c:97:f9:
                    1b:0d:8d:28:b9:a9:ca:6e:53:62:4e:c1:f3:41:0b:
                    21:9c:f9:93:10:be:c0:33:5e:a7:52:25:ab:23:b1:
                    74:0c:e6:0b:74:13:e6:6b:bb:4e:b2:8f:e2:b3:dd:
                    db:f4:44:68:ab:a5:1d:2b:20:e5:6d:b4:4a:f8:60:
                    26:93:11:1b:29:ea:1e:4c:10:c8:15:4b:b5:41:db:
                    10:b7:27:ce:03:53:40:4a:06:8f:f4:2d:87:1b:ef:
                    ef:92:9b:ff:df:bc:ab:f3:06:42:cc:bc:30:e8:fc:
                    6e:0a:42:7c:f5:b0:84:31:b8:a7:68:a2:bf:a6:aa:
                    0e:fc:b1:f2:08:f6:96:ee:13:86:69:42:15:3a:dd:
                    54:17:1f:9b:07:88:a6:93:16:e9:4e:ef:f9:71:bb:
                    81:41:e3:51:6a:f5:bd:6d:81:cc:45:0c:e8:c9:20:
                    f6:05:7c:ef:0d:4d:a4:4c:a9:52:24:75:03:13:e2:
                    bc:40:af:5a:ea:79:9f:6c:d5:0b:89:7e:4a:72:d1:
                    b3:49:e2:33:8e:a0:db:41:95:e0:10:ea:8e:c3:c8:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:A7:C2:21:63:EC:3C:38:E4:70:3B:0A:1B:0B:86:8B:F1:B3:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bzGnwiFj7Dw45HA7ChsLhovxs24.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:00:ba:97:a3:20:3e:cb:67:82:66:d9:48:b9:23:bc:e6:a4:
         85:b7:7b:8f:53:7c:33:21:35:60:ad:27:51:c6:98:5d:13:ee:
         d0:3b:b0:6c:04:a2:96:db:99:30:96:81:fd:19:ac:1f:07:a8:
         0f:4e:e1:67:73:99:24:ab:be:0d:3f:bf:e4:3d:28:9d:61:71:
         48:ff:84:f2:f7:4a:15:fa:b3:89:57:32:fe:31:a8:92:99:cd:
         83:69:40:34:3b:0a:a1:de:13:0d:95:4e:15:7c:7f:88:97:8c:
         ff:3b:f7:84:cb:65:6f:e2:b1:8f:fc:c4:24:23:a6:94:48:b0:
         34:47:f3:2b:55:43:63:7b:7d:fc:07:fd:ea:d2:20:09:7d:e4:
         9b:39:7c:de:c0:36:96:16:d9:2c:52:00:c1:90:2c:16:ac:d9:
         d2:01:fc:44:34:40:2a:90:ab:62:5a:15:08:5b:e6:0c:08:aa:
         bc:62:50:03:47:6d:40:4f:7f:fd:4f:8d:03:6f:44:a4:9c:c8:
         bd:2a:6e:3a:10:37:2d:68:7c:19:99:a0:74:cb:5f:f5:2d:69:
         0c:73:95:52:fe:2a:b8:c3:55:97:c5:22:66:70:aa:ba:01:db:
         15:a6:1f:d7:c0:f1:45:3e:04:e3:95:f5:d2:82:dd:51:47:a7:
         dc:05:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:30 2026 by rpki-client