Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c4zujgMKT20GW3s2e8SZw8lKjZA.roa
File:                     c4zujgMKT20GW3s2e8SZw8lKjZA.roa (raw, json)
Hash identifier:          rs7nXwG/zr8TcxY87sz9vMe7D+uJD/q/a8w5oP8YgfQ=
Subject key identifier:   73:8C:EE:8E:03:0A:4F:6D:06:5B:7B:36:7B:C4:99:C3:C9:4A:8D:90
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       8F
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c4zujgMKT20GW3s2e8SZw8lKjZA.roa
Signing time:             Sun 01 Mar 2026 02:21:50 +0000
ROA not before:           Sun 01 Mar 2026 02:21:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        146.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar  1 02:21:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=738CEE8E030A4F6D065B7B367BC499C3C94A8D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:41:e5:4e:f1:52:bf:13:7f:25:68:a9:62:
                    d9:5b:96:0e:ad:9b:9a:71:4c:0e:ab:f1:fc:49:3d:
                    3a:d5:af:04:b2:c2:ae:46:00:f8:05:53:f6:d8:b5:
                    1e:98:34:88:34:fa:98:38:15:ce:97:da:56:3b:17:
                    61:dd:65:36:dc:4d:d2:c3:a7:aa:d7:84:1a:b1:e7:
                    6a:26:5e:af:e9:7a:ae:d0:e8:60:40:da:fe:73:ba:
                    83:c0:7b:69:26:df:da:68:19:d7:f6:b2:a3:6f:55:
                    5a:6e:70:f8:7b:3b:ac:06:de:9f:b2:78:2e:08:cf:
                    e4:4a:6b:4e:63:eb:ae:19:bb:68:53:8c:4f:21:29:
                    01:a6:04:6b:83:6a:0d:99:86:4e:08:b2:7b:aa:af:
                    36:e4:6c:fd:96:65:0b:65:24:05:17:17:02:6e:58:
                    fd:77:d0:08:1b:76:b7:f0:4e:f3:b1:14:9a:0d:18:
                    4a:a2:54:a3:cc:ad:12:76:56:5f:4e:0b:c0:fb:6a:
                    ee:87:cd:ee:73:de:15:10:4b:80:05:63:62:7d:58:
                    43:53:42:21:4e:a8:12:37:9b:10:ea:41:8e:6e:a3:
                    fa:7a:b2:4c:98:b8:2a:46:c2:0b:3c:35:57:f3:6f:
                    43:14:15:fc:c1:ed:eb:28:93:c1:d7:23:68:0d:1c:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:EE:8E:03:0A:4F:6D:06:5B:7B:36:7B:C4:99:C3:C9:4A:8D:90
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c4zujgMKT20GW3s2e8SZw8lKjZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:84:79:69:c4:da:ab:de:19:df:70:e7:82:7a:27:e9:c4:
         cd:87:30:80:13:0c:a1:1f:df:df:5a:69:36:9f:5f:ba:61:31:
         54:32:5a:74:68:ea:88:af:cd:38:54:db:d6:6d:3b:d3:e9:52:
         0f:f2:35:bf:8f:c8:de:8a:f5:9a:57:61:34:81:90:ec:95:a8:
         c1:ab:a2:bc:8f:c4:41:36:76:da:82:b8:02:d0:2e:1a:38:67:
         30:d8:31:08:b1:23:6e:b3:3b:f9:23:89:de:a8:dc:f8:90:91:
         ff:66:cb:8f:a8:54:7a:e3:22:3d:ac:cb:a7:1f:64:ec:03:cb:
         ba:72:69:6b:24:b9:be:a0:35:e4:53:60:35:ac:d2:c7:5c:c4:
         b0:bb:55:22:39:12:eb:73:9d:aa:56:89:29:56:e7:36:b7:d6:
         17:8c:aa:36:97:aa:cd:90:1b:71:e4:d5:5b:08:78:db:28:d9:
         48:18:38:3d:64:d0:eb:4a:8c:f5:e7:b3:81:60:e7:b1:3f:11:
         6d:bf:42:36:b6:ce:a1:04:5f:17:05:f7:d3:e6:f7:71:87:02:
         3c:c3:70:fc:76:7c:de:a2:16:e2:33:e2:2a:6e:79:4f:84:2f:
         98:ed:2f:d2:24:85:2a:cb:06:12:7b:34:d5:56:06:0e:2e:4c:
         d0:ab:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:23 2026 by rpki-client