Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
File:                     gl-sash2E5AVUMMXHtv5ke1UBus.roa (raw, json)
Hash identifier:          +dcZ+57CtuhEmwy8nGvBPGtnRFoki3w2d695cRf5Afg=
Subject key identifier:   82:5F:AC:6A:C8:76:13:90:15:50:C3:17:1E:DB:F9:91:ED:54:06:EB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1198
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
Signing time:             Sun 01 Mar 2026 02:31:13 +0000
ROA not before:           Sun 01 Mar 2026 02:31:13 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4504 (0x1198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:13 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=825FAC6AC87613901550C3171EDBF991ED5406EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:63:44:4a:91:62:24:65:e6:04:45:51:fe:
                    b0:d0:0d:89:8a:da:a0:1c:7a:75:a1:09:2b:77:fa:
                    07:37:3c:c6:92:e4:d2:88:5a:1e:43:c9:c5:dc:7c:
                    9f:eb:90:7e:14:81:45:07:ae:29:e0:9a:15:7b:3b:
                    54:a4:b3:fb:fd:25:00:dd:1e:e3:9d:3a:28:dc:a5:
                    13:c5:00:04:7c:40:6e:58:eb:ae:55:b2:ab:9b:44:
                    f0:59:ec:97:3a:7c:41:72:dc:e0:0f:8d:a0:57:ea:
                    5f:e8:ec:73:b0:1e:e2:fc:cd:a6:49:8b:e0:8b:36:
                    9f:c4:e3:10:05:0d:82:62:e5:e6:66:ca:ab:15:68:
                    d8:b9:22:da:a0:cc:8d:fb:b4:d3:4f:9a:09:79:fc:
                    5d:4a:75:a0:24:67:f9:9c:bf:ce:22:8f:fc:14:53:
                    7d:54:ea:a0:3d:cd:ba:17:ee:7a:a9:7b:ca:72:5f:
                    47:72:5d:e6:01:7a:15:04:51:2b:4e:db:5b:14:5a:
                    b2:8e:2e:93:51:5a:2b:d5:64:02:df:e3:66:01:79:
                    9e:9f:02:29:a0:b8:d5:19:24:78:73:06:f8:e5:7c:
                    4a:44:ee:db:ba:f7:5e:dd:d2:a9:43:e8:b7:0a:25:
                    21:3a:cb:bb:f8:f4:0f:75:81:88:d8:ce:48:61:6f:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:AC:6A:C8:76:13:90:15:50:C3:17:1E:DB:F9:91:ED:54:06:EB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gl-sash2E5AVUMMXHtv5ke1UBus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:05:a2:92:9b:cc:cf:b8:4a:54:b0:52:ab:d6:cb:42:a1:
         d9:8a:b7:a3:fb:51:e7:66:59:7a:ee:46:d2:4b:19:a7:25:89:
         3a:c5:64:ee:af:d2:41:9c:ae:de:9d:0e:c8:a7:6d:ee:7f:24:
         c4:cb:48:f9:75:7d:e9:e4:0e:28:6e:29:09:92:85:47:63:66:
         ea:2c:35:b6:6b:50:18:08:91:b4:69:dc:f4:37:39:be:77:04:
         da:96:e0:59:e4:06:a5:dc:20:20:0a:c9:2f:a9:d8:1f:21:f6:
         51:28:d3:5a:ad:02:02:6c:a6:c9:0f:99:1e:ca:1f:e8:73:c1:
         2b:ad:05:de:5a:2b:14:4a:10:c6:aa:47:39:98:b2:9f:26:6e:
         35:b7:a5:2b:47:c2:8b:83:eb:7d:d7:b3:92:cb:5a:75:d3:24:
         86:57:7e:30:27:53:6e:7f:a0:33:df:5a:f2:6d:0d:58:a9:c8:
         a1:6c:70:3f:c9:b7:89:60:8d:ac:7f:a7:06:d4:f2:70:37:b5:
         3a:d8:63:c3:93:d4:54:63:03:5e:a0:b1:a6:e9:d7:19:16:40:
         09:b7:e0:22:9c:be:ac:62:e7:f3:3c:1a:39:6f:78:a5:bd:85:
         4b:3d:ff:01:34:01:3e:66:f7:67:17:16:a5:cf:65:86:38:b3:
         9b:98:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:24 2026 by rpki-client