Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jID5-eJjR6LBDBo32hRwG7s7dN0.roa
File:                     jID5-eJjR6LBDBo32hRwG7s7dN0.roa (raw, json)
Hash identifier:          sjWM35ynITpgS/npH1KS8tiBU24j5RvGA+QhPTW3EM8=
Subject key identifier:   8C:80:F9:F9:E2:63:47:A2:C1:0C:1A:37:DA:14:70:1B:BB:3B:74:DD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jID5-eJjR6LBDBo32hRwG7s7dN0.roa
Signing time:             Sun 01 Mar 2026 03:12:32 +0000
ROA not before:           Sun 01 Mar 2026 03:12:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4782 (0x12ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:12:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8C80F9F9E26347A2C10C1A37DA14701BBB3B74DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:2a:fe:e8:cb:de:a6:a4:bf:02:e1:12:16:
                    e6:b2:51:d2:9d:f4:b2:a5:be:54:40:c9:75:15:bd:
                    54:0f:cf:5e:d8:aa:65:17:9f:69:f7:ab:51:91:4c:
                    57:bb:1d:8e:73:e5:c3:c8:c9:73:fa:5e:26:88:4a:
                    fb:2b:a7:5d:89:d3:d1:7a:1c:78:5e:dd:dd:88:4a:
                    5e:24:91:b4:cf:a7:3f:22:a0:1f:d3:37:76:0b:a3:
                    a3:fe:a6:1f:31:bb:0a:e8:1a:95:00:96:b9:26:7c:
                    ea:86:bb:31:23:69:8e:85:7f:0c:f7:12:35:57:93:
                    87:f4:df:18:c5:50:b4:e2:0d:ea:59:21:61:64:2d:
                    e6:3b:99:38:0d:e5:a3:da:93:35:06:86:7a:16:eb:
                    a4:08:7c:10:87:d4:32:e1:3b:96:c7:44:4c:35:61:
                    e1:0b:00:69:64:5f:31:81:5c:4e:16:f8:4b:2d:14:
                    58:1f:5a:7b:a5:94:5c:f1:7e:87:a0:33:75:c7:c1:
                    f9:cd:41:cc:1f:d7:e7:ca:d5:4c:cf:f8:62:da:c4:
                    00:91:48:1e:1d:69:29:a4:45:fa:a6:d4:24:59:ea:
                    34:11:7d:e3:3c:b7:c4:2f:c1:97:83:7c:aa:49:e9:
                    39:8e:66:1a:e1:2c:ce:ba:6b:e9:ed:82:65:92:cf:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:80:F9:F9:E2:63:47:A2:C1:0C:1A:37:DA:14:70:1B:BB:3B:74:DD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jID5-eJjR6LBDBo32hRwG7s7dN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:df:e5:0f:fd:67:39:0a:72:07:39:51:98:18:14:30:1d:
         11:94:32:f4:ed:51:31:78:ab:4d:2e:7d:eb:33:82:53:60:35:
         30:ab:18:2e:4d:a4:13:f5:e5:c1:a0:7c:33:ec:22:8e:d3:a6:
         e8:e3:0e:99:1e:30:99:70:4d:53:86:b0:b2:d1:b2:11:b4:d2:
         8a:d7:cd:eb:a5:e2:03:30:c2:f2:64:e9:67:9e:d9:8e:97:25:
         80:c3:ba:a9:ce:ee:9c:3f:f3:61:b2:61:ad:d7:81:a2:27:a6:
         4b:80:a9:6a:82:32:34:16:47:2b:d9:02:f2:ae:4c:2a:bc:30:
         ff:93:69:29:ce:42:b9:a3:59:8a:b2:c6:9a:44:9d:bb:a5:3f:
         44:b4:ef:db:9c:57:11:c6:d5:8d:7e:cb:57:a9:d1:4b:19:4a:
         13:75:f2:be:45:eb:6c:ad:b9:e5:bf:d1:e0:b0:2c:67:f8:e7:
         4e:a3:58:ea:dc:bf:92:13:72:bd:ec:b6:02:16:43:71:81:28:
         6e:4a:cb:05:98:63:c0:3b:89:35:3f:4a:b9:76:ca:fc:62:5a:
         6e:32:19:d0:c4:2a:14:4d:c2:e8:68:e3:6f:55:d0:6d:3c:5d:
         31:05:c3:b8:8e:c9:f2:de:e0:18:ee:3d:3b:9b:e2:b0:08:71:
         6a:75:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:00 2026 by rpki-client