Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
File:                     jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa (raw, json)
Hash identifier:          VIh7FjOJZ+RWWZ6tR9Bmy9N7Qs9IXlSw9z34KVvV3uM=
Subject key identifier:   8E:31:65:46:DE:48:A1:AD:DE:D0:38:56:99:75:A5:93:0D:AC:77:D0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10C1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
Signing time:             Sun 01 Mar 2026 01:54:37 +0000
ROA not before:           Sun 01 Mar 2026 01:54:37 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4289 (0x10c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:54:37 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8E316546DE48A1ADDED038569975A5930DAC77D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:73:64:33:2a:26:eb:b0:3b:dc:93:9d:b0:
                    24:72:59:39:48:0c:76:45:79:ac:90:b4:92:6f:49:
                    d2:2f:33:bc:64:29:e1:ae:c5:8d:ad:68:d5:44:0e:
                    7b:c3:41:ba:62:e6:2c:9d:4e:a8:07:61:52:1e:b9:
                    e7:58:85:f2:46:57:ad:c9:7c:5a:83:1c:30:0a:80:
                    ae:fb:26:5a:ee:c7:5d:ef:b5:e2:88:57:b3:f9:dc:
                    5f:eb:78:23:ae:3e:a0:1d:36:c0:74:37:a2:db:0b:
                    28:89:36:08:15:b8:4c:7f:fa:aa:3c:1f:24:bb:8d:
                    50:db:d0:8c:56:39:7b:cc:38:59:91:7c:5b:87:59:
                    29:74:43:42:42:60:af:7e:de:ff:51:b1:74:ec:b7:
                    e5:a6:c6:0a:9e:79:4d:f5:11:f8:ac:79:ed:b8:6d:
                    6d:e8:05:92:f2:48:a2:c9:eb:c7:39:2a:e9:3b:d6:
                    97:f3:93:e2:78:68:56:7c:56:c2:56:63:ae:a0:39:
                    f6:46:b2:23:f3:8d:23:0e:c5:54:a2:a8:c6:56:5f:
                    6e:82:c0:50:0e:09:0a:c1:de:b4:f4:2a:05:74:7f:
                    fd:d8:bd:93:c0:dc:0a:8e:35:74:49:1a:c7:63:7a:
                    87:8c:d4:36:24:71:9e:d5:81:01:8e:b1:c6:ca:16:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:65:46:DE:48:A1:AD:DE:D0:38:56:99:75:A5:93:0D:AC:77:D0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jjFlRt5Ioa3e0DhWmXWlkw2sd9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:93:1b:31:f0:9f:2a:79:8f:6c:92:39:e8:f7:b0:51:6a:
         8e:7c:19:1d:2c:e3:6b:54:d7:88:79:3a:4b:a6:7d:ba:bf:03:
         d0:cb:f1:e1:89:ad:d0:18:98:0f:02:22:e0:b4:03:e8:e7:35:
         8d:47:58:80:dd:b4:03:3f:17:35:8a:aa:c5:bc:af:af:97:7d:
         98:ac:ed:02:de:d8:13:26:82:6c:1a:dd:00:42:a4:9f:16:6d:
         e0:57:7b:5d:22:92:50:8b:cc:8d:e1:20:2b:93:4d:9c:48:42:
         c1:eb:cb:ef:09:8d:f8:76:0b:26:7a:8d:88:c2:c6:5f:63:81:
         94:42:b2:8a:42:a9:59:03:28:84:d0:74:55:a8:ec:b5:31:98:
         42:a2:43:fb:a7:8c:ec:25:a4:a3:d1:76:56:4f:92:8c:1b:ea:
         4a:8b:2c:10:84:a4:5e:3e:d6:38:fd:3e:bc:9e:75:0c:ed:36:
         c1:db:0a:68:d9:a2:81:a8:c4:1d:52:16:38:87:a9:ee:56:c2:
         74:af:55:33:36:de:6f:e8:9b:34:9a:f7:d3:67:a9:7a:b4:e7:
         4d:22:7e:67:05:b3:3b:4e:45:19:72:3a:0c:4e:0a:fb:fa:3f:
         0a:c1:83:f2:33:bc:3d:5b:35:0e:e7:d2:51:1d:0a:c2:93:27:
         92:57:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:06 2026 by rpki-client