Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mYALk4j_YJsz1ga7OmnN6MxLgH8.roa
File:                     mYALk4j_YJsz1ga7OmnN6MxLgH8.roa (raw, json)
Hash identifier:          v0Aiwq6F8eg9BaNp+vrH3bhIV9OMlL0KmNLK8+q2Pfg=
Subject key identifier:   99:80:0B:93:88:FF:60:9B:33:D6:06:BB:3A:69:CD:E8:CC:4B:80:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       112C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mYALk4j_YJsz1ga7OmnN6MxLgH8.roa
Signing time:             Sun 01 Mar 2026 02:12:36 +0000
ROA not before:           Sun 01 Mar 2026 02:12:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4396 (0x112c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:12:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=99800B9388FF609B33D606BB3A69CDE8CC4B807F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:50:11:94:0f:b2:f7:e1:ca:c7:11:ea:24:
                    96:56:f5:f5:03:8e:ef:83:17:5f:25:d1:99:d9:dd:
                    c4:1f:a3:7a:17:be:16:0f:05:97:76:8e:fe:2c:49:
                    62:61:69:8e:11:05:38:b4:59:37:35:4e:b2:e4:d0:
                    57:f7:45:89:14:33:a3:b2:31:94:43:b8:31:4f:ff:
                    0f:eb:8a:7f:15:71:86:4f:8a:82:95:92:da:ae:75:
                    b4:a4:9a:fa:e5:96:20:cd:4d:c5:40:c6:b8:fd:38:
                    b1:8f:29:02:d5:c7:8b:f8:9d:21:5e:3d:41:14:12:
                    bc:ff:8e:b5:11:7e:75:88:22:3f:8c:ee:0a:b0:ea:
                    98:95:19:b7:3f:40:5b:0d:5c:aa:39:f8:42:da:1f:
                    51:14:d5:58:7f:e2:8a:ea:05:c3:82:89:60:e2:ca:
                    6f:ee:f2:d5:cf:c4:d7:b4:09:43:31:79:49:ef:b6:
                    7e:d4:b5:f0:3b:af:7b:f7:4d:6c:51:2b:11:10:66:
                    81:4b:95:57:ba:3e:32:3e:18:4f:2b:d6:30:3f:68:
                    5f:23:b6:77:a8:cc:bf:d0:eb:41:8a:3d:b2:b0:5d:
                    1e:13:68:cd:73:4d:3c:ab:f8:23:0c:3b:e3:d0:83:
                    95:cf:8a:d4:ff:fe:cd:53:39:71:23:42:59:c7:7c:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:80:0B:93:88:FF:60:9B:33:D6:06:BB:3A:69:CD:E8:CC:4B:80:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mYALk4j_YJsz1ga7OmnN6MxLgH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:04:0e:9f:43:1a:85:39:25:5e:3e:a3:cc:1a:a3:94:0b:08:
         de:f8:7a:9a:04:67:37:dc:33:15:08:91:7a:fc:2f:6a:e7:21:
         ec:f4:1d:74:19:72:58:af:17:74:35:b5:b2:81:0f:21:b4:d7:
         2f:16:54:71:30:e1:17:98:df:5a:43:b7:38:85:9c:f4:f7:fe:
         1b:53:73:21:23:59:4a:21:ce:89:95:84:5f:46:b2:80:3d:8b:
         a0:12:6f:b5:4f:bb:f4:4a:21:5d:2c:84:7b:3d:0c:7b:0e:40:
         eb:c0:1e:fe:93:d4:3c:04:8c:c3:50:0b:1f:42:2d:96:f1:dd:
         90:86:ec:51:8f:22:5f:d6:d8:e3:13:6c:5a:4a:f0:f2:64:8c:
         13:73:6f:6f:61:8e:2e:7e:29:26:38:65:f1:1e:f5:14:0d:fc:
         71:81:90:2e:08:12:f8:5f:2c:0a:f5:2a:d7:5e:09:05:2f:1d:
         83:71:c8:f6:c8:7e:a8:0a:2f:f9:69:59:3a:26:ba:ae:2f:7e:
         b2:5d:8d:fd:4c:25:8b:47:33:4d:c4:66:fb:3a:06:d3:39:e9:
         60:10:11:ba:2f:67:7f:a3:47:60:0b:e5:1c:40:83:88:bc:15:
         bb:ee:ac:70:bb:2a:ff:20:cd:7d:d3:c4:6a:a6:88:17:2f:2a:
         45:82:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:49 2026 by rpki-client