Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pBV-jXcmfhR_nIagitZUjL1ZgUk.roa
File:                     pBV-jXcmfhR_nIagitZUjL1ZgUk.roa (raw, json)
Hash identifier:          iaIICcadl0qpWoC45VY/JRQNXjlMFvfWRvFXMsLeAdQ=
Subject key identifier:   A4:15:7E:8D:77:26:7E:14:7F:9C:86:A0:8A:D6:54:8C:BD:59:81:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1115
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pBV-jXcmfhR_nIagitZUjL1ZgUk.roa
Signing time:             Sun 01 Mar 2026 02:07:27 +0000
ROA not before:           Sun 01 Mar 2026 02:07:27 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4373 (0x1115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:27 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A4157E8D77267E147F9C86A08AD6548CBD598149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:60:a1:63:69:18:86:a5:ed:f2:54:87:59:
                    58:33:e1:26:aa:7d:f2:14:de:af:70:70:e5:c5:13:
                    70:fa:b8:08:af:0d:e1:0e:56:49:d6:65:f7:28:f6:
                    9f:d4:a6:ff:63:1c:38:e1:d8:f3:61:a0:ff:63:c3:
                    02:5d:0a:ab:28:fc:0b:61:e6:35:0c:1a:fb:09:2d:
                    62:15:08:ca:fb:c0:c8:e4:21:5d:50:53:30:de:15:
                    55:cd:87:0c:f3:d5:a9:08:bf:fb:2e:17:f9:9b:ca:
                    bc:32:fa:65:d9:06:8e:5d:29:e4:d4:d8:d2:b9:8e:
                    82:ce:ca:b5:99:bd:b0:d3:cb:ea:35:0e:11:3a:e3:
                    d8:a2:9a:37:69:ed:88:37:62:17:0b:2a:da:68:5c:
                    82:78:df:46:b2:68:3c:3b:b1:0d:79:e4:87:6d:86:
                    05:d6:10:64:7f:bc:82:0f:b3:79:df:fe:32:b3:97:
                    73:e6:2b:2d:f9:55:d1:80:56:b3:b4:83:81:58:ed:
                    9f:9e:7b:67:d7:b8:33:51:16:cc:26:d8:70:a0:37:
                    20:46:2c:7e:b3:1d:bf:02:d2:8c:a1:89:66:7d:fe:
                    23:79:53:4b:bf:df:c0:ea:39:dd:09:6c:6f:31:0b:
                    c3:ce:02:d3:1e:fc:e8:29:4d:d7:63:91:9f:f0:2b:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:7E:8D:77:26:7E:14:7F:9C:86:A0:8A:D6:54:8C:BD:59:81:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pBV-jXcmfhR_nIagitZUjL1ZgUk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:69:78:03:d5:78:1b:bd:b3:03:16:27:e2:bb:32:52:c0:23:
         47:e8:90:9a:41:64:4a:f4:29:a4:5d:14:10:82:29:2f:a0:a3:
         b8:7b:14:cb:a6:48:4c:9b:1a:0b:ec:a0:98:e3:05:39:76:b9:
         89:48:fa:48:3b:22:26:f2:c3:5c:ce:22:b5:f1:0c:92:8e:13:
         ea:ed:4c:f4:43:11:b9:9b:ef:5a:d1:65:fc:78:96:b1:ac:dd:
         b7:1a:9a:27:d3:e2:11:dc:67:a8:99:4c:9e:03:51:e9:93:55:
         36:29:7c:e3:49:15:b7:af:8d:4d:b1:e6:c9:fc:8a:ba:ab:4c:
         f0:20:c8:6e:45:f3:b0:2d:07:49:82:b7:b0:3f:ea:d2:0e:88:
         37:d2:e8:9f:2a:90:73:4f:75:fd:e7:6d:55:c1:0f:9c:0c:66:
         ea:cf:77:70:9d:1c:4d:d5:37:f2:7a:85:e7:ba:e1:a1:dd:f7:
         8f:8a:56:9f:59:d3:99:d8:aa:c2:45:11:dc:83:82:ef:f1:8b:
         a7:b2:e9:b7:f2:ca:f1:4e:b7:07:83:2d:be:ed:9e:94:14:23:
         94:80:7d:f7:ba:c1:d6:fb:e6:d7:d2:cc:d5:53:27:2d:7b:50:
         22:82:c6:77:9f:8d:80:9a:a3:e2:dc:ed:54:63:10:c0:f2:d8:
         7b:20:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:12 2026 by rpki-client