Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjZdy58EHxeXsU6CX11STWVA4M4.roa
File:                     pjZdy58EHxeXsU6CX11STWVA4M4.roa (raw, json)
Hash identifier:          xfQQNCYcm6qvMJDshGly5429p7WRnLC7/If+dUcD/+I=
Subject key identifier:   A6:36:5D:CB:9F:04:1F:17:97:B1:4E:82:5F:5D:52:4D:65:40:E0:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       127A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjZdy58EHxeXsU6CX11STWVA4M4.roa
Signing time:             Sun 01 Mar 2026 03:04:38 +0000
ROA not before:           Sun 01 Mar 2026 03:04:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4730 (0x127a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:04:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A6365DCB9F041F1797B14E825F5D524D6540E0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:9f:a8:89:1b:b3:5b:fc:22:36:ca:73:93:
                    59:1c:97:dd:66:55:17:0f:6a:dc:6d:ff:ef:fa:3c:
                    4e:40:ad:9c:b2:28:97:ba:29:ac:a4:c6:23:ef:a0:
                    ec:a5:bc:69:95:40:a0:ca:9b:64:28:81:10:28:2f:
                    f2:d6:b5:26:fa:e4:c0:ae:07:70:c0:82:f1:d7:d7:
                    89:7e:58:49:88:5d:3e:08:e0:fd:94:b7:0d:ea:1c:
                    ec:37:32:9a:2c:98:55:1d:c3:5e:25:3b:47:0b:f2:
                    8a:32:21:96:d6:63:dc:2e:7c:5f:51:07:28:41:7c:
                    d3:59:ad:56:4a:bf:f2:71:b5:66:c2:2a:66:01:6b:
                    ab:13:9b:c6:e5:17:98:3c:e6:2e:42:fd:a4:02:b6:
                    1b:51:df:22:e8:17:18:eb:a7:65:25:35:13:03:f2:
                    20:a1:f6:63:dd:ba:41:77:51:e2:91:15:5b:3a:11:
                    96:65:b4:a3:f6:be:1e:c8:bb:13:6a:ca:cc:3a:f8:
                    fb:16:d8:54:1e:ef:27:d7:f0:18:8c:c9:fe:32:2a:
                    4d:fa:0f:ec:01:37:c2:ac:1e:73:ef:55:34:e5:40:
                    9b:25:d3:82:a4:f2:ec:20:99:54:b6:95:8d:9f:58:
                    5e:bd:79:7f:6f:11:a4:8b:d2:96:49:a2:18:be:94:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:5D:CB:9F:04:1F:17:97:B1:4E:82:5F:5D:52:4D:65:40:E0:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pjZdy58EHxeXsU6CX11STWVA4M4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:b4:aa:2b:d9:44:99:3f:73:70:7a:90:21:55:2a:9a:f8:
         3c:4f:0e:82:1e:2f:d1:00:bb:dd:5c:92:cf:34:eb:97:c7:ea:
         d6:2c:4d:45:56:76:f0:fc:36:b2:60:37:63:f3:aa:e4:bb:b9:
         5c:4b:18:0e:a1:0f:a8:bb:21:47:e8:f4:a8:dd:ce:a5:08:8f:
         39:9f:10:c3:f8:a1:df:de:44:f1:42:5b:1c:15:65:fc:1a:61:
         28:5d:31:0b:10:ce:c3:50:7a:27:4a:48:3f:fa:b2:10:6c:88:
         e9:7c:ca:67:15:95:9f:98:3d:12:c9:3b:f0:12:18:9d:ae:71:
         27:fe:12:2d:0a:cc:1e:cb:4e:a2:18:76:bb:93:c8:c4:87:4b:
         c0:3a:8e:e5:ce:86:6c:be:e8:94:10:3b:c0:8e:62:82:33:9f:
         65:35:87:5f:47:5b:33:0c:0d:f7:4a:2d:77:9d:52:ad:09:8b:
         0f:88:e2:a1:8e:66:a9:9e:a2:85:10:5d:d9:78:dd:e5:92:f3:
         1b:ed:2b:24:83:8a:f8:6c:ff:d0:a5:f1:af:64:cb:b8:00:e4:
         74:01:5a:86:6c:84:d3:91:29:b7:a1:ab:11:d8:09:da:c7:29:
         7a:a0:31:85:c6:f9:89:e9:cb:0a:4d:d6:1e:41:85:37:b4:a2:
         d0:30:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:38 2026 by rpki-client