Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pyZdzr7LYu-temKJDKQ3HLJskts.roa
File:                     pyZdzr7LYu-temKJDKQ3HLJskts.roa (raw, json)
Hash identifier:          TqHoZLnzaIawWmkzNpcqyfOViP+kGn1Vl/8suxgZoXM=
Subject key identifier:   A7:26:5D:CE:BE:CB:62:EF:AD:7A:62:89:0C:A4:37:1C:B2:6C:92:DB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11F0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pyZdzr7LYu-temKJDKQ3HLJskts.roa
Signing time:             Sun 01 Mar 2026 02:44:32 +0000
ROA not before:           Sun 01 Mar 2026 02:44:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4592 (0x11f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A7265DCEBECB62EFAD7A62890CA4371CB26C92DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:f6:f8:0f:67:5c:80:c0:3b:2c:49:e9:3e:
                    91:67:5d:a4:ff:55:58:50:de:13:fa:3d:86:2c:10:
                    ca:67:08:ea:52:17:74:4e:6b:f0:0a:dc:50:96:48:
                    8b:ba:cb:f1:9b:f9:4e:b3:e5:fe:83:e7:40:03:ac:
                    75:e1:ca:ff:3e:c5:68:ad:74:1c:15:1d:cd:a1:31:
                    28:d2:59:9d:8d:a1:b2:94:48:3d:c0:32:73:97:bb:
                    c8:29:fe:4c:eb:9e:88:62:bd:d4:92:e4:0a:fa:25:
                    99:d1:e0:91:46:db:16:4b:5e:1f:89:5e:51:54:66:
                    fe:e5:82:fa:6a:7a:a1:c5:10:d8:45:68:be:e4:57:
                    d4:5d:39:9e:d7:0c:9c:e3:6b:57:38:d3:78:25:9b:
                    d5:b3:5e:40:00:f3:9f:5f:e5:d1:64:1f:c0:e6:df:
                    25:d1:02:7a:6e:18:ca:89:3b:9e:72:92:72:e6:92:
                    43:46:21:b3:fc:fd:a8:97:90:6d:d2:a7:5f:7a:5f:
                    cb:b8:dc:8b:b5:17:6f:15:d5:ad:0c:18:da:9f:24:
                    3f:d6:6e:ef:76:d0:9f:63:dd:6c:dc:c6:a7:33:2d:
                    cf:55:20:41:af:a9:3c:56:9b:b8:4f:d4:53:cf:68:
                    ab:fb:4c:68:1e:fd:89:0d:c8:21:1a:75:00:7e:ba:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:5D:CE:BE:CB:62:EF:AD:7A:62:89:0C:A4:37:1C:B2:6C:92:DB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pyZdzr7LYu-temKJDKQ3HLJskts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:a1:fd:b0:e7:85:a2:9d:2b:d6:c7:d5:19:dd:85:66:48:2c:
         35:1c:b8:90:aa:6c:dd:bc:04:23:63:2c:0f:36:cf:f9:c6:b5:
         35:15:56:d2:0a:3a:b1:35:53:f0:0f:8a:ed:85:d1:bc:7b:d9:
         00:cf:97:9e:33:1b:5d:b0:2d:57:25:7a:b0:b4:6d:9a:00:d6:
         c0:7f:5e:51:a6:df:96:27:87:b1:4f:d1:b7:ec:8a:fb:3d:0c:
         89:2a:42:28:74:03:b0:53:98:56:b1:58:94:b5:20:fa:d3:b4:
         aa:0f:48:50:6b:5f:f0:24:55:a0:73:a9:89:22:62:7f:55:c7:
         4e:c6:70:6b:b3:7e:93:ec:e7:b9:02:4c:f8:fc:d5:59:d5:84:
         66:21:4c:d2:73:e0:ab:b3:cf:c6:40:14:22:2c:31:f0:c5:3d:
         d5:48:ca:30:45:69:d2:c5:ca:2d:10:ec:f6:91:04:89:5b:0f:
         26:10:ea:68:9a:f2:a8:21:3f:eb:4f:a1:84:c4:19:4d:8c:b6:
         25:5b:1b:b7:6a:16:92:14:69:70:c1:70:39:b9:fa:75:b8:be:
         70:30:aa:fb:dd:5f:e1:21:87:ea:7e:a0:81:ae:0e:33:55:a6:
         d4:cd:4f:26:a6:af:fd:cb:ea:b9:72:e0:ac:5c:2a:f8:57:6d:
         3a:35:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:19 2026 by rpki-client