Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qaRJC4P6ZFin1-nuVmtPHlFC14M.roa
File:                     qaRJC4P6ZFin1-nuVmtPHlFC14M.roa (raw, json)
Hash identifier:          TF++cFZJ9oj8g+0xHYJkhz+dLTxre+UCJCBL00BukvU=
Subject key identifier:   A9:A4:49:0B:83:FA:64:58:A7:D7:E9:EE:56:6B:4F:1E:51:42:D7:83
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10A6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qaRJC4P6ZFin1-nuVmtPHlFC14M.roa
Signing time:             Sun 01 Mar 2026 01:44:52 +0000
ROA not before:           Sun 01 Mar 2026 01:44:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4262 (0x10a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A9A4490B83FA6458A7D7E9EE566B4F1E5142D783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:50:a4:11:74:c7:bd:78:c3:6d:8c:e3:0a:
                    ce:5a:04:5f:2b:8d:ae:51:66:39:4c:df:89:59:bc:
                    98:ce:ec:82:96:4b:d2:a4:bb:53:5b:96:f3:25:8c:
                    87:e9:91:b9:b2:a5:b8:14:2e:7e:aa:5b:a9:9e:ee:
                    ba:31:96:e4:a3:dd:c0:db:51:86:fb:c1:76:52:ea:
                    98:47:d7:79:a1:06:f3:aa:f7:57:a1:dd:af:da:ee:
                    3e:98:f5:ee:20:7f:ef:47:7e:b2:c4:b4:b3:7a:13:
                    49:10:69:34:c1:2c:7a:45:6a:d9:8e:d9:2a:59:7b:
                    7f:cd:cd:19:87:81:45:82:a5:56:29:91:69:07:b1:
                    4c:fc:71:e4:68:dc:b2:81:b3:87:26:a5:da:fe:b8:
                    09:c6:9f:b3:71:fc:ae:5d:e2:ac:93:8b:86:2a:20:
                    e2:c1:47:35:92:59:55:c1:d1:5c:f8:f1:ac:82:8f:
                    cd:79:37:ea:88:8c:ce:38:37:02:4d:88:3f:64:37:
                    91:e1:84:66:11:af:17:b7:ac:cc:9e:d4:81:bc:bc:
                    a7:82:a6:a3:c5:64:41:2f:b3:f6:04:4f:9b:11:7a:
                    ef:1c:35:0f:5a:73:bf:6a:a2:b3:cc:66:55:04:8b:
                    6f:12:84:7e:b3:d2:3e:c9:92:ea:80:53:5d:76:0b:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:49:0B:83:FA:64:58:A7:D7:E9:EE:56:6B:4F:1E:51:42:D7:83
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qaRJC4P6ZFin1-nuVmtPHlFC14M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:57:79:94:12:24:23:1a:d6:83:48:f9:0d:78:4d:bd:11:44:
         5b:31:1a:8c:e8:7c:03:40:f5:bf:ca:b5:37:ed:68:91:90:47:
         05:d5:71:43:11:e5:69:8a:06:94:cc:70:b5:2b:91:b9:97:bd:
         bc:b3:8b:e7:99:c7:1d:18:de:8a:e2:ed:59:c8:d7:99:44:3f:
         d8:f9:62:c7:18:7d:85:a6:42:9a:89:5a:f7:bb:96:91:40:ee:
         9a:55:4d:d4:cb:1a:46:a4:ba:ba:f1:68:20:4a:5d:fb:8a:3b:
         8c:9e:29:6e:67:53:b4:5c:1b:d5:2e:7c:b2:e4:eb:45:75:fa:
         38:d6:cb:93:e5:62:36:1a:de:e9:2d:12:a2:1a:80:bf:5a:49:
         29:dc:70:3c:db:47:b9:fc:12:6f:ac:e5:09:59:1b:43:c0:11:
         ea:b0:55:48:c9:7e:17:f9:ee:7d:bd:4e:13:14:f6:9b:12:b4:
         eb:2d:b3:86:16:57:db:d1:00:5c:ee:a5:7b:b3:56:bd:77:fc:
         69:ff:bf:3e:c4:b0:9c:1a:82:ff:8a:53:5d:97:a6:fd:d9:ee:
         96:2b:28:63:6d:6e:26:a8:d9:57:34:d9:35:6d:5a:54:fe:48:
         e8:a7:bf:1a:30:21:23:25:d1:13:c3:44:a3:36:ef:93:fa:57:
         f0:3c:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:01 2026 by rpki-client