Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qpD8DogEaeMTkM1ZmwvxmBYTscg.roa
File:                     qpD8DogEaeMTkM1ZmwvxmBYTscg.roa (raw, json)
Hash identifier:          lj2ikdXifgBNbovOqYyVbEBDeIDhZCBLPVsWZYc1coQ=
Subject key identifier:   AA:90:FC:0E:88:04:69:E3:13:90:CD:59:9B:0B:F1:98:16:13:B1:C8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12BA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qpD8DogEaeMTkM1ZmwvxmBYTscg.roa
Signing time:             Sun 01 Mar 2026 03:12:38 +0000
ROA not before:           Sun 01 Mar 2026 03:12:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4794 (0x12ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:12:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AA90FC0E880469E31390CD599B0BF1981613B1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:39:6c:78:d6:25:69:2d:7d:79:af:9c:5c:
                    ce:2c:c7:ad:71:f6:9d:d8:8d:18:1f:76:08:4a:bc:
                    9a:19:44:45:a3:63:91:da:ec:49:f4:0f:9a:0a:08:
                    32:f6:9e:09:af:26:51:6d:d3:b1:fe:1d:eb:c3:0f:
                    4b:50:6f:87:1b:01:60:e7:92:84:ed:5b:97:01:8d:
                    c8:59:da:35:22:73:18:19:ce:a8:1e:3c:01:d2:9b:
                    43:07:c7:9b:64:d1:46:12:79:9d:ec:dd:08:4d:a5:
                    cf:6a:a0:81:35:80:e2:44:23:22:ca:4a:8d:00:bb:
                    65:89:d0:6b:08:40:85:1d:38:f9:e8:9c:a7:40:cc:
                    2a:d5:74:b2:30:95:2c:05:09:1b:d5:45:c5:69:96:
                    0e:18:6c:6c:c8:c4:ca:1b:de:d3:da:fb:23:7d:99:
                    36:8c:4f:b1:8d:c4:60:5e:3a:26:78:e3:75:d4:40:
                    94:74:e7:ea:4c:78:57:29:62:23:cb:69:c3:30:e9:
                    97:38:a2:39:7c:e5:b2:18:a7:27:be:92:8d:6a:9a:
                    0f:7f:ed:31:de:c8:1c:76:45:62:73:a5:e0:22:f6:
                    0c:bf:4e:c7:e5:25:91:dc:d6:8a:59:94:14:0f:2f:
                    ab:e4:50:c4:e9:6a:6d:06:e7:8f:5d:25:21:3e:3a:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:FC:0E:88:04:69:E3:13:90:CD:59:9B:0B:F1:98:16:13:B1:C8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qpD8DogEaeMTkM1ZmwvxmBYTscg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:f4:8c:93:13:17:f9:f7:cf:c9:f9:cf:e7:60:d8:3a:aa:
         d0:0b:5b:5f:c1:e6:8b:78:09:86:63:b1:b0:6a:55:2a:09:64:
         0d:ec:1e:6a:49:6e:10:47:65:55:2a:4c:d0:b8:dd:e9:88:fc:
         fe:c5:9d:d9:b8:a0:4b:50:42:87:1e:61:8e:c1:43:4f:26:82:
         95:76:0f:88:da:16:89:15:e2:38:e2:ec:7c:32:c4:2d:b1:3d:
         55:45:75:f1:21:46:75:90:30:5f:72:b4:71:5a:ec:d1:db:41:
         83:fb:38:c6:79:ab:ac:c1:48:4e:3a:12:a7:a1:62:62:b5:a9:
         1f:e7:e2:be:82:95:e9:30:2b:2f:bf:8b:6e:16:df:c2:89:da:
         11:0b:fb:bb:cd:b9:68:bf:e6:f3:54:45:db:c9:ba:83:01:0c:
         9b:e5:5c:f1:cf:77:83:04:b1:fd:08:47:b7:bf:d1:1e:b1:34:
         e3:ec:c4:23:3d:25:d5:fb:58:ea:c1:71:d6:ce:4c:50:45:d2:
         94:ad:27:da:6c:d9:0d:22:f2:ea:09:c3:a5:92:5b:f2:ac:86:
         5b:c3:e3:91:cf:2d:23:65:88:9d:4c:1f:18:87:42:2c:a0:23:
         da:c1:d4:ad:e6:39:88:b3:68:e6:2f:fa:c3:ee:14:6b:98:5a:
         46:21:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:31 2026 by rpki-client