Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s6JRq3cwyPZ43HQOZtfLJ1Op2ak.roa
File:                     s6JRq3cwyPZ43HQOZtfLJ1Op2ak.roa (raw, json)
Hash identifier:          DNGw9cJgfppq7v/gQNsRB1kQ3JXdySY7JJbq6UaoYB8=
Subject key identifier:   B3:A2:51:AB:77:30:C8:F6:78:DC:74:0E:66:D7:CB:27:53:A9:D9:A9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1299
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s6JRq3cwyPZ43HQOZtfLJ1Op2ak.roa
Signing time:             Sun 01 Mar 2026 03:08:45 +0000
ROA not before:           Sun 01 Mar 2026 03:08:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4761 (0x1299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B3A251AB7730C8F678DC740E66D7CB2753A9D9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:34:36:1b:7f:0f:8d:83:fb:b0:09:17:1d:
                    82:ba:d4:7c:00:68:d2:61:cd:7e:58:f8:6e:ba:e4:
                    6a:75:37:dd:5e:00:a9:94:60:56:24:8f:00:c8:4d:
                    d5:36:29:50:95:eb:cf:c7:af:92:b4:e1:f8:ac:89:
                    29:74:c2:95:d2:11:e2:f2:44:90:ab:14:17:2b:02:
                    bb:a9:49:dd:a4:ab:e7:11:ad:5e:ea:56:9c:7d:2d:
                    65:76:c4:d3:85:d1:eb:67:9f:5e:f7:67:d6:ce:82:
                    65:f0:9f:dd:e8:d6:e8:cc:7f:7a:43:a1:1d:f4:4b:
                    86:c1:31:ab:42:63:91:e7:fc:5a:6c:07:9b:72:f5:
                    98:5e:88:28:cb:83:1b:bb:4a:d1:24:1a:fb:02:ce:
                    24:a6:65:12:ca:ac:d4:77:6d:e5:ea:01:66:0b:33:
                    5d:77:97:cd:d3:46:77:25:90:54:b3:c1:1c:ba:2f:
                    e9:b8:ce:94:aa:a0:eb:8a:7e:b7:2b:31:bf:67:b3:
                    68:35:41:81:a1:68:17:37:fb:09:7b:2f:52:7b:69:
                    b8:33:89:3f:dc:0a:a5:23:bf:71:45:3b:7e:db:39:
                    cf:4b:9f:00:38:6c:2a:85:e8:6a:c5:18:82:4a:1e:
                    03:4a:1a:d3:1d:22:32:17:93:5f:5b:1f:c5:c5:a8:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:51:AB:77:30:C8:F6:78:DC:74:0E:66:D7:CB:27:53:A9:D9:A9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s6JRq3cwyPZ43HQOZtfLJ1Op2ak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:79:48:00:a1:06:b7:70:87:c5:39:f3:bf:8e:9a:72:52:
         f1:5c:c5:60:ac:ee:f9:3a:b2:e1:7a:c0:f1:bc:3b:36:5c:51:
         10:62:a8:61:9f:da:45:7f:c7:d3:ed:45:3f:eb:c2:f7:83:bf:
         3a:d1:08:bf:58:42:70:2b:71:1b:3e:95:51:f9:cc:a8:08:3b:
         e9:08:d4:a3:e1:d0:db:6e:9e:18:e5:fe:2c:39:d5:9c:84:ea:
         a3:1a:04:f1:f0:b2:ee:b2:e4:9f:f3:30:37:93:1f:d9:2f:3f:
         c7:bb:d3:0b:36:c2:b0:1c:dc:74:c3:5e:42:5b:a6:2b:61:2f:
         32:2c:2f:51:64:e7:e7:54:e9:6b:b2:bc:0c:e5:c8:c6:d0:0b:
         c1:1c:15:04:dd:e2:e5:82:68:ea:33:35:a0:78:95:60:19:63:
         ad:0d:2e:54:a2:73:72:4f:6a:97:24:58:b1:da:98:6a:74:3b:
         27:ef:37:ea:2d:12:a3:70:8e:c3:aa:88:70:9d:8e:65:ed:95:
         b9:84:11:12:7b:7e:5a:84:f1:60:5b:e1:fb:cd:72:ab:70:bb:
         6f:d8:c8:95:c1:02:e6:8e:7a:c0:63:fc:a3:a1:af:4d:67:49:
         51:5f:ef:69:3a:c4:be:b6:21:0a:32:4e:26:92:85:0c:7e:52:
         44:59:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:39 2026 by rpki-client