Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
File:                     tlpCiQbFKHKbotDqZ_aBzixihRw.roa (raw, json)
Hash identifier:          qexNrf4rONOAFvAPpKu88fbqoYf5ggMUK7+v7TEosTM=
Subject key identifier:   B6:5A:42:89:06:C5:28:72:9B:A2:D0:EA:67:F6:81:CE:2C:62:85:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       129B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
Signing time:             Sun 01 Mar 2026 03:08:46 +0000
ROA not before:           Sun 01 Mar 2026 03:08:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4763 (0x129b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:08:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B65A428906C528729BA2D0EA67F681CE2C62851C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:25:b1:cb:f4:22:3a:e5:4b:87:16:90:50:
                    fd:b2:2c:77:65:5d:b7:ad:65:1d:24:4a:ca:1a:b9:
                    d4:98:3f:c7:1f:2d:ef:e4:b3:64:09:5c:8d:34:a8:
                    ab:5e:74:7b:b0:80:1b:62:34:c6:e8:92:5e:8b:ed:
                    c9:b1:0c:26:dd:16:a7:7a:90:85:0b:89:11:6f:6b:
                    63:b2:28:52:d3:a6:b3:46:2b:f0:c3:29:c9:96:c0:
                    45:5d:7f:05:97:61:b2:c2:95:23:ec:05:15:20:a2:
                    57:02:91:b3:c7:27:ac:76:74:30:e1:98:78:b2:90:
                    41:69:d3:16:21:25:b3:4f:d0:8d:ff:b8:60:2d:59:
                    ac:ff:40:4e:70:46:14:5d:57:e0:11:26:60:da:91:
                    de:28:b1:cb:b5:6b:57:f2:85:d0:b4:ba:96:56:9a:
                    d2:53:3e:e1:b0:57:27:31:19:a4:ab:03:11:14:17:
                    a8:a7:aa:51:7f:07:ff:0d:6f:5f:f4:12:69:01:ad:
                    a8:1d:a1:06:44:50:96:4a:4b:92:54:a9:f2:d9:35:
                    ab:51:c1:85:06:8c:f8:3b:11:d8:aa:d5:c3:5c:52:
                    87:41:e0:48:8d:87:bb:ad:89:71:97:4f:39:67:31:
                    81:0f:50:c4:42:aa:7d:97:d7:69:a1:d3:41:e2:30:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5A:42:89:06:C5:28:72:9B:A2:D0:EA:67:F6:81:CE:2C:62:85:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tlpCiQbFKHKbotDqZ_aBzixihRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:69:cf:14:a8:33:66:da:93:19:a0:ab:bf:a6:b2:0d:28:
         98:0a:a2:05:55:96:73:ee:74:f5:b0:ec:42:28:f7:c3:9a:47:
         ba:ca:91:04:a9:74:fb:be:16:88:2f:01:6d:33:f8:2c:25:88:
         13:39:ba:4b:94:f0:9e:35:eb:52:fb:15:e4:04:c8:78:4e:ea:
         bc:a1:fc:bd:f9:98:05:7c:a5:c9:e5:da:d0:6b:f5:41:75:33:
         4e:77:4e:67:37:8f:94:6e:aa:ce:7b:3b:a6:9f:cb:f4:f7:30:
         97:9e:5f:67:72:63:b7:5a:0f:26:8c:88:bc:70:4a:6d:91:32:
         f9:fe:98:61:c6:82:4d:ab:59:e4:75:f8:b5:79:1a:1f:a8:e3:
         0e:d9:a2:38:d6:dc:20:df:c1:82:85:2e:45:27:e7:7a:55:cf:
         7e:66:9c:9f:df:a4:fb:37:c6:10:33:8d:49:b3:33:99:04:61:
         a0:86:aa:26:39:fd:fa:97:a6:f9:26:64:ce:5a:5b:c6:40:9b:
         d9:95:af:a3:b4:ed:0f:ea:bf:27:98:a3:26:ca:32:f9:41:97:
         29:36:81:ec:25:97:81:89:77:8b:5a:02:53:90:49:82:18:82:
         95:04:57:49:ca:4f:26:94:66:23:ff:5d:ac:9b:f9:19:00:8b:
         8e:4b:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:46 2026 by rpki-client