Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tyoTQBx0Tghkcoh24x-KNhWlWx4.roa
File:                     tyoTQBx0Tghkcoh24x-KNhWlWx4.roa (raw, json)
Hash identifier:          fD7PPgBZ6j8C0R24d6d/7Yh9/kngUxdHEgjJKevlV+c=
Subject key identifier:   B7:2A:13:40:1C:74:4E:08:64:72:88:76:E3:1F:8A:36:15:A5:5B:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1155
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tyoTQBx0Tghkcoh24x-KNhWlWx4.roa
Signing time:             Sun 01 Mar 2026 02:16:56 +0000
ROA not before:           Sun 01 Mar 2026 02:16:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4437 (0x1155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:16:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B72A13401C744E0864728876E31F8A3615A55B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:a2:2f:08:30:b6:87:7e:53:1b:d2:4a:5a:
                    fd:e2:11:71:28:b1:84:df:64:82:54:d1:be:d4:e7:
                    37:bb:a0:5f:77:40:71:54:ae:02:34:46:b9:04:ed:
                    41:03:20:4c:53:e6:aa:3a:d9:c2:03:9b:07:85:50:
                    cd:f3:f5:a9:bf:f8:7b:01:5a:12:35:a0:09:46:3d:
                    16:76:68:30:fe:70:be:7f:17:d5:25:52:26:cc:77:
                    2d:94:75:5e:5e:36:a2:d4:fd:b2:d3:32:50:07:c6:
                    7b:ba:7c:62:e9:76:72:00:d1:15:08:17:08:96:b3:
                    2f:d3:44:53:eb:a5:0e:cd:70:59:b2:eb:d8:29:74:
                    35:07:0b:82:d7:09:ab:09:8e:05:cf:52:00:86:5f:
                    69:46:78:d1:41:5d:8a:5f:46:3f:bc:2e:ca:d9:98:
                    0a:87:61:d4:3f:67:7c:07:1d:b9:7c:a3:b5:27:e9:
                    05:f6:49:50:8f:d1:39:70:30:cc:7b:d9:3c:a8:aa:
                    2f:06:10:64:81:5c:84:0f:30:7d:4a:f6:ae:53:61:
                    05:2a:1b:77:51:4f:9f:c7:3b:ad:70:8b:dc:b4:8a:
                    61:2e:69:e8:09:d4:3b:b8:2a:3c:8d:44:c4:f4:03:
                    51:ec:84:42:12:4c:59:e6:f3:ec:5a:fd:3c:89:24:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:13:40:1C:74:4E:08:64:72:88:76:E3:1F:8A:36:15:A5:5B:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tyoTQBx0Tghkcoh24x-KNhWlWx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:29:e0:6e:15:e0:13:0e:bf:f9:d8:18:61:52:06:39:a4:4b:
         35:29:3c:1e:db:33:25:62:f6:f7:bb:0e:b3:e0:79:18:76:f5:
         42:12:45:57:c1:cf:00:51:2c:04:04:a6:c0:ba:bb:6b:9b:7a:
         27:ab:15:d7:93:79:08:ab:1b:40:bb:a2:49:2b:07:10:93:5d:
         88:75:9c:8e:f4:4e:27:45:4c:11:28:28:3b:a1:77:51:36:e6:
         f3:f3:c2:95:80:e0:1d:5b:09:ef:63:e9:23:08:9b:3d:2f:c7:
         7c:83:7d:12:13:b8:91:e1:2a:b0:cb:b2:e4:2f:31:bf:65:3c:
         14:d7:46:bc:52:c1:60:00:3d:8c:78:41:ba:84:fe:01:81:bf:
         21:d4:9c:ce:aa:31:dc:05:ae:38:22:e1:5b:14:55:de:b0:38:
         99:a4:c3:11:b5:f0:38:e2:b8:a7:fe:7b:ec:96:eb:a5:39:41:
         58:48:8b:75:50:b1:b5:27:d4:9a:d2:cd:ae:07:8a:dd:d7:52:
         3b:79:f7:94:64:f6:3e:3f:e7:bd:f9:d6:d6:0e:16:e8:6a:d6:
         ca:85:a8:8d:4c:81:2e:ee:3a:e8:cc:91:c0:e7:f6:51:fd:89:
         82:dd:52:31:39:97:97:b8:87:64:15:23:a6:ac:90:d8:75:fd:
         31:59:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:17 2026 by rpki-client