Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWI27_6ccjKvKEmqgS88sYfGwrc.roa
File:                     uWI27_6ccjKvKEmqgS88sYfGwrc.roa (raw, json)
Hash identifier:          WSoNumgdsoycV5xpK5u07ccyBpcAIJeWQMIUZHhh17A=
Subject key identifier:   B9:62:36:EF:FE:9C:72:32:AF:28:49:AA:81:2F:3C:B1:87:C6:C2:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1189
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWI27_6ccjKvKEmqgS88sYfGwrc.roa
Signing time:             Sun 01 Mar 2026 02:27:06 +0000
ROA not before:           Sun 01 Mar 2026 02:27:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4489 (0x1189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:27:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B96236EFFE9C7232AF2849AA812F3CB187C6C2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:e3:25:1a:ee:09:a5:bc:0a:ae:9e:f2:e4:
                    25:07:b4:47:df:3a:85:1c:87:a4:b4:56:ce:0a:5c:
                    b2:0f:97:80:21:10:55:0b:1d:08:62:b0:5e:4a:c0:
                    e7:30:3e:22:c7:65:1e:61:92:b5:69:0c:d0:93:2a:
                    6b:ec:07:7b:65:e4:13:e8:49:de:1d:51:96:48:12:
                    bc:17:29:30:a8:ba:83:b1:1a:2a:93:5d:93:71:be:
                    65:9b:70:bb:7a:b7:00:5b:72:18:d8:e5:80:6d:e5:
                    2e:7f:2d:52:b2:a2:a9:22:b8:b2:80:5b:5c:f8:27:
                    c6:51:c4:24:34:bd:28:74:38:2b:71:65:b9:0e:39:
                    db:8c:0b:a4:9c:da:e3:c6:91:2f:4d:9f:3c:e5:b2:
                    11:f6:fd:80:ba:7c:19:42:09:27:b5:ee:e3:a1:56:
                    47:d2:9b:fb:1b:01:d6:e2:2f:1e:04:4b:cd:95:a0:
                    71:15:a5:cd:96:e7:f4:89:c6:2e:85:58:79:2e:de:
                    45:f8:95:7d:e7:6c:a6:1f:6e:82:cc:92:ab:6c:51:
                    f6:15:64:7b:6c:28:24:45:5e:7b:17:1b:35:87:96:
                    62:46:24:4b:6d:64:8f:2b:ce:27:dd:10:13:1f:95:
                    58:ed:6d:2a:d4:6a:68:1c:e6:24:e8:d0:50:c3:d6:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:36:EF:FE:9C:72:32:AF:28:49:AA:81:2F:3C:B1:87:C6:C2:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uWI27_6ccjKvKEmqgS88sYfGwrc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:2f:01:f7:e4:8f:cf:01:12:df:0c:9e:5a:01:a9:ae:6a:6c:
         da:30:8c:a1:d4:bd:83:22:6e:cf:2a:49:39:4a:40:92:82:e2:
         44:26:35:63:05:d7:3c:04:91:e1:c1:f6:93:ee:36:18:37:0a:
         00:71:66:eb:28:ae:d9:12:27:1b:8c:6c:6f:13:75:04:85:4e:
         07:1a:ce:80:52:b5:b8:ca:12:8e:ca:f6:c8:61:45:a8:94:95:
         4e:86:fc:aa:c7:09:65:f5:98:00:7f:98:52:95:38:b4:cb:91:
         88:ac:8f:e1:fd:11:b6:15:19:12:24:eb:d9:2b:1d:41:bc:22:
         0a:12:73:50:46:13:0a:6d:d2:ec:f9:db:90:b2:67:e2:eb:71:
         0b:1e:5a:7a:29:2f:8f:dd:71:2b:2f:d8:95:0d:25:b3:0a:6d:
         86:20:25:91:1e:18:6b:76:c5:26:51:6d:06:cd:db:88:75:52:
         a0:c0:18:5f:3e:18:4c:33:e2:e1:2e:36:5c:fd:a4:38:fb:15:
         1c:3f:b3:9a:a3:99:e6:d1:24:93:15:01:b8:85:1c:f5:45:96:
         eb:d6:a6:3e:3f:72:d5:e6:19:0a:4a:e8:0b:4d:09:90:f7:5b:
         1f:e6:24:3a:57:63:4a:70:50:8b:05:cc:34:5b:38:03:55:9e:
         bd:d5:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:57 2026 by rpki-client