Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ufPgXsnUCRw5Ecwm8Jv0fM4n04Q.roa
File:                     ufPgXsnUCRw5Ecwm8Jv0fM4n04Q.roa (raw, json)
Hash identifier:          G5hUzUbJQuilKeleH0B/0smNDlY1iRlrDCYf6KedIpA=
Subject key identifier:   B9:F3:E0:5E:C9:D4:09:1C:39:11:CC:26:F0:9B:F4:7C:CE:27:D3:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1159
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ufPgXsnUCRw5Ecwm8Jv0fM4n04Q.roa
Signing time:             Sun 01 Mar 2026 02:16:58 +0000
ROA not before:           Sun 01 Mar 2026 02:16:58 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4441 (0x1159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:16:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B9F3E05EC9D4091C3911CC26F09BF47CCE27D384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:bb:b6:45:d3:da:98:3b:13:e1:aa:e0:e1:
                    ac:96:0d:68:91:31:38:b1:6d:fd:76:f9:e3:c8:b6:
                    03:a2:c2:a4:af:06:4c:0a:ac:93:6d:16:55:9a:19:
                    86:fb:52:c3:12:e1:f3:d2:e2:9c:af:de:4a:8a:36:
                    12:ab:42:c8:fa:ec:9c:78:2c:18:20:36:ac:ca:2e:
                    19:ee:81:6d:4b:30:19:62:b0:98:ab:1f:0f:c3:3c:
                    f8:0b:5b:02:80:9e:8d:74:ee:94:a6:20:ea:78:ce:
                    e4:d1:e9:4e:8c:d6:4a:ee:32:77:dd:ea:56:66:4a:
                    c1:7f:7a:43:c5:8d:41:55:38:ce:fb:2e:b6:68:65:
                    b5:1f:cc:e0:42:d8:e5:cb:d9:53:c4:52:06:d6:c1:
                    bf:26:c8:c1:a5:f6:e5:31:7f:03:91:cc:77:6f:d2:
                    81:9d:bc:49:6d:93:c0:61:ba:92:3e:13:9f:60:6d:
                    ee:e8:29:b1:a4:e9:94:85:cc:e6:66:0d:d9:c3:62:
                    4f:50:11:55:5b:64:3c:c2:fd:bf:ed:d2:da:e6:63:
                    1d:d3:8e:59:3d:0b:f2:b7:bf:28:64:5d:51:a6:ae:
                    6b:3d:8f:d5:df:6b:8b:29:8f:3c:f6:4f:b9:5e:e2:
                    5b:3c:25:00:cc:b1:d6:4f:9a:b2:28:00:af:1e:0c:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:E0:5E:C9:D4:09:1C:39:11:CC:26:F0:9B:F4:7C:CE:27:D3:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ufPgXsnUCRw5Ecwm8Jv0fM4n04Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:a7:de:33:5b:68:08:5f:51:2e:33:b9:8a:a7:79:07:60:
         08:9c:c7:0a:d6:30:08:19:97:ae:8b:f7:67:3f:2c:e8:d4:b7:
         3a:b5:f9:fb:f7:c9:7f:b7:ed:53:c5:48:8c:cd:16:ba:10:e1:
         3b:40:55:9c:85:58:3c:cd:2a:a5:2c:8d:65:e0:39:cf:e6:6e:
         c2:ca:d1:35:bd:90:36:d5:dd:f0:fd:15:76:15:30:0e:f5:2f:
         23:13:b7:63:ea:36:d1:e3:58:26:e9:4c:1f:6b:eb:aa:8c:5d:
         e9:a9:e7:9c:d6:2b:71:f1:9d:e5:75:fb:6a:8f:3c:2b:9c:30:
         96:2b:c0:77:76:b4:e8:c1:4a:d5:b6:81:29:85:bb:67:eb:ef:
         b5:b6:59:6b:65:63:42:6e:2f:e2:6b:4a:ee:0b:fc:66:93:9c:
         44:64:dc:38:2c:76:1b:a1:e2:f5:93:7d:3f:36:69:30:ed:b3:
         8e:97:ee:d7:8b:18:56:fe:c7:80:34:9f:e5:de:f4:ef:9f:f9:
         78:b2:8a:3c:ac:30:8c:7b:51:ce:f8:90:b1:cf:61:76:74:ef:
         7b:7a:01:59:7f:c8:a9:77:5d:79:5e:6e:03:66:1a:c2:05:46:
         bc:0d:6f:d5:08:a5:2e:a6:24:ab:a2:f5:d4:ad:d7:26:37:75:
         09:7d:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:51 2026 by rpki-client