Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
File:                     xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa (raw, json)
Hash identifier:          Vk2Hmd7sTdUqbR6eX7AmLn/3KzseLyakPy8pTVpv4nQ=
Subject key identifier:   C4:EA:99:6C:3F:F0:54:B5:87:27:E5:D9:03:E7:19:AD:86:F0:0A:DB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
Signing time:             Sun 01 Mar 2026 02:44:38 +0000
ROA not before:           Sun 01 Mar 2026 02:44:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4604 (0x11fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C4EA996C3FF054B58727E5D903E719AD86F00ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:ae:44:c6:f0:bd:80:74:0a:39:82:2a:8a:
                    d2:6b:e3:81:7b:81:cd:8e:fb:2e:b7:f7:b1:05:ab:
                    bf:8a:24:a8:79:60:88:25:d7:e7:08:da:76:16:22:
                    68:45:99:0d:d7:ec:b8:b9:b0:9d:43:d2:75:52:34:
                    53:84:2d:9d:ce:1d:38:85:bd:7b:2e:2d:f8:0b:a7:
                    18:c3:5a:ae:64:77:3b:f6:78:70:9a:5f:18:7f:af:
                    5f:75:be:fd:bf:97:9e:1b:f3:0b:a0:8d:1a:66:20:
                    04:9b:c2:9f:55:40:46:a7:fc:b3:67:10:3e:2c:eb:
                    6c:1e:ef:9a:f8:28:7c:cb:e0:b5:5f:8a:e8:b4:60:
                    42:7b:9d:0e:bf:73:dc:70:ad:52:b1:8f:87:b0:8c:
                    2d:a8:d2:9a:2e:02:26:56:4b:bd:df:84:1a:ac:87:
                    38:10:ce:e3:51:08:cb:e3:da:ef:0a:28:72:2d:f4:
                    6e:ac:ff:0d:21:dc:25:73:5c:79:cb:df:4d:31:5f:
                    54:4a:1d:8d:eb:cb:ed:74:9d:74:b7:25:d3:36:fd:
                    a7:91:71:dd:b2:ea:7c:7e:8e:90:64:e5:cf:18:2d:
                    28:6d:ec:18:7e:69:5e:c5:40:df:d9:38:77:83:36:
                    8f:d2:5f:41:e0:e7:68:b1:e5:cd:8e:a3:d3:40:c3:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:99:6C:3F:F0:54:B5:87:27:E5:D9:03:E7:19:AD:86:F0:0A:DB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xOqZbD_wVLWHJ-XZA-cZrYbwCts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:70:1c:d7:3d:85:38:13:c9:31:62:34:81:1f:8d:27:f2:
         53:c2:69:5d:70:0e:2d:d3:39:c3:0a:f1:c5:af:a2:90:9c:5d:
         3a:4c:40:4c:7f:08:a8:ab:b3:43:3a:1e:13:c4:a8:fa:70:26:
         d3:13:d3:05:b7:8b:9f:42:cc:41:92:d0:52:25:be:f9:b4:3f:
         b4:de:ba:49:41:78:e0:5d:60:96:f2:ba:0c:94:3d:56:09:40:
         25:7c:c1:5c:e5:cb:39:8d:4f:de:31:a1:82:8d:de:c3:80:b5:
         90:db:c5:1e:09:ef:12:9a:a9:16:e6:cf:ef:3a:77:c7:48:53:
         17:f7:9a:27:96:bc:21:2e:32:4d:f2:c6:3a:9f:1b:a3:b9:f9:
         81:08:c4:3f:b4:54:be:d1:2a:0d:5d:2b:7d:08:6f:30:af:7e:
         6b:f4:0a:91:34:ea:59:f1:f0:fe:16:a6:c2:d0:49:72:23:2e:
         12:aa:38:88:67:66:3b:75:a0:3f:7e:6f:e4:4a:13:fd:23:af:
         eb:da:18:70:72:87:92:98:69:66:fc:23:87:be:20:69:72:ab:
         1b:c2:c0:b2:39:87:15:15:41:59:ea:53:8e:ef:46:b7:b4:8a:
         be:99:55:b7:e7:e8:3f:be:1a:fb:b0:c2:b2:f2:b0:83:d7:46:
         d3:68:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:58 2026 by rpki-client