Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y626RAkExCEz2Iqk2plpjtMPzFI.roa
File:                     y626RAkExCEz2Iqk2plpjtMPzFI.roa (raw, json)
Hash identifier:          rcfK4yEy/F4htn6qqDZxWImt1GtMgahHxmxSgXHasSM=
Subject key identifier:   CB:AD:BA:44:09:04:C4:21:33:D8:8A:A4:DA:99:69:8E:D3:0F:CC:52
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y626RAkExCEz2Iqk2plpjtMPzFI.roa
Signing time:             Sun 01 Mar 2026 02:44:33 +0000
ROA not before:           Sun 01 Mar 2026 02:44:33 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4593 (0x11f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:33 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CBADBA440904C42133D88AA4DA99698ED30FCC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:d6:6c:05:f7:de:4f:a5:a9:2e:34:fb:d5:
                    8b:f4:2e:49:e0:49:71:00:96:14:43:cb:1f:cc:64:
                    a7:e6:04:e2:3f:6a:5b:09:f3:55:63:56:ef:53:b6:
                    53:83:c3:4a:e3:87:2a:86:74:1d:43:45:5d:28:ed:
                    b7:39:a9:51:d1:04:9e:85:bb:a6:cf:5a:ca:a6:23:
                    07:d8:e1:05:70:1b:9b:cd:48:f1:5e:78:15:82:c3:
                    b2:e4:85:49:46:ee:1f:7e:92:2e:03:66:4f:b1:d8:
                    2c:e0:e0:1e:55:14:5c:ff:33:4c:85:64:25:84:ea:
                    4f:21:7e:8b:1a:84:48:9f:9b:56:95:e9:36:5f:52:
                    66:44:d9:82:97:dd:d2:a5:10:46:53:e6:7d:32:8f:
                    6e:06:10:76:3e:85:e2:a1:57:e7:d7:9b:20:04:16:
                    6b:13:62:09:de:cd:ca:ad:86:a8:ce:59:c4:f6:e4:
                    a4:70:04:5e:23:6f:f6:8c:ee:46:2c:f4:4a:19:77:
                    00:c4:d9:e1:b4:f8:9e:ce:74:f3:3e:47:b2:1c:ee:
                    2e:e9:7e:2d:58:b0:8e:a5:21:fa:0c:fa:33:d7:38:
                    b3:3d:b6:81:5c:2c:f3:93:63:ce:20:e8:a9:75:05:
                    4e:51:e8:24:cf:f8:3c:78:5f:f9:0a:44:0d:47:4e:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:BA:44:09:04:C4:21:33:D8:8A:A4:DA:99:69:8E:D3:0F:CC:52
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y626RAkExCEz2Iqk2plpjtMPzFI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:cf:d1:75:fa:62:dd:74:76:ec:9b:da:3d:bc:3a:47:e3:
         77:94:38:d2:e2:f9:11:e1:82:f7:0d:a1:e1:9e:b2:d6:58:b0:
         46:79:c5:48:96:8b:de:59:89:21:e3:08:e0:13:df:f4:22:66:
         34:01:f4:12:02:56:0b:f3:ec:db:b0:13:7f:9a:40:d3:52:8e:
         0d:65:c6:2d:a1:8b:f3:7c:3f:f9:68:32:23:21:cf:d0:8f:07:
         6c:c6:c1:f4:7a:3f:7b:57:08:38:89:a0:2f:df:7b:c3:16:f6:
         c2:79:c4:5a:3c:fd:fb:98:d7:47:77:e4:0c:e7:54:44:f9:82:
         aa:ad:79:c8:9b:19:c7:42:c2:22:ca:cb:16:97:0c:78:94:94:
         7b:27:47:5e:4f:ae:65:fb:4f:b1:8a:9e:02:f3:c8:f9:c7:d9:
         97:65:c7:80:e6:cf:17:4f:4a:00:b4:40:f0:45:9e:1d:77:29:
         26:02:f2:d1:fe:8a:3f:cf:ec:7a:40:44:f6:6a:6d:d9:b3:5e:
         f2:13:9e:83:56:90:85:29:c1:7b:27:a7:ae:3c:2a:af:cd:21:
         1a:aa:35:32:39:40:e6:cb:b4:12:27:5a:a8:df:e7:58:83:58:
         b4:9a:f9:ec:c1:0b:1f:82:62:ac:ee:70:01:bb:55:e6:0a:5a:
         97:aa:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:18 2026 by rpki-client