Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlLBYtlkHWLimmQjt1X3_hwKyWY.roa
File:                     DlLBYtlkHWLimmQjt1X3_hwKyWY.roa (raw, json)
Hash identifier:          YXrK4kgc6XuhZbFMm3c2DWvkBC2Ydw1/wSSszF5AYw0=
Subject key identifier:   0E:52:C1:62:D9:64:1D:62:E2:9A:64:23:B7:55:F7:FE:1C:0A:C9:66
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       135D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlLBYtlkHWLimmQjt1X3_hwKyWY.roa
Signing time:             Wed 25 Mar 2026 09:16:49 +0000
ROA not before:           Wed 25 Mar 2026 09:16:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4957 (0x135d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 25 09:16:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0E52C162D9641D62E29A6423B755F7FE1C0AC966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:55:a3:cb:da:40:17:e1:83:b3:94:1a:c3:
                    80:d1:52:f5:6a:50:b0:d8:65:ba:bf:dd:2e:cd:50:
                    02:03:64:29:b7:55:92:07:bb:b6:b6:5e:3b:69:a0:
                    61:2f:1b:40:bf:76:c1:b2:f1:4b:8e:e9:22:b4:f3:
                    9b:3d:7b:86:3d:f3:27:41:c0:f2:d8:b0:9f:1a:66:
                    56:5e:15:06:31:4e:2e:30:54:9c:fd:ff:41:09:69:
                    8a:58:51:d5:13:47:d9:44:98:03:6d:e7:ba:2c:91:
                    39:2e:71:bd:27:00:85:42:3e:cd:cc:2e:4c:d3:52:
                    82:ec:a4:07:1a:e8:b7:4e:4d:a8:41:1c:44:1a:0c:
                    33:c3:ab:c1:f2:32:46:ed:04:dc:f1:f7:ab:75:1f:
                    e9:74:14:c3:c8:88:9c:10:3f:27:72:69:8a:8e:f5:
                    05:38:96:10:dc:dd:f3:6e:84:7c:34:df:9b:3c:25:
                    e0:5d:31:dc:89:2e:10:37:79:40:b1:4b:7d:57:74:
                    95:ac:14:56:d3:2e:7f:c4:9c:db:1e:73:63:45:a9:
                    3f:36:67:2c:32:84:de:9e:d3:d9:60:00:7e:68:c2:
                    3d:c7:e0:68:44:be:03:bf:e8:6b:55:c2:9c:ee:76:
                    07:6e:7c:9a:ab:71:4a:25:c1:94:1b:2f:7d:87:75:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:C1:62:D9:64:1D:62:E2:9A:64:23:B7:55:F7:FE:1C:0A:C9:66
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlLBYtlkHWLimmQjt1X3_hwKyWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:10:cb:bc:1d:ec:b1:8f:20:d2:19:28:ed:71:a3:7b:41:15:
         1c:76:04:8b:19:57:22:c2:7f:2e:07:92:37:df:12:ed:21:fb:
         45:50:77:03:fb:6c:85:ae:47:40:8a:81:88:fe:2e:33:54:d9:
         bc:5e:f3:db:2f:fb:f7:b0:53:5a:b3:82:7b:e2:e6:9c:01:06:
         78:8b:95:26:52:48:f4:3d:0d:8c:24:bc:f6:5e:0a:e4:30:2d:
         71:6f:ba:fc:5a:8e:4e:e0:3e:21:05:11:37:de:43:eb:a6:ed:
         17:b8:bc:90:00:9f:85:dc:c6:88:bd:48:5b:48:c9:6c:2c:40:
         af:8a:db:73:95:e1:61:b2:e2:1d:2f:5f:62:af:94:ac:85:0f:
         47:0e:25:04:ed:82:45:1b:e6:02:a2:87:9b:82:4d:0b:19:1d:
         e8:b2:f8:9d:9e:08:f2:5f:ce:0f:d1:22:c8:22:ed:d7:71:dc:
         82:fe:13:2f:9c:d2:49:ac:ff:9e:35:cb:ee:bf:80:e6:6c:08:
         6b:f7:c1:41:53:d8:8a:93:9d:27:f6:47:3e:f4:31:4b:5a:04:
         6b:fb:cb:fe:bd:8c:8b:b5:bb:c2:c8:0d:e6:64:6f:e8:35:69:
         54:f5:b9:58:14:4f:27:5c:bb:12:9f:d5:11:0d:ea:cb:db:29:
         a8:43:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:59 2026 by rpki-client