Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30143/v49doGwiCM-yePWBhvL9LepzEqw.roa
File:                     v49doGwiCM-yePWBhvL9LepzEqw.roa (raw, json)
Hash identifier:          zL48VxNEihXRB20f9YOe84L6fIMoGS6f66jlyFQwBu8=
Subject key identifier:   BF:8F:5D:A0:6C:22:08:CF:B2:78:F5:81:86:F2:FD:2D:EA:73:12:AC
Certificate issuer:       /CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
Certificate serial:       39
Authority key identifier: 95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/v49doGwiCM-yePWBhvL9LepzEqw.roa
Signing time:             Mon 07 Sep 2026 08:33:31 +0000
ROA not before:           Mon 07 Sep 2026 08:33:31 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     23783
IP address blocks:        2403:5a00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 08:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
        Validity
            Not Before: Sep  7 08:33:31 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=BF8F5DA06C2208CFB278F58186F2FD2DEA7312AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:32:fe:e0:fe:65:8f:db:b9:03:2d:d0:f4:
                    48:c8:cf:15:45:3f:22:a9:f4:ca:a2:d6:79:f8:4c:
                    e2:83:9c:fb:f5:f8:32:ed:c6:ff:04:cb:18:cf:7a:
                    4f:69:98:d5:86:18:ba:ff:2c:eb:e5:53:94:ba:52:
                    11:0e:bd:db:c6:1b:f0:09:f6:f3:4d:da:6e:b5:48:
                    ba:b2:ee:f7:f5:3b:f2:5a:55:68:f3:d5:8c:0d:b6:
                    48:fe:76:0a:9a:9e:fb:bf:40:7b:44:3f:b7:5a:e9:
                    39:46:12:e4:d1:60:24:74:bd:58:78:57:c4:0b:43:
                    3b:a3:df:b9:44:17:24:fd:1b:cd:74:8d:82:e5:85:
                    d9:1a:48:e8:26:cb:12:b1:61:93:8a:2a:93:37:1a:
                    fa:f6:08:31:47:72:b1:16:c4:5b:fd:74:50:51:82:
                    5e:ad:5e:aa:2a:24:c7:2d:75:00:de:2e:bf:a6:ec:
                    3a:41:d8:6d:8b:cb:44:f1:37:ac:9f:33:b4:c2:7d:
                    37:ad:69:ed:b5:b6:f5:5c:21:51:b8:3f:17:26:18:
                    57:c5:ef:ba:bb:6d:c1:aa:b5:c0:59:74:55:3a:03:
                    a1:fa:15:aa:ca:e8:b7:1e:72:bf:9e:d8:2e:1d:41:
                    13:59:a3:d3:3a:b7:69:8a:e9:94:c3:3d:69:79:5d:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:5D:A0:6C:22:08:CF:B2:78:F5:81:86:F2:FD:2D:EA:73:12:AC
            X509v3 Authority Key Identifier:
                keyid:95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/v49doGwiCM-yePWBhvL9LepzEqw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:86:55:29:74:95:bb:f2:08:c3:67:d6:07:16:d4:e8:49:2c:
         0b:70:99:7a:58:50:47:9a:58:cb:aa:17:d2:41:97:e9:a6:cc:
         99:2f:a3:98:d3:15:d9:f0:36:88:58:a7:e8:54:0a:96:73:97:
         9d:30:58:5b:14:47:34:1e:56:e5:87:0f:ee:31:eb:66:2e:72:
         2e:13:59:31:e4:86:76:88:bb:47:ed:07:04:e8:85:a3:06:0e:
         be:0e:ab:19:7c:d4:8a:cd:01:54:ea:26:85:1b:78:41:82:f8:
         e2:7d:99:28:cb:23:5e:c6:ca:e5:64:79:eb:1a:4e:89:69:63:
         72:cb:1b:3d:e2:3b:d3:05:85:e7:a2:1a:18:ec:53:fa:65:4c:
         0a:40:62:5f:1a:a2:6f:3f:a7:1c:db:39:a0:15:17:26:a5:3e:
         5a:17:e5:24:9d:0a:e8:82:cb:53:f2:6b:62:61:78:d5:60:55:
         ed:5e:ed:fd:f5:78:fa:52:33:f0:25:47:ee:f6:6f:0b:53:71:
         9b:cc:03:ab:d9:2b:dd:bd:6f:c7:c8:ed:c5:b5:a0:a1:64:b6:
         bd:c6:a3:eb:61:a2:cb:93:7c:e4:53:8e:ff:1d:ea:09:40:07:
         a3:95:8a:e0:72:1e:8a:5b:40:a8:b5:43:01:7b:6d:f8:ba:d7:
         fe:b1:37:3d
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NTU2
RkRGMDkzOTBFNDZEQzY0ODY3NTY3MThCM0ZDNkVFM0NGRUVBMB4XDTI2MDkwNzA4
MzMzMVoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkY4RjVEQTA2QzIyMDhD
RkIyNzhGNTgxODZGMkZEMkRFQTczMTJBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDuMv7g/mWP27kDLdD0SMjPFUU/Iqn0yqLWefhM4oOc+/X4Mu3G
/wTLGM96T2mY1YYYuv8s6+VTlLpSEQ6928Yb8An2803abrVIurLu9/U78lpVaPPV
jA22SP52Cpqe+79Ae0Q/t1rpOUYS5NFgJHS9WHhXxAtDO6PfuUQXJP0bzXSNguWF
2RpI6CbLErFhk4oqkzca+vYIMUdysRbEW/10UFGCXq1eqiokxy11AN4uv6bsOkHY
bYvLRPE3rJ8ztMJ9N61p7bW29VwhUbg/FyYYV8Xvurttwaq1wFl0VToDofoVqsro
tx5yv57YLh1BE1mj0zq3aYrplMM9aXldFD8CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBS/j12gbCIIz7J49YGG8v0t6nMSrDAfBgNVHSMEGDAWgBSVVv3wk5DkbcZIZ1Zx
iz/G7jz+6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDMvbFZiOThKT1E1RzNHU0dkV2NZc194dTQ4X3VvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbFZiOThKT1E1RzNHU0dkV2NZc194
dTQ4X3VvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTQzL3Y0OWRvR3dpQ00teWVQV0Jodkw5TGVwekVxdy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA1oAMA0GCSqGSIb3DQEBCwUA
A4IBAQBQhlUpdJW78gjDZ9YHFtToSSwLcJl6WFBHmljLqhfSQZfppsyZL6OY0xXZ
8DaIWKfoVAqWc5edMFhbFEc0Hlblhw/uMetmLnIuE1kx5IZ2iLtH7QcE6IWjBg6+
DqsZfNSKzQFU6iaFG3hBgvjifZkoyyNexsrlZHnrGk6JaWNyyxs94jvTBYXnohoY
7FP6ZUwKQGJfGqJvP6cc2zmgFRcmpT5aF+UknQrogstT8mtiYXjVYFXtXu399Xj6
UjPwJUfu9m8LU3GbzAOr2SvdvW/HyO3FtaChZLa9xqPrYaLLk3zkU47/HeoJQAej
lYrgch6KW0CotUMBe234utf+sTc9
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:05 2026 by rpki-client