Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-r5su2ZlxrbpD9t2m4iV-bfYE44.roa
File:                     -r5su2ZlxrbpD9t2m4iV-bfYE44.roa (raw, json)
Hash identifier:          X5tpes53bD3dVax71lHdCeWnV4o8TcFeFBkadKiYzIs=
Subject key identifier:   FA:BE:6C:BB:66:65:C6:B6:E9:0F:DB:76:9B:88:95:F9:B7:D8:13:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11B2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-r5su2ZlxrbpD9t2m4iV-bfYE44.roa
Signing time:             Sun 01 Mar 2026 02:36:21 +0000
ROA not before:           Sun 01 Mar 2026 02:36:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4530 (0x11b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FABE6CBB6665C6B6E90FDB769B8895F9B7D8138E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:76:20:d8:ce:22:41:a5:9c:f7:9c:88:bb:
                    01:7c:04:06:4e:61:bf:96:7b:3c:d1:0b:87:78:4e:
                    96:c9:9f:b6:fd:2c:d4:48:34:c3:85:7c:26:8a:9a:
                    3b:f0:01:23:5f:f0:56:1d:f0:63:64:66:64:85:21:
                    83:42:f5:fc:f8:fa:05:1c:08:fc:c7:f6:1f:e7:fc:
                    74:fd:a9:33:2e:91:0b:bf:32:03:19:dd:d5:0d:6c:
                    8c:f2:8b:5b:8c:dc:d5:c8:03:19:48:bb:3f:8d:bc:
                    f2:bb:19:ea:bb:2b:e8:55:2d:c8:4e:ff:0e:44:1d:
                    00:af:58:b3:07:13:44:fd:bf:9d:4b:a1:59:f7:54:
                    c9:c4:cc:ea:b9:5b:d1:43:51:eb:d1:36:c8:78:4c:
                    80:29:a2:ec:54:54:cf:d6:d7:c9:28:c5:b7:a6:20:
                    5b:c1:e1:56:69:cf:72:a7:59:1f:68:42:9f:f5:83:
                    a9:25:a4:07:35:1d:d4:66:e6:6e:0c:c7:60:b7:1e:
                    0c:51:d2:21:2b:be:65:63:67:20:68:1b:fb:42:79:
                    8e:18:6a:61:82:bc:1f:81:4b:7f:fd:92:5f:d6:11:
                    a7:5b:d2:d1:36:09:e6:3a:4c:77:de:c7:51:f1:8e:
                    5a:96:1a:4f:6a:2d:0f:98:47:21:a4:4d:9b:b3:df:
                    3d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:6C:BB:66:65:C6:B6:E9:0F:DB:76:9B:88:95:F9:B7:D8:13:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-r5su2ZlxrbpD9t2m4iV-bfYE44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:45:50:5b:ad:8b:cd:9b:78:5e:08:14:04:61:f5:c0:a9:
         8b:0e:0d:d3:a9:56:35:59:2d:48:f6:94:26:93:64:75:72:c6:
         a8:74:35:28:33:57:34:f6:ae:8a:09:fc:a7:42:14:84:a7:59:
         bc:ff:9f:59:8a:51:ba:33:9f:c3:84:73:73:87:55:4a:fe:78:
         a7:74:2e:14:01:24:2a:62:a5:f0:e6:10:ec:70:74:d0:51:a8:
         dc:1a:d5:d8:29:b8:83:31:87:f8:5f:47:99:da:da:0f:be:34:
         00:9c:24:25:a9:f4:de:61:a0:09:32:2a:5e:7c:81:38:57:ae:
         d3:8c:82:e2:84:d0:cc:6c:0a:52:57:71:6f:90:cb:85:04:60:
         5d:3b:76:43:7b:59:78:0c:18:1e:ea:09:a0:1c:6e:18:a1:98:
         89:09:15:2b:75:13:c0:51:6d:99:91:91:6e:3e:5b:0e:da:4e:
         be:89:50:0a:bd:9d:1f:38:ac:72:49:27:17:55:0e:3b:1a:ba:
         78:e1:f8:f0:c5:f3:54:4a:ed:47:c7:5f:ad:ee:d8:6d:cc:3a:
         7c:e7:42:36:f0:15:99:07:88:9b:60:cb:c6:e9:4b:3c:99:17:
         e0:c3:d7:13:51:72:8c:30:b1:df:a8:55:9b:50:31:5e:0e:c2:
         5e:5f:81:74
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjM2MjFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBQkU2Q0JCNjY2NUM2
QjZFOTBGREI3NjlCODg5NUY5QjdEODEzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMUXYg2M4iQaWc95yIuwF8BAZOYb+WezzRC4d4TpbJn7b9LNRI
NMOFfCaKmjvwASNf8FYd8GNkZmSFIYNC9fz4+gUcCPzH9h/n/HT9qTMukQu/MgMZ
3dUNbIzyi1uM3NXIAxlIuz+NvPK7Geq7K+hVLchO/w5EHQCvWLMHE0T9v51LoVn3
VMnEzOq5W9FDUevRNsh4TIApouxUVM/W18koxbemIFvB4VZpz3KnWR9oQp/1g6kl
pAc1HdRm5m4Mx2C3HgxR0iErvmVjZyBoG/tCeY4YamGCvB+BS3/9kl/WEadb0tE2
CeY6THfex1HxjlqWGk9qLQ+YRyGkTZuz3z19AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+r5su2ZlxrbpD9t2m4iV+bfYE44wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Ly1yNXN1MlpseHJicEQ5dDJtNGlWLWJmWUU0NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxas4wDQYJKoZIhvcNAQELBQADggEBAIaMRVBbrYvNm3heCBQEYfXAqYsO
DdOpVjVZLUj2lCaTZHVyxqh0NSgzVzT2rooJ/KdCFISnWbz/n1mKUbozn8OEc3OH
VUr+eKd0LhQBJCpipfDmEOxwdNBRqNwa1dgpuIMxh/hfR5na2g++NACcJCWp9N5h
oAkyKl58gThXrtOMguKE0MxsClJXcW+Qy4UEYF07dkN7WXgMGB7qCaAcbhihmIkJ
FSt1E8BRbZmRkW4+Ww7aTr6JUAq9nR84rHJJJxdVDjsaunjh+PDF81RK7UfHX63u
2G3MOnznQjbwFZkHiJtgy8bpSzyZF+DD1xNRcowwsd+oVZtQMV4Owl5fgXQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:41 2026 by rpki-client