Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
File:                     2phu35qYYQOWjnt1bB0vmG0qk0o.roa (raw, json)
Hash identifier:          dh3SABNyFup/2jewNmWMp8JIE7oSv+lwupk/iMO0fsI=
Subject key identifier:   DA:98:6E:DF:9A:98:61:03:96:8E:7B:75:6C:1D:2F:98:6D:2A:93:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11AF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
Signing time:             Sun 01 Mar 2026 02:36:19 +0000
ROA not before:           Sun 01 Mar 2026 02:36:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4527 (0x11af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DA986EDF9A986103968E7B756C1D2F986D2A934A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:1e:ea:c0:4a:1d:fb:4d:74:d6:e2:6a:1b:
                    a3:5e:03:47:f8:de:a9:fa:af:94:5e:cd:b5:0c:dc:
                    6f:0c:2c:cb:47:5d:a1:b0:af:7f:34:23:d8:0f:b6:
                    00:1d:d6:98:c6:fd:83:60:85:d1:1a:fa:64:a0:ba:
                    de:a9:a5:74:08:54:e1:b7:cb:7c:81:8f:3a:6d:21:
                    4e:b3:73:66:b2:9d:09:0f:64:2c:1c:98:a0:d7:1e:
                    c1:b2:53:f9:64:a5:b1:5e:26:97:b8:1d:9f:87:2f:
                    ce:6e:8c:80:ca:6c:a9:ee:14:cd:34:6e:19:0a:51:
                    26:80:b4:94:40:0b:1a:9d:e3:80:02:5a:da:70:90:
                    8a:cb:b5:6f:40:43:b9:16:0a:05:d0:4b:b6:6f:54:
                    e2:ab:34:13:29:f4:5f:9b:d3:c0:ba:8d:5a:1d:4c:
                    64:61:3b:dd:21:85:4d:6a:47:8b:0a:4c:60:02:56:
                    66:62:31:52:ae:f3:f3:c6:ff:4f:b9:94:7f:d2:8e:
                    d2:61:cf:5f:31:a2:38:44:8d:d0:45:c0:f7:12:97:
                    4c:45:63:77:e7:ad:7e:2d:e9:c8:08:26:15:9c:92:
                    3a:02:0c:01:13:5f:b7:cd:55:92:5c:e2:8d:a9:ce:
                    44:f7:3e:06:80:29:c8:09:66:f4:83:7e:e8:51:2f:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:6E:DF:9A:98:61:03:96:8E:7B:75:6C:1D:2F:98:6D:2A:93:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phu35qYYQOWjnt1bB0vmG0qk0o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:e8:05:4a:80:cf:3b:e8:fc:c5:01:7b:15:1b:71:8b:08:
         44:83:ce:4f:b3:c5:31:cd:11:5e:b1:6e:45:25:b9:be:cc:ff:
         c8:e4:ff:19:2f:33:40:b6:84:ca:f9:4b:f4:16:12:e3:aa:4f:
         89:c6:a9:ee:b8:bc:af:ee:5e:0d:2c:87:60:05:95:a0:6b:51:
         00:7d:2c:62:f0:2f:bc:83:96:ed:41:6d:dd:7b:be:a7:43:7d:
         44:ea:7d:55:87:63:ba:2c:d2:de:ba:30:e3:08:06:55:dd:f2:
         ec:96:e2:00:02:b0:53:78:e7:ce:b5:04:2e:15:0e:39:00:9a:
         f4:7f:db:22:88:c0:4c:59:ba:8f:f3:18:57:ce:59:f5:ac:c9:
         a7:95:f2:27:4f:9c:c2:2a:e2:f1:33:62:2c:89:32:dc:3f:dd:
         46:63:16:00:36:97:be:b8:b0:88:fb:44:00:74:b8:0c:ee:9d:
         26:a5:aa:59:b5:c2:c7:bd:29:1a:35:61:12:ca:de:8f:20:7b:
         cb:e8:08:a0:1a:b3:3b:18:f3:59:2b:7b:d7:a8:b1:bb:52:b7:
         e9:58:90:68:de:92:1c:ea:01:40:05:c0:4e:8a:31:ea:01:f3:
         80:d4:ed:01:0e:d3:9c:95:40:31:30:8d:0d:3a:a3:ab:7b:59:
         1c:0f:e3:c4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjM2MTlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBOTg2RURGOUE5ODYx
MDM5NjhFN0I3NTZDMUQyRjk4NkQyQTkzNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnFR7qwEod+0101uJqG6NeA0f43qn6r5RezbUM3G8MLMtHXaGw
r380I9gPtgAd1pjG/YNghdEa+mSgut6ppXQIVOG3y3yBjzptIU6zc2aynQkPZCwc
mKDXHsGyU/lkpbFeJpe4HZ+HL85ujIDKbKnuFM00bhkKUSaAtJRACxqd44ACWtpw
kIrLtW9AQ7kWCgXQS7ZvVOKrNBMp9F+b08C6jVodTGRhO90hhU1qR4sKTGACVmZi
MVKu8/PG/0+5lH/SjtJhz18xojhEjdBFwPcSl0xFY3fnrX4t6cgIJhWckjoCDAET
X7fNVZJc4o2pzkT3PgaAKcgJZvSDfuhRL3upAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2phu35qYYQOWjnt1bB0vmG0qk0owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzJwaHUzNXFZWVFPV2pudDFiQjB2bUcwcWswby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaEgwDQYJKoZIhvcNAQELBQADggEBAHuY6AVKgM876PzFAXsVG3GLCESD
zk+zxTHNEV6xbkUlub7M/8jk/xkvM0C2hMr5S/QWEuOqT4nGqe64vK/uXg0sh2AF
laBrUQB9LGLwL7yDlu1Bbd17vqdDfUTqfVWHY7os0t66MOMIBlXd8uyW4gACsFN4
5861BC4VDjkAmvR/2yKIwExZuo/zGFfOWfWsyaeV8idPnMIq4vEzYiyJMtw/3UZj
FgA2l764sIj7RAB0uAzunSalqlm1wse9KRo1YRLK3o8ge8voCKAaszsY81kre9eo
sbtSt+lYkGjekhzqAUAFwE6KMeoB84DU7QEO05yVQDEwjQ06o6t7WRwP48Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:47 2026 by rpki-client