Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7cVA-SD7ifM-EWcqoIOeyfk36cs.roa
File:                     7cVA-SD7ifM-EWcqoIOeyfk36cs.roa (raw, json)
Hash identifier:          v9jRWf6GusTOwlhNSxHOdh0ZOLbO+r2ArAsdm4wPGU4=
Subject key identifier:   ED:C5:40:F9:20:FB:89:F3:3E:11:67:2A:A0:83:9E:C9:F9:37:E9:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1315
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7cVA-SD7ifM-EWcqoIOeyfk36cs.roa
Signing time:             Sun 01 Mar 2026 03:32:32 +0000
ROA not before:           Sun 01 Mar 2026 03:32:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4885 (0x1315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EDC540F920FB89F33E11672AA0839EC9F937E9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:98:50:6d:07:32:78:91:f5:e3:b8:50:61:
                    4c:f0:99:01:39:77:4a:e7:4f:65:a1:00:8a:04:26:
                    d1:de:a2:b5:3d:68:41:b2:35:35:f7:f4:4f:33:b1:
                    a8:7f:ea:d9:57:ce:da:d4:a7:60:71:21:8f:29:b8:
                    2e:3f:07:63:a8:4f:86:3f:61:4a:39:22:43:55:b0:
                    94:f6:c5:5f:db:93:29:55:22:21:4d:b6:5d:0a:26:
                    24:af:b0:59:1a:54:b5:4b:e1:30:63:76:16:e0:4a:
                    77:c4:1a:b5:18:38:cd:3a:2a:d9:a7:2c:56:60:ef:
                    da:82:86:39:c0:ae:d0:ee:35:33:f0:40:f7:30:9d:
                    75:ca:39:8d:44:64:d4:4a:d7:55:e8:3b:ef:ce:14:
                    c3:a5:51:a8:b4:78:61:63:04:04:98:7c:e6:c6:94:
                    11:43:f2:2b:27:9c:8b:f6:80:09:c2:8e:49:c9:1e:
                    f3:ce:fc:4f:c0:18:67:e1:d3:ca:74:d2:5c:14:a0:
                    f2:04:cc:aa:0c:aa:8c:00:12:7f:d8:82:a3:cb:de:
                    e1:b2:6d:70:87:f8:e8:c7:47:7c:a2:c5:1b:8d:ab:
                    34:a4:ed:f1:ee:60:70:d1:f0:12:43:30:9c:eb:78:
                    94:59:dc:7e:fd:a6:ce:d6:6f:c3:3f:da:07:41:a1:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C5:40:F9:20:FB:89:F3:3E:11:67:2A:A0:83:9E:C9:F9:37:E9:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7cVA-SD7ifM-EWcqoIOeyfk36cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:8e:fb:f5:e9:d2:7f:1a:95:ad:16:f0:93:2c:f6:72:4e:
         f0:48:3d:73:85:c3:44:d1:d9:03:2a:2a:12:10:54:30:2f:16:
         0b:ec:b9:af:e1:c3:13:34:46:f2:3e:48:a1:f3:3a:bb:f5:50:
         b9:a0:b7:42:b7:e9:c2:ec:94:ba:8b:38:3e:7a:43:93:fc:96:
         09:1b:a9:e1:e4:f1:20:f9:44:9d:6c:51:c5:d3:c1:ca:37:18:
         57:1e:df:42:02:c8:5a:21:7d:79:fe:0e:ca:7a:e7:62:a3:ae:
         99:29:ca:a7:1f:03:29:24:61:a2:59:a3:d0:d7:ad:7d:41:a6:
         ce:11:fd:0f:ad:c0:bc:c8:5e:2b:1c:28:ab:42:69:ff:57:5d:
         37:c3:73:49:47:e7:fc:da:c9:85:f7:b1:4d:69:60:dc:df:06:
         73:8a:49:43:50:77:94:81:eb:5e:d3:4b:59:c7:46:39:d9:77:
         81:36:c9:b6:36:b5:1b:bc:f0:ce:cb:b8:a8:a3:8c:bd:99:cd:
         8e:b5:a7:dd:84:e9:17:14:e4:24:b1:52:a8:56:6e:0e:0b:00:
         9f:c5:06:01:a8:a3:2c:38:d3:1d:61:29:78:5a:4c:99:c4:0c:
         02:62:d4:70:cd:12:0f:44:19:c1:20:1b:6d:0f:f7:54:90:5c:
         a8:aa:dd:c3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICExUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzMyMzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVEQzU0MEY5MjBGQjg5
RjMzRTExNjcyQUEwODM5RUM5RjkzN0U5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC82phQbQcyeJH147hQYUzwmQE5d0rnT2WhAIoEJtHeorU9aEGy
NTX39E8zsah/6tlXztrUp2BxIY8puC4/B2OoT4Y/YUo5IkNVsJT2xV/bkylVIiFN
tl0KJiSvsFkaVLVL4TBjdhbgSnfEGrUYOM06KtmnLFZg79qChjnArtDuNTPwQPcw
nXXKOY1EZNRK11XoO+/OFMOlUai0eGFjBASYfObGlBFD8isnnIv2gAnCjknJHvPO
/E/AGGfh08p00lwUoPIEzKoMqowAEn/YgqPL3uGybXCH+OjHR3yixRuNqzSk7fHu
YHDR8BJDMJzreJRZ3H79ps7Wb8M/2gdBoWv1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7cVA+SD7ifM+EWcqoIOeyfk36cswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzdjVkEtU0Q3aWZNLUVXY3FvSU9leWZrMzZjcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYC0wDQYJKoZIhvcNAQELBQADggEBAHjFjvv16dJ/GpWtFvCTLPZyTvBI
PXOFw0TR2QMqKhIQVDAvFgvsua/hwxM0RvI+SKHzOrv1ULmgt0K36cLslLqLOD56
Q5P8lgkbqeHk8SD5RJ1sUcXTwco3GFce30ICyFohfXn+Dsp652KjrpkpyqcfAykk
YaJZo9DXrX1Bps4R/Q+twLzIXiscKKtCaf9XXTfDc0lH5/zayYX3sU1pYNzfBnOK
SUNQd5SB617TS1nHRjnZd4E2ybY2tRu88M7LuKijjL2ZzY61p92E6RcU5CSxUqhW
bg4LAJ/FBgGooyw40x1hKXhaTJnEDAJi1HDNEg9EGcEgG20P91SQXKiq3cM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:31 2026 by rpki-client