Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/85VobK8tpxn0schi0WEiQHXl8Pg.roa
File:                     85VobK8tpxn0schi0WEiQHXl8Pg.roa (raw, json)
Hash identifier:          PKUkL+4hg9/aGT3eX8KvElglztiJ22FFIsSjMPv5lW4=
Subject key identifier:   F3:95:68:6C:AF:2D:A7:19:F4:B1:C8:62:D1:61:22:40:75:E5:F0:F8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       109C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/85VobK8tpxn0schi0WEiQHXl8Pg.roa
Signing time:             Sun 01 Mar 2026 01:44:47 +0000
ROA not before:           Sun 01 Mar 2026 01:44:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4252 (0x109c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F395686CAF2DA719F4B1C862D161224075E5F0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:e7:f9:c4:cb:7a:d4:26:f1:c8:f2:c8:32:
                    39:6a:a0:73:bf:67:09:73:db:ed:e1:ae:11:fc:ba:
                    8a:bd:e9:99:cd:c6:a5:e3:ba:af:a9:dd:de:10:5c:
                    77:0e:e6:94:94:5c:2e:75:98:6d:7f:ae:d5:38:67:
                    1f:fe:d1:7a:ad:85:53:6f:d7:47:de:35:8d:3f:21:
                    58:ac:9b:7e:93:0e:71:53:a6:c8:15:ad:35:7c:bc:
                    86:e4:33:a4:6a:82:bd:38:a8:21:a5:1b:3e:96:d4:
                    7c:e9:3d:7f:bc:6e:67:cb:5d:be:27:95:c4:39:f8:
                    00:3c:dd:09:b6:4b:a2:67:5b:c8:10:65:0c:e3:9f:
                    23:97:d6:f1:ef:80:a0:f5:e3:e4:d7:b8:32:91:1d:
                    46:5c:6f:e9:10:a1:6c:1d:c7:47:e8:e5:fd:0e:c8:
                    49:27:33:cc:3b:94:27:91:85:d8:f0:3d:de:60:94:
                    2f:82:59:1e:fc:0b:73:29:71:03:7a:02:39:35:ed:
                    0b:dd:14:e7:1b:23:aa:97:b5:d3:07:6d:9d:d4:31:
                    be:c5:3d:c7:87:c5:d0:92:5a:55:57:95:69:5f:84:
                    8c:1c:c5:b4:f2:3e:e9:6d:e7:fb:6e:a0:ad:3b:24:
                    ce:8c:76:4c:a6:e1:4a:31:01:ce:b0:ee:18:9c:2e:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:68:6C:AF:2D:A7:19:F4:B1:C8:62:D1:61:22:40:75:E5:F0:F8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/85VobK8tpxn0schi0WEiQHXl8Pg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:61:d2:2e:d7:42:36:d8:0a:a8:07:c1:a1:53:27:b9:d4:f0:
         36:fc:13:93:44:8c:6f:09:4b:e4:5a:25:2c:80:6d:7c:50:43:
         4a:b5:d1:6b:42:49:b0:bc:08:60:0d:71:c8:aa:68:76:39:78:
         1c:5d:4d:6b:c2:88:50:e7:40:f5:6b:64:ce:e3:5a:81:dd:8c:
         e4:44:c3:c8:24:4a:58:db:bb:6f:06:df:c2:7b:d3:6d:ad:dd:
         61:20:40:77:02:89:77:f0:23:e3:cc:dc:fd:92:c7:cf:2d:07:
         31:d9:f2:42:9e:8e:e9:6b:d9:6f:70:ab:37:60:2f:99:7b:85:
         25:6b:b1:4d:0a:b9:e5:83:b6:5b:d9:87:27:24:1f:ce:9a:4e:
         40:80:09:d2:2d:91:17:00:4d:b8:79:b0:0a:6b:2a:33:3c:61:
         57:59:fa:74:d5:4f:4a:20:b8:2f:77:01:ec:51:2b:00:6c:1d:
         e6:2b:4a:62:4b:42:b5:d7:9d:46:80:c9:b9:7a:a2:c8:e8:73:
         d6:25:42:e8:af:57:0d:a0:0f:13:87:65:25:e5:10:c0:99:1c:
         33:b7:15:3e:71:f1:d5:ea:4a:c7:cc:87:c9:9d:ec:ee:fa:5c:
         d1:b1:90:f1:c2:32:5e:b9:e8:7e:22:da:c2:54:7f:de:30:30:
         c7:6b:29:ea
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTQ0NDdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYzOTU2ODZDQUYyREE3
MTlGNEIxQzg2MkQxNjEyMjQwNzVFNUYwRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv/+f5xMt61CbxyPLIMjlqoHO/Zwlz2+3hrhH8uoq96ZnNxqXj
uq+p3d4QXHcO5pSUXC51mG1/rtU4Zx/+0XqthVNv10feNY0/IVism36TDnFTpsgV
rTV8vIbkM6Rqgr04qCGlGz6W1HzpPX+8bmfLXb4nlcQ5+AA83Qm2S6JnW8gQZQzj
nyOX1vHvgKD14+TXuDKRHUZcb+kQoWwdx0fo5f0OyEknM8w7lCeRhdjwPd5glC+C
WR78C3MpcQN6Ajk17QvdFOcbI6qXtdMHbZ3UMb7FPceHxdCSWlVXlWlfhIwcxbTy
Pult5/tuoK07JM6Mdkym4UoxAc6w7hicLgsFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU85VobK8tpxn0schi0WEiQHXl8PgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Lzg1Vm9iSzh0cHhuMHNjaGkwV0VpUUhYbDhQZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaU4wDQYJKoZIhvcNAQELBQADggEBANlh0i7XQjbYCqgHwaFTJ7nU8Db8
E5NEjG8JS+RaJSyAbXxQQ0q10WtCSbC8CGANcciqaHY5eBxdTWvCiFDnQPVrZM7j
WoHdjOREw8gkSljbu28G38J7022t3WEgQHcCiXfwI+PM3P2Sx88tBzHZ8kKejulr
2W9wqzdgL5l7hSVrsU0KueWDtlvZhyckH86aTkCACdItkRcATbh5sAprKjM8YVdZ
+nTVT0oguC93AexRKwBsHeYrSmJLQrXXnUaAybl6osjoc9YlQuivVw2gDxOHZSXl
EMCZHDO3FT5x8dXqSsfMh8md7O76XNGxkPHCMl656H4i2sJUf94wMMdrKeo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:09 2026 by rpki-client