Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9s0aGcmA4KTUwtY9W-X1YNaw-_U.roa
File:                     9s0aGcmA4KTUwtY9W-X1YNaw-_U.roa (raw, json)
Hash identifier:          6gA1sybV3M45st/ukmgKjx1PWBIZvEkqzr03jP4L4jE=
Subject key identifier:   F6:CD:1A:19:C9:80:E0:A4:D4:C2:D6:3D:5B:E5:F5:60:D6:B0:FB:F5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       132C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9s0aGcmA4KTUwtY9W-X1YNaw-_U.roa
Signing time:             Sun 01 Mar 2026 03:36:22 +0000
ROA not before:           Sun 01 Mar 2026 03:36:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4908 (0x132c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F6CD1A19C980E0A4D4C2D63D5BE5F560D6B0FBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:c8:78:51:b0:47:bf:1a:0c:38:99:68:46:
                    c3:d3:71:b1:2f:36:55:1b:81:30:18:09:56:46:a5:
                    3e:cf:1a:19:a0:c8:2c:21:7e:44:3a:21:6a:4b:1d:
                    db:1c:ed:0e:8e:cc:d5:80:84:6d:11:d2:66:af:84:
                    3e:3b:9c:18:cf:6a:00:1b:89:38:63:ed:55:82:cd:
                    7f:84:14:dc:bb:71:d8:f9:f8:ee:58:e3:de:17:f0:
                    0d:46:b1:1c:c9:98:2c:28:b6:b9:c6:09:16:d8:bb:
                    4c:77:97:f5:1e:d0:cf:56:4d:74:3b:0e:e8:2d:ca:
                    04:62:b2:4e:cd:b8:aa:7e:2a:46:60:a5:2a:df:81:
                    5f:e1:f3:be:cc:87:08:9d:9f:6b:ae:ec:ce:b3:1f:
                    53:40:db:bd:66:16:75:f3:4f:c0:b5:7f:cb:eb:8e:
                    6a:dc:6a:72:0c:3a:2f:15:be:dc:a8:e2:f4:d0:86:
                    80:a3:1e:1f:1b:4d:1a:89:50:e3:98:4e:b1:47:79:
                    cd:7a:af:98:a6:d4:b3:43:2f:5c:06:fa:d1:5b:b2:
                    94:de:9a:f3:45:1c:53:cd:f9:49:cf:ba:e6:bc:d1:
                    46:16:3c:37:52:0e:00:bb:92:64:87:d0:76:46:ec:
                    87:b5:36:39:c0:e3:2d:1e:19:37:9c:3e:4f:55:01:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:1A:19:C9:80:E0:A4:D4:C2:D6:3D:5B:E5:F5:60:D6:B0:FB:F5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9s0aGcmA4KTUwtY9W-X1YNaw-_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:ed:6f:f5:30:7b:77:d2:24:27:75:be:da:03:80:8a:84:
         80:c4:dc:bf:52:6e:68:0f:6a:fd:a8:2e:e8:2e:c2:f4:d5:68:
         f9:5c:62:23:f7:61:ac:d6:25:93:bf:d4:09:74:16:a1:96:6a:
         88:90:4c:62:a2:42:5c:ee:67:62:e0:d7:ed:28:d8:d9:33:d8:
         40:c2:36:95:36:96:72:21:0e:9f:2d:3e:38:e4:22:8b:aa:d7:
         97:54:6a:90:af:8a:1d:23:4e:c3:6e:c7:4a:1a:3e:1f:6b:60:
         aa:3b:39:bb:7b:4e:58:65:80:dc:d8:8c:b3:2c:ec:37:39:cf:
         1d:8f:8e:0e:ce:5f:50:cd:50:43:74:57:4b:c9:d1:24:32:a2:
         bc:00:ad:df:82:8b:da:02:d3:82:5a:f7:66:9b:f5:56:44:db:
         64:1e:89:29:43:d9:55:b8:0e:ae:57:30:ce:19:f9:a1:66:c3:
         39:ee:93:8d:fb:35:a8:50:9b:3c:7b:07:f6:b6:22:68:99:20:
         92:60:58:27:4c:e1:58:0b:1a:63:56:5b:9a:e0:3a:bf:20:b4:
         65:71:0c:e1:76:c2:fb:88:d4:b4:35:d4:74:e2:f7:a6:50:87:
         0b:8d:ee:7d:0e:0b:22:b9:22:40:f9:2d:ed:34:be:23:43:16:
         0e:d8:75:bd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzM2MjJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2Q0QxQTE5Qzk4MEUw
QTRENEMyRDYzRDVCRTVGNTYwRDZCMEZCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu28h4UbBHvxoMOJloRsPTcbEvNlUbgTAYCVZGpT7PGhmgyCwh
fkQ6IWpLHdsc7Q6OzNWAhG0R0mavhD47nBjPagAbiThj7VWCzX+EFNy7cdj5+O5Y
494X8A1GsRzJmCwotrnGCRbYu0x3l/Ue0M9WTXQ7DugtygRisk7NuKp+KkZgpSrf
gV/h877Mhwidn2uu7M6zH1NA271mFnXzT8C1f8vrjmrcanIMOi8Vvtyo4vTQhoCj
Hh8bTRqJUOOYTrFHec16r5im1LNDL1wG+tFbspTemvNFHFPN+UnPuua80UYWPDdS
DgC7kmSH0HZG7Ie1NjnA4y0eGTecPk9VARGDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9s0aGcmA4KTUwtY9W+X1YNaw+/UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzlzMGFHY21BNEtUVXd0WTlXLVgxWU5hdy1fVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYBMwDQYJKoZIhvcNAQELBQADggEBAJ507W/1MHt30iQndb7aA4CKhIDE
3L9SbmgPav2oLuguwvTVaPlcYiP3YazWJZO/1Al0FqGWaoiQTGKiQlzuZ2Lg1+0o
2Nkz2EDCNpU2lnIhDp8tPjjkIouq15dUapCvih0jTsNux0oaPh9rYKo7Obt7Tlhl
gNzYjLMs7Dc5zx2Pjg7OX1DNUEN0V0vJ0SQyorwArd+Ci9oC04Ja92ab9VZE22Qe
iSlD2VW4Dq5XMM4Z+aFmwznuk437NahQmzx7B/a2ImiZIJJgWCdM4VgLGmNWW5rg
Or8gtGVxDOF2wvuI1LQ11HTi96ZQhwuN7n0OCyK5IkD5Le00viNDFg7Ydb0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:49 2026 by rpki-client