Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BLIZlDWLqzjwaee1HqVGwznMYzg.roa
File:                     BLIZlDWLqzjwaee1HqVGwznMYzg.roa (raw, json)
Hash identifier:          p9pKdgnRVZxq2P4yUPo5VieQkP7fZUc8ObZ9PvF7Hsg=
Subject key identifier:   04:B2:19:94:35:8B:AB:38:F0:69:E7:B5:1E:A5:46:C3:39:CC:63:38
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BLIZlDWLqzjwaee1HqVGwznMYzg.roa
Signing time:             Sun 01 Mar 2026 02:40:35 +0000
ROA not before:           Sun 01 Mar 2026 02:40:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4558 (0x11ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:40:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=04B21994358BAB38F069E7B51EA546C339CC6338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:4b:89:29:52:77:6f:39:9f:d3:20:15:43:
                    65:eb:90:78:f1:ed:f4:db:c7:ce:6f:92:ae:dd:0f:
                    94:f8:8b:45:0b:b8:d2:03:c3:a8:7b:68:53:a2:c4:
                    30:7c:de:05:22:a1:29:0e:12:11:cf:84:ca:b0:e9:
                    9b:9e:08:9d:b3:af:cc:f8:f6:f2:e1:78:40:3d:de:
                    97:1e:24:6b:27:16:79:2a:13:80:fd:33:3e:37:8e:
                    09:96:cd:f6:3a:18:fb:7a:e0:2d:b1:fe:e0:f5:95:
                    df:2c:27:12:61:d1:a1:26:b3:dc:10:eb:40:f7:63:
                    30:ee:92:a7:ac:9f:aa:00:00:1d:8d:e1:a0:ad:7b:
                    5e:50:8e:61:08:52:99:7b:06:d9:04:2a:a0:7e:a6:
                    6b:9f:1d:6d:be:84:36:f2:ee:d1:0f:20:34:e8:0f:
                    fd:7e:a5:8d:e0:c6:69:78:d9:03:f6:49:e6:a1:12:
                    71:f1:49:ae:96:54:d6:f1:86:28:ed:3c:79:82:d4:
                    f8:91:60:cb:c6:0d:6d:d0:d8:f7:6f:69:af:76:f1:
                    70:08:39:76:a7:67:d1:bf:6d:17:52:ba:66:f0:8e:
                    d4:5c:9f:93:68:f2:3e:bc:df:e4:55:a0:9b:98:18:
                    cf:ff:6f:95:79:81:9e:23:4d:54:9a:b2:b6:d3:86:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B2:19:94:35:8B:AB:38:F0:69:E7:B5:1E:A5:46:C3:39:CC:63:38
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BLIZlDWLqzjwaee1HqVGwznMYzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:e4:ac:49:8a:9e:5e:65:83:6c:84:86:36:63:e9:d5:48:
         b4:a7:aa:90:38:1f:3c:8f:3b:45:ed:b3:e0:96:09:d0:1c:18:
         8b:ec:ed:29:94:b7:61:07:2d:56:42:68:6c:8e:7d:70:e7:0d:
         a3:37:e4:45:26:24:35:ad:23:c0:d1:97:13:6e:6d:db:01:de:
         e5:6b:76:6c:cc:28:cf:0d:f5:53:69:a9:1f:ec:80:cd:f9:ae:
         0e:41:55:fa:45:1d:5d:d7:95:0d:2a:5d:b7:5b:38:c1:54:5d:
         f2:2e:79:78:b6:df:41:11:31:13:29:7c:6a:c3:72:45:a3:88:
         c8:eb:03:8b:68:f0:28:0b:5b:cb:c0:2a:a4:24:cc:6e:13:fa:
         4f:99:89:ed:1c:a8:5a:50:3a:67:04:b1:9f:b7:73:5b:b1:1d:
         c3:f4:b0:b3:55:28:54:16:49:38:a6:23:1b:f5:09:10:1a:20:
         e8:f1:4e:3c:da:18:2a:91:dc:db:7e:da:29:61:40:fc:53:fc:
         77:d4:d6:0b:72:f0:00:3a:3f:a1:e1:b7:07:f2:cd:d8:cc:50:
         b3:03:1c:21:ad:20:f3:cd:d5:b1:1e:61:e3:bc:14:4a:dc:09:
         66:03:20:53:4f:63:ed:01:f1:87:c3:3b:a4:f0:c7:14:87:3f:
         94:bc:68:f1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQwMzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA0QjIxOTk0MzU4QkFC
MzhGMDY5RTdCNTFFQTU0NkMzMzlDQzYzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDX0uJKVJ3bzmf0yAVQ2XrkHjx7fTbx85vkq7dD5T4i0ULuNID
w6h7aFOixDB83gUioSkOEhHPhMqw6ZueCJ2zr8z49vLheEA93pceJGsnFnkqE4D9
Mz43jgmWzfY6GPt64C2x/uD1ld8sJxJh0aEms9wQ60D3YzDukqesn6oAAB2N4aCt
e15QjmEIUpl7BtkEKqB+pmufHW2+hDby7tEPIDToD/1+pY3gxml42QP2SeahEnHx
Sa6WVNbxhijtPHmC1PiRYMvGDW3Q2Pdvaa928XAIOXanZ9G/bRdSumbwjtRcn5No
8j683+RVoJuYGM//b5V5gZ4jTVSasrbThr1vAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBLIZlDWLqzjwaee1HqVGwznMYzgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0JMSVpsRFdMcXpqd2FlZTFIcVZHd3puTVl6Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxasAwDQYJKoZIhvcNAQELBQADggEBAGGc5KxJip5eZYNshIY2Y+nVSLSn
qpA4HzyPO0Xts+CWCdAcGIvs7SmUt2EHLVZCaGyOfXDnDaM35EUmJDWtI8DRlxNu
bdsB3uVrdmzMKM8N9VNpqR/sgM35rg5BVfpFHV3XlQ0qXbdbOMFUXfIueXi230ER
MRMpfGrDckWjiMjrA4to8CgLW8vAKqQkzG4T+k+Zie0cqFpQOmcEsZ+3c1uxHcP0
sLNVKFQWSTimIxv1CRAaIOjxTjzaGCqR3Nt+2ilhQPxT/HfU1gty8AA6P6Hhtwfy
zdjMULMDHCGtIPPN1bEeYeO8FErcCWYDIFNPY+0B8YfDO6TwxxSHP5S8aPE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:36 2026 by rpki-client