Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
File:                     EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa (raw, json)
Hash identifier:          z382HjerTieP0XYScMW0KykIIF5XC9JkHpqwlRB7L/4=
Subject key identifier:   10:36:4D:25:19:4A:3A:C8:BA:B9:E3:8E:25:A0:50:64:66:D2:A3:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       106E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
Signing time:             Sun 01 Mar 2026 01:34:22 +0000
ROA not before:           Sun 01 Mar 2026 01:34:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4206 (0x106e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:34:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=10364D25194A3AC8BAB9E38E25A0506466D2A3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:4d:5a:bc:77:ae:71:44:30:c6:49:05:75:
                    7b:72:cb:5a:fc:b0:e5:6b:57:31:1d:fe:7b:75:41:
                    95:42:14:eb:e5:f2:20:12:f6:1e:7f:95:42:83:a3:
                    c2:16:7e:b3:91:5d:87:41:7b:55:f5:bc:bb:c0:0b:
                    8f:d5:21:42:43:91:a3:01:5a:79:b8:e0:5e:4e:30:
                    d9:90:21:63:f8:0d:49:be:68:fa:48:f2:90:6d:55:
                    28:50:65:f3:30:e0:d1:17:b9:cc:a3:ab:0c:00:72:
                    43:f4:9d:6e:75:c2:91:cc:00:1d:e4:e7:19:3e:99:
                    ef:07:4e:c8:5b:7d:52:e6:c8:d7:75:90:fd:30:e0:
                    04:5c:67:10:69:f1:1d:f8:49:69:5b:a5:2f:5e:5e:
                    3e:7d:e4:f6:31:de:4f:5f:5a:49:82:a8:f0:8a:b9:
                    3e:e4:11:49:0f:8c:ed:d3:49:ca:a7:90:64:3a:59:
                    8e:8c:b7:60:4f:a6:b6:54:01:e0:8f:1e:3c:1a:05:
                    8e:32:e7:76:9c:46:1c:e5:00:9d:c0:ff:cd:b5:42:
                    80:8e:26:a7:c7:06:c8:f4:cd:9f:c5:28:41:9e:de:
                    66:99:92:ce:ed:97:b9:80:ad:51:9f:1c:b6:3e:15:
                    5d:63:42:8f:36:b7:e8:7a:0d:97:4b:39:c7:6c:1b:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:4D:25:19:4A:3A:C8:BA:B9:E3:8E:25:A0:50:64:66:D2:A3:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EDZNJRlKOsi6ueOOJaBQZGbSo-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:09:a5:6e:7d:d7:8c:f2:dd:2a:aa:25:ab:aa:ac:59:48:ab:
         81:ea:09:6f:ba:fe:e3:4c:aa:87:05:d1:22:20:a6:07:84:c9:
         ee:a3:36:35:b2:9b:32:ae:48:9b:ee:33:69:20:ff:6c:f3:56:
         e1:e9:0d:17:c8:68:ae:32:8d:4d:7a:15:b5:bb:e2:ca:0f:bc:
         55:3e:b5:23:73:7b:27:5a:bf:28:f8:44:c0:93:2a:81:e8:61:
         f2:90:a8:d4:4f:0a:aa:6a:be:a0:33:9b:90:49:34:cd:e3:6f:
         fc:d0:45:04:56:79:08:f4:ff:44:49:6d:4f:4d:47:19:f8:c8:
         b7:bd:dc:4a:70:2b:da:81:8b:d9:94:68:7d:a1:c2:1a:39:97:
         77:86:f1:d6:a1:9d:ec:6c:a6:a2:38:64:ba:29:3f:4a:7b:b9:
         94:42:7c:9e:be:53:ca:e2:6f:20:d2:f6:9b:1b:72:e2:eb:87:
         0b:35:92:00:4e:1b:9d:61:20:50:52:82:6b:e7:89:94:1b:5d:
         4e:02:78:c3:04:21:89:d9:02:4a:7c:d0:11:e3:71:a6:29:8d:
         05:67:f8:83:f5:62:c6:e9:a5:b3:22:d2:0b:67:6d:5a:ad:f5:
         58:f9:c6:6b:16:c5:ce:2d:df:62:ce:7e:e7:0c:c6:1c:90:1d:
         13:43:29:0d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTM0MjJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEwMzY0RDI1MTk0QTNB
QzhCQUI5RTM4RTI1QTA1MDY0NjZEMkEzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiSU1avHeucUQwxkkFdXtyy1r8sOVrVzEd/nt1QZVCFOvl8iAS
9h5/lUKDo8IWfrORXYdBe1X1vLvAC4/VIUJDkaMBWnm44F5OMNmQIWP4DUm+aPpI
8pBtVShQZfMw4NEXucyjqwwAckP0nW51wpHMAB3k5xk+me8HTshbfVLmyNd1kP0w
4ARcZxBp8R34SWlbpS9eXj595PYx3k9fWkmCqPCKuT7kEUkPjO3TScqnkGQ6WY6M
t2BPprZUAeCPHjwaBY4y53acRhzlAJ3A/821QoCOJqfHBsj0zZ/FKEGe3maZks7t
l7mArVGfHLY+FV1jQo82t+h6DZdLOcdsGyuLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEDZNJRlKOsi6ueOOJaBQZGbSo+YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0VEWk5KUmxLT3NpNnVlT09KYUJRWkdiU28tWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExatYwDQYJKoZIhvcNAQELBQADggEBAF0JpW5914zy3SqqJauqrFlIq4Hq
CW+6/uNMqocF0SIgpgeEye6jNjWymzKuSJvuM2kg/2zzVuHpDRfIaK4yjU16FbW7
4soPvFU+tSNzeydavyj4RMCTKoHoYfKQqNRPCqpqvqAzm5BJNM3jb/zQRQRWeQj0
/0RJbU9NRxn4yLe93EpwK9qBi9mUaH2hwho5l3eG8dahnexspqI4ZLopP0p7uZRC
fJ6+U8ribyDS9psbcuLrhws1kgBOG51hIFBSgmvniZQbXU4CeMMEIYnZAkp80BHj
caYpjQVn+IP1YsbppbMi0gtnbVqt9Vj5xmsWxc4t32LOfucMxhyQHRNDKQ0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:05 2026 by rpki-client