Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9s41Ed7uKGNNMQ0KzI3gM6lNws.roa
File:                     F9s41Ed7uKGNNMQ0KzI3gM6lNws.roa (raw, json)
Hash identifier:          iPx1L5n87fzpX3l642pC2ZcpNrMr9cfNPJ20bQisBGw=
Subject key identifier:   17:DB:38:D4:47:7B:B8:A1:8D:34:C4:34:2B:32:37:80:CE:A5:37:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       124E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9s41Ed7uKGNNMQ0KzI3gM6lNws.roa
Signing time:             Sun 01 Mar 2026 02:56:40 +0000
ROA not before:           Sun 01 Mar 2026 02:56:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4686 (0x124e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=17DB38D4477BB8A18D34C4342B323780CEA5370B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:6c:40:1d:26:5e:6e:8f:f7:9a:01:a2:1c:
                    49:ec:8f:63:ad:77:cc:8e:c5:64:12:c3:90:28:9c:
                    57:aa:e2:a8:cd:4f:22:4e:6d:e2:1c:de:d8:01:d1:
                    90:55:dc:ab:65:ea:c2:64:48:bf:6f:f4:11:36:17:
                    c5:3d:53:76:b9:90:42:76:2f:75:20:95:37:db:89:
                    7d:98:75:6a:d1:10:96:75:ed:cb:b0:f8:88:7e:62:
                    18:db:a7:ff:d7:c7:dd:4c:09:59:f9:a5:7e:f8:e9:
                    ca:7a:92:f4:75:77:d0:fd:d2:22:f9:4b:9d:f2:50:
                    74:1b:f5:13:54:82:55:1e:ef:d5:4f:c0:38:ed:41:
                    3e:14:79:5c:29:59:40:a5:58:00:cf:ca:17:b0:ea:
                    a7:76:a7:bb:d3:16:b2:dd:94:25:f7:8e:6e:63:34:
                    c3:74:fa:1b:bd:d3:60:b9:d2:e1:a1:5e:cf:2c:66:
                    b8:d4:1c:eb:51:4a:c5:57:5b:57:26:fb:37:93:bd:
                    af:ee:48:6b:15:4b:10:c1:e2:58:38:27:af:b0:3c:
                    c9:e5:62:ac:96:d0:2b:0f:9a:56:f4:39:45:b0:e5:
                    3f:00:ce:89:88:e8:79:48:ff:d6:63:19:53:8b:cd:
                    60:1d:9e:e6:9b:be:fa:c1:f3:8a:46:2f:bd:58:83:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:38:D4:47:7B:B8:A1:8D:34:C4:34:2B:32:37:80:CE:A5:37:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F9s41Ed7uKGNNMQ0KzI3gM6lNws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         da:5c:e1:41:ee:aa:87:94:a3:8d:d4:47:b8:48:4e:92:bf:ec:
         a5:2e:96:bc:0f:2b:2a:32:7f:4e:80:03:ae:8b:d1:d7:6d:3f:
         84:75:a6:5d:b0:36:24:67:ad:4f:26:23:37:0d:8d:1b:a2:8d:
         d3:b3:40:27:75:43:aa:b3:e9:bd:05:eb:3f:7f:ae:cc:b8:5a:
         e1:f5:c7:f2:3e:45:26:fa:76:4f:4c:30:2c:ee:30:b5:dc:ad:
         f3:ae:43:e4:77:91:7e:27:b8:d0:d0:fd:7c:87:7b:f8:be:fd:
         c3:90:e8:d0:72:66:34:c6:9c:05:15:ce:48:5b:79:cb:2e:51:
         99:44:4a:80:7c:1a:af:1a:81:76:de:f5:c3:f1:3e:36:ed:6e:
         ca:54:24:73:6f:36:cb:41:88:44:d5:e9:1e:0b:35:1f:6e:b8:
         1f:0f:5d:b9:2e:28:97:8c:e7:d0:3b:e2:3f:f9:5e:13:c7:52:
         bc:06:df:8c:25:f0:c2:7e:29:29:ba:b6:e1:74:17:45:73:1f:
         df:9a:90:e0:92:01:5a:ce:58:0d:44:59:ee:4d:66:25:06:8a:
         3f:d0:76:24:26:39:ae:d0:a2:58:fe:b4:c9:aa:a7:ad:0b:8b:
         6f:e0:bb:bd:26:e7:2c:36:f6:f3:a5:dc:65:15:ef:2d:61:94:
         23:c5:eb:a8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICEk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjU2NDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3REIzOEQ0NDc3QkI4
QTE4RDM0QzQzNDJCMzIzNzgwQ0VBNTM3MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDls2xAHSZebo/3mgGiHEnsj2Otd8yOxWQSw5AonFeq4qjNTyJO
beIc3tgB0ZBV3Ktl6sJkSL9v9BE2F8U9U3a5kEJ2L3UglTfbiX2YdWrREJZ17cuw
+Ih+Yhjbp//Xx91MCVn5pX746cp6kvR1d9D90iL5S53yUHQb9RNUglUe79VPwDjt
QT4UeVwpWUClWADPyhew6qd2p7vTFrLdlCX3jm5jNMN0+hu902C50uGhXs8sZrjU
HOtRSsVXW1cm+zeTva/uSGsVSxDB4lg4J6+wPMnlYqyW0CsPmlb0OUWw5T8AzomI
6HlI/9ZjGVOLzWAdnuabvvrB84pGL71YgyrvAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUF9s41Ed7uKGNNMQ0KzI3gM6lNwswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0Y5czQxRWQ3dUtHTk5NUTBLekkzZ002bE53cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAxYzANBgkqhkiG9w0BAQsFAAOCAQEA2lzhQe6qh5SjjdRHuEhOkr/spS6W
vA8rKjJ/ToADrovR120/hHWmXbA2JGetTyYjNw2NG6KN07NAJ3VDqrPpvQXrP3+u
zLha4fXH8j5FJvp2T0wwLO4wtdyt865D5HeRfie40ND9fId7+L79w5Do0HJmNMac
BRXOSFt5yy5RmURKgHwarxqBdt71w/E+Nu1uylQkc282y0GIRNXpHgs1H264Hw9d
uS4ol4zn0DviP/leE8dSvAbfjCXwwn4pKbq24XQXRXMf35qQ4JIBWs5YDURZ7k1m
JQaKP9B2JCY5rtCiWP60yaqnrQuLb+C7vSbnLDb286XcZRXvLWGUI8XrqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:28 2026 by rpki-client