Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
File:                     GQlSiFC1OapvP8duk0zpZQwJM9k.roa (raw, json)
Hash identifier:          ZNfSvMck+DlzsomL/Q2KKm36IsnLqUWH6VpbbyU01Vw=
Subject key identifier:   19:09:52:88:50:B5:39:AA:6F:3F:C7:6E:93:4C:E9:65:0C:09:33:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
Signing time:             Sun 01 Mar 2026 02:44:38 +0000
ROA not before:           Sun 01 Mar 2026 02:44:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4602 (0x11fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1909528850B539AA6F3FC76E934CE9650C0933D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:9a:5d:d9:7f:6c:be:d1:46:25:2a:71:b1:
                    89:af:db:5e:5a:97:ba:a8:e1:3d:04:e9:08:42:8f:
                    fb:3a:15:63:76:9e:3e:39:21:93:72:5d:56:ff:ff:
                    b8:40:eb:e1:ab:a7:f2:c4:e1:8d:06:ed:6e:4c:f4:
                    8f:e4:5c:90:c1:eb:23:3c:36:12:19:63:35:52:7b:
                    a5:a0:b3:d4:e8:59:44:6d:d5:40:83:fb:ef:90:4a:
                    a0:50:60:34:b9:5d:c0:e0:52:fd:dd:35:7a:8c:13:
                    a2:e0:72:55:03:e3:85:72:5c:be:45:7b:ba:18:53:
                    71:ba:fc:66:06:73:f5:ba:ce:99:5d:35:9f:75:3e:
                    56:3e:bb:01:2b:3a:92:34:13:da:fc:68:ad:4d:cb:
                    f8:a7:fd:88:a5:93:4a:2a:5c:18:9a:55:21:73:99:
                    9b:fd:3c:6c:7e:68:ee:c0:dc:7b:c6:5f:0a:7f:f9:
                    df:fb:22:bf:d1:26:d2:5d:68:8a:dc:bc:7a:bb:34:
                    f6:f7:03:d0:3d:c3:20:1c:c6:3b:fd:a8:67:05:7c:
                    96:f1:7e:a6:f2:8c:62:e4:84:a1:9d:ae:67:ee:9d:
                    0f:1c:0b:ed:aa:d4:05:94:c5:2a:d5:75:a2:91:d6:
                    14:09:98:e1:89:46:e4:13:28:6e:57:4a:5d:a2:69:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:52:88:50:B5:39:AA:6F:3F:C7:6E:93:4C:E9:65:0C:09:33:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQlSiFC1OapvP8duk0zpZQwJM9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:ff:00:c0:5a:5a:75:c3:f8:fc:88:1e:62:be:78:94:81:fa:
         14:5b:e4:a4:db:0c:f3:60:b4:16:17:66:ed:73:e6:72:9f:ce:
         f7:4a:7e:5b:99:9b:ce:33:5c:65:2c:e4:1b:98:72:e9:c2:21:
         f3:5a:11:4e:df:14:21:5b:52:70:74:48:80:8e:74:01:90:ab:
         19:04:b5:d7:83:fd:22:ce:1e:c3:5f:ba:29:08:a6:9a:94:9d:
         5f:88:0c:e0:96:46:96:08:3b:e7:57:48:04:c1:c8:0f:d7:34:
         f8:3b:f5:28:aa:23:7e:65:79:2d:3d:13:9a:1f:e0:20:a3:ad:
         4e:b6:d8:e0:03:9b:b5:7a:08:7f:45:d4:a0:00:15:85:87:35:
         db:49:cd:33:1a:63:78:83:97:cd:bb:9a:48:7a:3a:07:ee:bf:
         0a:42:f7:bb:9e:2b:62:6c:c7:c5:87:77:dc:f5:c0:03:9b:2d:
         59:22:a5:ce:97:3e:f6:6a:37:80:ac:3b:3b:07:2f:48:3c:62:
         40:a4:d0:1a:6e:2f:56:6b:0c:20:26:2f:31:83:24:d9:2e:e3:
         2a:04:ce:32:54:a4:ea:3e:5d:7a:00:0f:78:47:55:98:25:cb:
         79:c7:ad:92:d2:c5:b0:57:4a:3e:a6:8f:69:e5:a3:95:41:0c:
         7c:ab:d3:12
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ0MzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5MDk1Mjg4NTBCNTM5
QUE2RjNGQzc2RTkzNENFOTY1MEMwOTMzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIM5pd2X9svtFGJSpxsYmv215al7qo4T0E6QhCj/s6FWN2nj45
IZNyXVb//7hA6+Grp/LE4Y0G7W5M9I/kXJDB6yM8NhIZYzVSe6Wgs9ToWURt1UCD
+++QSqBQYDS5XcDgUv3dNXqME6LgclUD44VyXL5Fe7oYU3G6/GYGc/W6zpldNZ91
PlY+uwErOpI0E9r8aK1Ny/in/Yilk0oqXBiaVSFzmZv9PGx+aO7A3HvGXwp/+d/7
Ir/RJtJdaIrcvHq7NPb3A9A9wyAcxjv9qGcFfJbxfqbyjGLkhKGdrmfunQ8cC+2q
1AWUxSrVdaKR1hQJmOGJRuQTKG5XSl2iaWWfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGQlSiFC1OapvP8duk0zpZQwJM9kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0dRbFNpRkMxT2FwdlA4ZHVrMHpwWlF3Sk05ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYA4wDQYJKoZIhvcNAQELBQADggEBAIH/AMBaWnXD+PyIHmK+eJSB+hRb
5KTbDPNgtBYXZu1z5nKfzvdKfluZm84zXGUs5BuYcunCIfNaEU7fFCFbUnB0SICO
dAGQqxkEtdeD/SLOHsNfuikIppqUnV+IDOCWRpYIO+dXSATByA/XNPg79SiqI35l
eS09E5of4CCjrU622OADm7V6CH9F1KAAFYWHNdtJzTMaY3iDl827mkh6OgfuvwpC
97ueK2Jsx8WHd9z1wAObLVkipc6XPvZqN4CsOzsHL0g8YkCk0BpuL1ZrDCAmLzGD
JNku4yoEzjJUpOo+XXoAD3hHVZgly3nHrZLSxbBXSj6mj2nlo5VBDHyr0xI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:02 2026 by rpki-client