Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
File:                     IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa (raw, json)
Hash identifier:          RAZ0+Y4vSgWQR3v36QsF0HwYPfuWSZU/ien7WGhw2WM=
Subject key identifier:   20:3B:17:30:C5:C5:29:4D:E9:2D:46:1D:A8:1F:F6:7E:C9:7B:39:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1176
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
Signing time:             Sun 01 Mar 2026 02:22:03 +0000
ROA not before:           Sun 01 Mar 2026 02:22:03 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4470 (0x1176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:22:03 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=203B1730C5C5294DE92D461DA81FF67EC97B39AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:58:4c:3d:de:f7:a4:97:2f:ce:00:ab:0f:
                    bc:3f:ac:a5:61:be:62:b0:1b:88:91:7c:cc:a2:33:
                    70:5f:c0:fe:6c:d0:07:bf:17:86:80:96:b6:4e:e3:
                    21:8a:f3:a6:7c:ea:c6:02:7b:49:7e:90:ad:af:25:
                    25:a3:88:0c:1f:76:e2:3c:d0:97:44:4e:ee:c2:9d:
                    90:73:b4:41:6a:a5:91:b5:e4:72:68:04:53:5c:84:
                    c1:cd:bd:1e:30:41:16:c1:4b:7e:9f:89:05:f1:8c:
                    c3:3c:92:b3:ee:40:cc:fc:51:da:97:f5:af:6f:5e:
                    c4:e5:c4:d3:84:93:40:ad:da:d9:8f:00:0f:e2:99:
                    dc:6f:33:6c:ce:1e:96:f7:d2:37:05:db:5b:3b:2d:
                    29:19:6a:b6:0a:13:7d:44:18:50:da:9d:ab:77:8e:
                    2c:56:5b:e4:2e:2c:4f:9c:8d:66:31:4c:bb:cf:dd:
                    9b:04:58:08:af:99:2d:fb:1e:a5:b8:c7:b3:5a:1f:
                    f9:7e:1a:3f:dd:14:17:8b:34:70:50:c0:c6:27:b4:
                    4a:53:f2:07:f2:45:53:5b:2a:38:c9:54:a4:10:2f:
                    b0:22:2d:5e:25:04:62:74:9d:8d:4d:81:73:46:48:
                    a8:ee:27:a8:c0:3f:e0:7a:2e:7c:bd:d6:24:a4:fa:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3B:17:30:C5:C5:29:4D:E9:2D:46:1D:A8:1F:F6:7E:C9:7B:39:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IDsXMMXFKU3pLUYdqB_2fsl7Oao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:fb:e8:15:e0:bf:05:8b:3f:29:73:80:9b:3a:ae:46:05:
         7b:e9:01:62:73:da:8d:c9:25:9a:b8:8a:65:ed:be:95:12:84:
         a2:ab:92:fd:65:c8:fd:b8:37:2d:6e:14:59:7a:e5:ec:ca:f5:
         33:b8:37:24:b6:7d:c6:6e:01:e2:1a:b9:89:a2:a2:ef:5e:f5:
         bf:c6:86:4d:ec:6d:21:9f:ee:55:86:25:35:e1:ee:b1:7b:ce:
         cf:fa:bb:4a:3f:b7:fa:90:8a:9e:f9:10:7a:b2:a1:bd:41:77:
         e9:0b:f2:c7:7d:0f:ac:93:c8:e2:85:97:ec:cf:52:d1:5e:3e:
         aa:e1:31:65:01:05:65:fe:6c:77:ad:ef:08:2a:1c:ee:e4:00:
         92:ee:e9:5a:4f:b1:fc:83:3a:82:72:e4:e0:74:4d:41:d0:e0:
         f8:49:2d:d3:d8:bc:64:23:42:20:35:5b:1b:bc:38:19:23:a5:
         f1:85:99:ba:4f:4c:44:d0:35:97:ec:21:63:2a:90:35:36:7c:
         cf:fe:38:4d:74:af:a4:0a:0b:be:d2:21:86:ba:fc:4c:0e:80:
         e5:46:8f:3e:64:c1:5e:a9:7e:24:41:36:f2:db:86:0c:d7:92:
         d2:3a:3d:c2:6d:e4:b9:1c:b3:8b:21:cf:4e:6c:ae:93:91:08:
         8f:c7:a8:8e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjIyMDNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwM0IxNzMwQzVDNTI5
NERFOTJENDYxREE4MUZGNjdFQzk3QjM5QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpblhMPd73pJcvzgCrD7w/rKVhvmKwG4iRfMyiM3BfwP5s0Ae/
F4aAlrZO4yGK86Z86sYCe0l+kK2vJSWjiAwfduI80JdETu7CnZBztEFqpZG15HJo
BFNchMHNvR4wQRbBS36fiQXxjMM8krPuQMz8UdqX9a9vXsTlxNOEk0Ct2tmPAA/i
mdxvM2zOHpb30jcF21s7LSkZarYKE31EGFDanat3jixWW+QuLE+cjWYxTLvP3ZsE
WAivmS37HqW4x7NaH/l+Gj/dFBeLNHBQwMYntEpT8gfyRVNbKjjJVKQQL7AiLV4l
BGJ0nY1NgXNGSKjuJ6jAP+B6Lny91iSk+tWtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIDsXMMXFKU3pLUYdqB/2fsl7OaowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0lEc1hNTVhGS1UzcExVWWRxQl8yZnNsN09hby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaXIwDQYJKoZIhvcNAQELBQADggEBAG4m++gV4L8Fiz8pc4CbOq5GBXvp
AWJz2o3JJZq4imXtvpUShKKrkv1lyP24Ny1uFFl65ezK9TO4NyS2fcZuAeIauYmi
ou9e9b/Ghk3sbSGf7lWGJTXh7rF7zs/6u0o/t/qQip75EHqyob1Bd+kL8sd9D6yT
yOKFl+zPUtFePqrhMWUBBWX+bHet7wgqHO7kAJLu6VpPsfyDOoJy5OB0TUHQ4PhJ
LdPYvGQjQiA1Wxu8OBkjpfGFmbpPTETQNZfsIWMqkDU2fM/+OE10r6QKC77SIYa6
/EwOgOVGjz5kwV6pfiRBNvLbhgzXktI6PcJt5Lkcs4shz05srpORCI/HqI4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:24 2026 by rpki-client