Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDiHPRwgRbiomDzN-8F0UIvw5cw.roa
File:                     JDiHPRwgRbiomDzN-8F0UIvw5cw.roa (raw, json)
Hash identifier:          mUP3WunvkMH584Ecl7Unj1SKDBiFUSOG+E0+QpACW08=
Subject key identifier:   24:38:87:3D:1C:20:45:B8:A8:98:3C:CD:FB:C1:74:50:8B:F0:E5:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       106D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDiHPRwgRbiomDzN-8F0UIvw5cw.roa
Signing time:             Sun 01 Mar 2026 01:34:21 +0000
ROA not before:           Sun 01 Mar 2026 01:34:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4205 (0x106d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:34:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2438873D1C2045B8A8983CCDFBC174508BF0E5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:a2:25:79:bb:2b:25:ab:ae:12:95:09:72:
                    6b:9e:fd:21:b6:1a:01:89:53:f9:24:e1:3c:32:0f:
                    3b:53:83:bb:20:11:42:5d:a4:95:c6:a9:44:ce:b5:
                    08:d1:27:8a:c3:68:37:a3:95:1c:1e:0d:38:f2:40:
                    dd:7f:4c:36:6e:96:c8:2c:bc:0c:31:85:25:10:13:
                    e6:74:0c:5e:cd:d4:0b:ef:2c:2b:11:35:88:7e:21:
                    a6:0a:5e:51:28:c8:7d:f9:f3:e9:11:aa:2f:2c:f4:
                    b3:61:47:9f:1c:00:06:ee:93:f4:0b:ab:52:e4:fa:
                    24:4a:44:94:6c:da:a0:9d:5c:75:d5:fe:90:b7:23:
                    98:94:2d:14:20:56:0e:1d:7d:d4:10:63:2f:dd:1b:
                    cd:ce:ef:b1:f7:a7:1e:79:e6:c7:6c:e6:96:9d:96:
                    2f:ec:8f:84:ab:1e:04:b6:dd:cd:ef:52:a2:2a:0e:
                    72:a6:d7:6c:aa:fe:31:a8:41:98:39:98:5b:97:ec:
                    e9:f5:a0:20:3a:ee:ca:56:30:0e:73:39:fd:e3:4a:
                    30:5c:a9:16:85:a4:74:fe:16:05:5a:d9:1f:c6:53:
                    90:0b:cd:c5:a6:fa:59:f8:f1:b7:3a:e9:54:b5:26:
                    42:08:7c:5b:4e:b9:30:87:02:05:a8:e8:b1:57:f9:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:87:3D:1C:20:45:B8:A8:98:3C:CD:FB:C1:74:50:8B:F0:E5:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JDiHPRwgRbiomDzN-8F0UIvw5cw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:f9:e3:c2:48:6b:a5:97:20:b6:5a:0a:db:29:8a:38:ec:
         d4:83:ba:1c:67:6f:51:47:e9:e6:da:a1:61:40:55:02:24:b5:
         77:18:5c:19:e0:34:2d:89:dd:2b:7a:3b:95:a8:e5:8c:60:92:
         59:6a:0a:dd:c4:ea:2e:b3:a2:e1:50:51:b8:c0:7e:eb:4d:ef:
         27:87:a7:7c:c5:37:21:09:97:e5:4f:ea:e9:3a:9f:78:96:c8:
         80:41:6c:c5:3e:ad:3a:96:1b:2c:a1:ff:39:60:ed:6f:6b:3c:
         8b:06:fa:c8:d2:27:f2:c1:fc:8e:ff:ca:42:85:a0:e8:4b:a4:
         9d:eb:23:eb:7d:2a:34:1c:82:33:79:dc:a5:6e:af:b0:de:e2:
         2e:0b:ea:95:91:dc:3e:82:39:fc:ad:28:76:60:8d:12:c4:18:
         b6:e1:9e:22:9b:d4:ae:4e:89:01:70:d0:4b:60:d4:1b:6a:56:
         e5:51:6d:e6:d9:89:a8:a1:a0:17:34:dd:70:a2:8b:70:80:9f:
         b2:59:d6:d8:0b:20:6c:27:75:00:8c:05:3a:05:a2:ea:33:b1:
         1c:e6:73:65:7c:fa:75:55:3d:4e:9c:66:bb:fc:b0:3d:0f:7b:
         bf:78:3d:ca:ff:bc:42:e3:a5:b3:50:f2:22:a8:49:ce:55:97:
         3b:f6:a0:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTM0MjFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI0Mzg4NzNEMUMyMDQ1
QjhBODk4M0NDREZCQzE3NDUwOEJGMEU1Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEMqIlebsrJauuEpUJcmue/SG2GgGJU/kk4TwyDztTg7sgEUJd
pJXGqUTOtQjRJ4rDaDejlRweDTjyQN1/TDZulsgsvAwxhSUQE+Z0DF7N1AvvLCsR
NYh+IaYKXlEoyH358+kRqi8s9LNhR58cAAbuk/QLq1Lk+iRKRJRs2qCdXHXV/pC3
I5iULRQgVg4dfdQQYy/dG83O77H3px555sds5padli/sj4SrHgS23c3vUqIqDnKm
12yq/jGoQZg5mFuX7On1oCA67spWMA5zOf3jSjBcqRaFpHT+FgVa2R/GU5ALzcWm
+ln48bc66VS1JkIIfFtOuTCHAgWo6LFX+U9lAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJDiHPRwgRbiomDzN+8F0UIvw5cwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0pEaUhQUndnUmJpb21Eek4tOEYwVUl2dzVjdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SvgwDQYJKoZIhvcNAQELBQADggEBAC+J+ePCSGullyC2WgrbKYo47NSD
uhxnb1FH6ebaoWFAVQIktXcYXBngNC2J3St6O5Wo5YxgkllqCt3E6i6zouFQUbjA
futN7yeHp3zFNyEJl+VP6uk6n3iWyIBBbMU+rTqWGyyh/zlg7W9rPIsG+sjSJ/LB
/I7/ykKFoOhLpJ3rI+t9KjQcgjN53KVur7De4i4L6pWR3D6COfytKHZgjRLEGLbh
niKb1K5OiQFw0Etg1BtqVuVRbebZiaihoBc03XCii3CAn7JZ1tgLIGwndQCMBToF
ouozsRzmc2V8+nVVPU6cZrv8sD0Pe794Pcr/vELjpbNQ8iKoSc5Vlzv2oOY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:44 2026 by rpki-client