Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
File:                     PBLp_HGFlzx07cATb_cYvpJ0ziY.roa (raw, json)
Hash identifier:          J5W7p/U9VFRNB7loac3lXsRO4rEBrSeyWIUxnb/YHlY=
Subject key identifier:   3C:12:E9:FC:71:85:97:3C:74:ED:C0:13:6F:F7:18:BE:92:74:CE:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
Signing time:             Sun 01 Mar 2026 02:31:21 +0000
ROA not before:           Sun 01 Mar 2026 02:31:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4520 (0x11a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3C12E9FC7185973C74EDC0136FF718BE9274CE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:14:db:02:50:cf:61:91:29:45:4e:16:b6:
                    e8:99:79:65:3e:74:6e:0a:29:0c:ec:b5:fe:ec:17:
                    9e:0b:ec:3d:91:40:d8:84:23:ab:c7:73:8d:ff:5d:
                    0c:c8:ee:83:95:49:26:22:44:78:64:d5:d4:e2:0a:
                    69:d3:c0:13:fe:28:a0:ac:1d:fc:30:c6:ad:f9:98:
                    3e:37:6b:b0:72:4e:7e:e1:e2:31:69:2b:c7:66:c2:
                    7b:4f:36:16:17:2e:36:79:ef:4b:ab:91:ac:89:07:
                    c9:f5:7a:98:91:a3:22:f0:e9:ff:f9:73:15:7b:16:
                    30:70:41:0e:d7:5a:1b:ec:b3:54:d6:fe:ed:f2:f0:
                    33:57:c5:3e:4f:5b:08:02:08:e9:86:5d:6f:bf:67:
                    a4:ec:df:0f:f3:34:16:a2:ec:ea:da:cd:37:50:7c:
                    96:b5:67:46:ac:e1:48:36:13:2a:0c:be:41:41:e5:
                    32:88:3c:e7:88:df:ec:be:b1:26:2b:67:84:1a:2d:
                    48:9a:46:4e:3e:e7:fb:68:d6:1e:70:d4:9a:91:6f:
                    de:64:6e:c5:06:9d:8c:81:e1:8b:59:d7:c9:5d:54:
                    61:fe:fe:b6:f0:dc:99:d6:88:1b:10:45:e2:c0:56:
                    c7:e0:09:4b:91:98:ec:2c:bd:65:96:6f:9b:d2:9c:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:12:E9:FC:71:85:97:3C:74:ED:C0:13:6F:F7:18:BE:92:74:CE:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PBLp_HGFlzx07cATb_cYvpJ0ziY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:41:6d:38:0e:01:6f:46:58:5e:a7:89:8e:30:76:9f:c5:fe:
         f3:8b:9f:4d:bf:d8:19:e7:48:1b:95:71:16:c3:fa:e0:63:9b:
         6f:cf:3f:28:4d:72:10:60:12:1d:f0:10:bc:f1:25:49:d2:fe:
         21:e4:ba:85:39:f2:56:10:f4:1a:11:87:46:59:22:4c:76:c8:
         d2:b4:14:2e:2a:02:6c:6f:e4:d8:1c:72:0a:27:ae:0a:e1:53:
         b7:f2:88:fe:86:c2:36:a6:3f:49:a5:33:f1:90:c9:21:9c:e2:
         61:91:41:75:5a:2d:11:a3:04:80:4f:68:44:8a:53:35:14:03:
         32:dd:f4:54:a1:00:c5:7f:26:64:95:65:15:85:92:dd:8f:2c:
         b8:26:0d:29:07:96:b6:de:2b:c9:2c:62:ed:06:48:93:41:99:
         76:19:65:88:63:77:d9:d3:ea:09:56:5d:f3:c2:de:9a:d9:f7:
         ca:11:b7:05:7b:7a:99:b3:b2:4a:ad:41:b3:07:7c:31:1d:50:
         81:2c:3b:ea:ee:75:ca:95:dc:cd:38:ea:80:a7:5b:25:4e:a3:
         dd:e9:d7:57:09:f3:32:cc:7d:2a:e7:4d:af:1e:a7:ab:d3:0e:
         b3:59:a6:aa:4c:b3:7e:ca:32:3b:51:fb:88:df:94:3c:2c:3e:
         f2:16:2b:94
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjMxMjFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDMTJFOUZDNzE4NTk3
M0M3NEVEQzAxMzZGRjcxOEJFOTI3NENFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBVBTbAlDPYZEpRU4WtuiZeWU+dG4KKQzstf7sF54L7D2RQNiE
I6vHc43/XQzI7oOVSSYiRHhk1dTiCmnTwBP+KKCsHfwwxq35mD43a7ByTn7h4jFp
K8dmwntPNhYXLjZ570urkayJB8n1epiRoyLw6f/5cxV7FjBwQQ7XWhvss1TW/u3y
8DNXxT5PWwgCCOmGXW+/Z6Ts3w/zNBai7OrazTdQfJa1Z0as4Ug2EyoMvkFB5TKI
POeI3+y+sSYrZ4QaLUiaRk4+5/to1h5w1JqRb95kbsUGnYyB4YtZ18ldVGH+/rbw
3JnWiBsQReLAVsfgCUuRmOwsvWWWb5vSnOLFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPBLp/HGFlzx07cATb/cYvpJ0ziYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1BCTHBfSEdGbHp4MDdjQVRiX2NZdnBKMHppWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaCgwDQYJKoZIhvcNAQELBQADggEBAAdBbTgOAW9GWF6niY4wdp/F/vOL
n02/2BnnSBuVcRbD+uBjm2/PPyhNchBgEh3wELzxJUnS/iHkuoU58lYQ9BoRh0ZZ
Ikx2yNK0FC4qAmxv5NgccgonrgrhU7fyiP6GwjamP0mlM/GQySGc4mGRQXVaLRGj
BIBPaESKUzUUAzLd9FShAMV/JmSVZRWFkt2PLLgmDSkHlrbeK8ksYu0GSJNBmXYZ
ZYhjd9nT6glWXfPC3prZ98oRtwV7epmzskqtQbMHfDEdUIEsO+rudcqV3M046oCn
WyVOo93p11cJ8zLMfSrnTa8ep6vTDrNZpqpMs37KMjtR+4jflDwsPvIWK5Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:12 2026 by rpki-client