Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
File:                     RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa (raw, json)
Hash identifier:          9qIJAxD0w37vR2ICjsoFArnEny3PKpmYZor57Wk1R4U=
Subject key identifier:   47:38:0D:A4:14:59:90:D3:5D:5A:58:8B:4E:21:57:25:63:AA:93:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       131A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
Signing time:             Sun 01 Mar 2026 03:32:36 +0000
ROA not before:           Sun 01 Mar 2026 03:32:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4890 (0x131a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=47380DA4145990D35D5A588B4E21572563AA93C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:9f:42:e5:6d:2b:9e:43:d7:d9:bf:68:15:
                    dd:4b:5a:12:3b:44:27:ae:e6:e9:a8:33:20:cb:55:
                    72:6b:dd:4f:e1:6e:37:20:f0:55:a4:59:ba:b5:b6:
                    cf:71:bd:01:57:48:39:ad:61:33:bf:4a:c5:1e:4c:
                    92:48:fb:95:d3:ce:6c:8d:7b:0f:30:22:b2:6e:db:
                    89:ed:85:95:45:62:dd:90:1b:f0:d1:32:8a:37:a1:
                    e3:ca:14:b2:b0:49:c1:c1:56:54:59:f8:07:e9:be:
                    65:79:bf:4b:cf:6d:d2:2e:ad:83:61:1c:d9:35:a2:
                    20:08:9c:f7:7e:5a:c0:47:dc:d8:c6:35:df:fd:8a:
                    bc:5b:8a:54:b8:bf:9f:03:5f:ae:7e:ac:49:bb:2e:
                    77:e6:f4:fa:75:9d:6f:63:74:88:af:98:b9:24:45:
                    69:92:e6:2b:b6:82:35:c2:1b:c5:d6:08:31:ed:65:
                    ea:3d:f7:9e:2a:8e:8e:ac:9a:c9:b5:2e:a3:e4:94:
                    c5:d2:35:63:4e:44:66:87:4c:b7:93:63:9d:79:0c:
                    35:e8:57:2d:c5:7c:08:bd:2c:3b:a0:11:3b:ce:96:
                    39:4d:62:29:0d:5c:eb:a8:15:f2:1a:ab:10:7e:68:
                    f1:25:6d:67:99:fb:81:1d:8b:68:a3:cc:27:6d:9b:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:38:0D:A4:14:59:90:D3:5D:5A:58:8B:4E:21:57:25:63:AA:93:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RzgNpBRZkNNdWliLTiFXJWOqk8Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:54:a0:c8:cd:8f:e0:9e:e3:67:0d:60:28:bc:ac:36:55:
         cd:37:9c:56:f4:4a:7a:10:8d:ab:77:4b:d0:f5:8c:d1:40:8b:
         12:1d:cc:83:c7:4d:2a:bc:bb:12:b7:2e:58:91:67:fa:07:6e:
         32:11:26:63:61:a5:8f:5c:87:52:64:a4:4c:7e:dc:8b:6e:fb:
         ef:0e:15:72:72:a1:fb:80:cd:8c:d1:8c:46:c6:bd:9e:4b:c5:
         24:18:1c:c9:e6:8b:9b:71:c6:b6:23:5d:82:86:81:ab:3b:de:
         95:60:77:a5:ee:ec:22:b3:a0:2d:54:4b:3e:c6:e3:e0:9b:e7:
         4e:ea:20:a5:de:44:f7:96:e7:70:b6:81:a6:46:8d:3f:d1:63:
         16:5a:de:61:a9:70:20:54:28:0f:9f:e4:6d:cb:a8:5b:11:6a:
         f7:99:aa:24:5d:31:da:06:83:b7:b7:28:33:39:de:4d:88:f7:
         3b:0e:6e:43:62:f3:29:a1:77:0e:17:67:da:94:c0:92:73:04:
         26:57:a3:5b:98:f4:6a:48:39:49:df:92:36:b4:95:27:c3:fc:
         b8:88:6d:77:93:df:39:5b:0c:67:fd:ad:2b:28:7f:a6:35:05:
         76:48:ae:1f:f5:7b:31:6b:44:e9:93:41:b1:7f:3d:f3:61:17:
         04:20:aa:5e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICExowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzMyMzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ3MzgwREE0MTQ1OTkw
RDM1RDVBNTg4QjRFMjE1NzI1NjNBQTkzQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7EZ9C5W0rnkPX2b9oFd1LWhI7RCeu5umoMyDLVXJr3U/hbjcg
8FWkWbq1ts9xvQFXSDmtYTO/SsUeTJJI+5XTzmyNew8wIrJu24nthZVFYt2QG/DR
Moo3oePKFLKwScHBVlRZ+AfpvmV5v0vPbdIurYNhHNk1oiAInPd+WsBH3NjGNd/9
irxbilS4v58DX65+rEm7Lnfm9Pp1nW9jdIivmLkkRWmS5iu2gjXCG8XWCDHtZeo9
954qjo6smsm1LqPklMXSNWNORGaHTLeTY515DDXoVy3FfAi9LDugETvOljlNYikN
XOuoFfIaqxB+aPElbWeZ+4Edi2ijzCdtm5grAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURzgNpBRZkNNdWliLTiFXJWOqk8QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1J6Z05wQlJaa05OZFdsaUxUaUZYSldPcWs4US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYuAwDQYJKoZIhvcNAQELBQADggEBAJ+rVKDIzY/gnuNnDWAovKw2Vc03
nFb0SnoQjat3S9D1jNFAixIdzIPHTSq8uxK3LliRZ/oHbjIRJmNhpY9ch1JkpEx+
3Itu++8OFXJyofuAzYzRjEbGvZ5LxSQYHMnmi5txxrYjXYKGgas73pVgd6Xu7CKz
oC1USz7G4+Cb507qIKXeRPeW53C2gaZGjT/RYxZa3mGpcCBUKA+f5G3LqFsRaveZ
qiRdMdoGg7e3KDM53k2I9zsObkNi8ymhdw4XZ9qUwJJzBCZXo1uY9GpIOUnfkja0
lSfD/LiIbXeT3zlbDGf9rSsof6Y1BXZIrh/1ezFrROmTQbF/PfNhFwQgql4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:33:00 2026 by rpki-client