Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tmw9vuAmwZ7gWySwplMzeGbxIb4.roa
File:                     Tmw9vuAmwZ7gWySwplMzeGbxIb4.roa (raw, json)
Hash identifier:          2hQ0oSjijKzDmKymahE7LfGMGYA8fcmIGV3wK4sjZK8=
Subject key identifier:   4E:6C:3D:BE:E0:26:C1:9E:E0:5B:24:B0:A6:53:33:78:66:F1:21:BE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       133C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tmw9vuAmwZ7gWySwplMzeGbxIb4.roa
Signing time:             Sun 01 Mar 2026 03:36:31 +0000
ROA not before:           Sun 01 Mar 2026 03:36:31 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4924 (0x133c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:31 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4E6C3DBEE026C19EE05B24B0A653337866F121BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:f1:7d:8e:ec:df:78:31:77:72:c3:70:08:
                    0e:95:c7:13:f4:f5:62:ed:b4:c3:de:2f:e9:82:64:
                    89:5f:4b:a3:eb:82:ff:1a:59:f8:72:50:cf:67:0b:
                    3a:39:e5:74:b9:82:25:1f:d7:dd:24:57:cf:2e:62:
                    76:e0:f5:76:50:4c:f1:e2:80:f8:62:ac:b6:b3:d1:
                    19:5e:32:49:d3:74:32:9e:45:29:ae:95:e9:ef:c0:
                    ff:f9:0a:5e:88:e6:be:ae:c8:13:7e:b7:52:40:4c:
                    33:09:ff:01:34:df:2c:89:bc:6d:a3:55:90:ea:3d:
                    09:e4:63:39:40:10:bb:fa:e1:b1:48:e3:1a:9b:19:
                    fe:4e:14:97:79:f5:7a:15:21:1f:36:d5:ec:39:82:
                    a1:71:fa:b9:85:39:18:6b:df:3a:92:70:1d:7e:e1:
                    0d:e0:25:c9:df:94:26:69:51:5a:73:45:a9:2a:e7:
                    63:dd:32:c4:8e:db:eb:fe:0f:65:72:36:f7:58:99:
                    db:1b:ef:2a:2b:b8:ea:7f:6e:5d:95:22:d5:0a:d0:
                    19:2c:8e:48:31:25:dd:dc:05:ff:1b:9f:05:bc:5d:
                    86:dd:a4:55:9c:bd:d0:47:3e:86:ad:ae:1f:4f:61:
                    93:86:f4:ee:10:54:5c:4f:0b:a9:63:0c:47:8b:97:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:3D:BE:E0:26:C1:9E:E0:5B:24:B0:A6:53:33:78:66:F1:21:BE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tmw9vuAmwZ7gWySwplMzeGbxIb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:ad:f6:40:a4:2a:58:f8:f5:48:22:b5:8f:fe:c5:4f:8f:
         fd:71:47:42:73:4d:7d:a8:26:cd:5c:04:69:47:33:09:cf:58:
         5e:30:41:a8:ec:52:6f:93:d2:ec:39:2b:8e:c8:09:c0:b8:61:
         63:9e:dc:ca:47:df:20:6b:13:a9:d6:cb:b3:c4:61:87:1e:c9:
         6c:00:0a:a8:76:53:5a:e9:2a:32:ec:e6:05:1f:60:55:5c:13:
         39:5c:6d:88:1e:bb:4d:93:33:41:4e:cb:2f:9b:64:06:64:a2:
         60:36:4f:d9:41:08:ed:92:1e:04:21:be:f0:b5:b2:08:55:86:
         2e:f7:91:a5:6c:85:80:6d:ed:b0:f4:a9:6f:a1:bc:27:8d:a0:
         5e:ed:26:ea:a3:b1:b2:32:36:61:48:f6:68:e9:a3:b9:52:49:
         72:8f:0e:cd:d4:fd:25:38:8b:d2:20:e8:dd:be:03:34:19:2f:
         50:2d:ce:7e:18:4b:cf:c1:c6:95:8a:62:08:e8:95:be:65:7c:
         07:c5:e2:0a:e5:27:9b:b8:7c:83:74:83:e1:55:45:d5:b1:c5:
         a4:4f:1c:09:9e:00:6a:ee:90:f9:ae:a2:96:e4:16:03:87:27:
         ff:c0:7d:a5:cb:ef:56:78:47:0d:2d:b6:d5:9d:c7:a8:98:82:
         ea:16:85:14
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzM2MzFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFNkMzREJFRTAyNkMx
OUVFMDVCMjRCMEE2NTMzMzc4NjZGMTIxQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTEvF9juzfeDF3csNwCA6VxxP09WLttMPeL+mCZIlfS6Prgv8a
WfhyUM9nCzo55XS5giUf190kV88uYnbg9XZQTPHigPhirLaz0RleMknTdDKeRSmu
lenvwP/5Cl6I5r6uyBN+t1JATDMJ/wE03yyJvG2jVZDqPQnkYzlAELv64bFI4xqb
Gf5OFJd59XoVIR821ew5gqFx+rmFORhr3zqScB1+4Q3gJcnflCZpUVpzRakq52Pd
MsSO2+v+D2VyNvdYmdsb7yoruOp/bl2VItUK0BksjkgxJd3cBf8bnwW8XYbdpFWc
vdBHPoatrh9PYZOG9O4QVFxPC6ljDEeLlxA3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTmw9vuAmwZ7gWySwplMzeGbxIb4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1Rtdzl2dUFtd1o3Z1d5U3dwbE16ZUdieEliNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYxaIAwDQYJKoZIhvcNAQELBQADggEBAGLgrfZApCpY+PVIIrWP/sVPj/1x
R0JzTX2oJs1cBGlHMwnPWF4wQajsUm+T0uw5K47ICcC4YWOe3MpH3yBrE6nWy7PE
YYceyWwACqh2U1rpKjLs5gUfYFVcEzlcbYgeu02TM0FOyy+bZAZkomA2T9lBCO2S
HgQhvvC1sghVhi73kaVshYBt7bD0qW+hvCeNoF7tJuqjsbIyNmFI9mjpo7lSSXKP
Ds3U/SU4i9Ig6N2+AzQZL1Atzn4YS8/BxpWKYgjolb5lfAfF4grlJ5u4fIN0g+FV
RdWxxaRPHAmeAGrukPmuopbkFgOHJ//AfaXL71Z4Rw0tttWdx6iYguoWhRQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:32 2026 by rpki-client