Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TtG1PEMJWy06REtlpyiw7mg1Xbg.roa
File:                     TtG1PEMJWy06REtlpyiw7mg1Xbg.roa (raw, json)
Hash identifier:          fkxsfortzCPLeEHSc9ERyDfABtAvgbdrgNQciFgG4y4=
Subject key identifier:   4E:D1:B5:3C:43:09:5B:2D:3A:44:4B:65:A7:28:B0:EE:68:35:5D:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1227
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TtG1PEMJWy06REtlpyiw7mg1Xbg.roa
Signing time:             Sun 01 Mar 2026 02:52:24 +0000
ROA not before:           Sun 01 Mar 2026 02:52:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.122.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4647 (0x1227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:52:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4ED1B53C43095B2D3A444B65A728B0EE68355DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:c3:0b:4f:94:ed:f7:bb:a9:a2:61:36:0f:
                    15:c7:d3:51:45:71:51:25:1f:56:13:9c:b5:40:7d:
                    57:79:66:b0:88:80:30:c3:a6:c3:a1:c7:4e:38:00:
                    78:cd:0b:e4:0b:b5:a7:7e:d7:ce:95:72:2a:32:d4:
                    c3:c3:0e:3a:05:80:2b:1a:ba:06:1a:6f:08:7a:95:
                    8b:4a:46:67:f9:18:c1:4b:36:57:88:54:d9:a7:6b:
                    2f:c1:ae:cb:50:74:65:f3:62:82:35:ff:cc:9d:be:
                    91:b7:d9:ec:7f:32:59:d1:e8:99:ee:15:dc:f6:56:
                    14:78:66:c7:75:3c:70:3b:7e:c0:2b:23:bd:49:1d:
                    55:69:b5:03:09:83:9d:7c:c1:03:97:6a:65:3e:af:
                    cb:26:cf:95:e0:b7:31:02:f4:58:26:1e:a6:a1:c6:
                    31:31:18:e5:21:1a:18:8b:87:84:b9:9e:d0:a8:27:
                    92:1d:ac:aa:09:ad:20:19:60:66:52:66:5e:68:16:
                    ea:39:32:fd:dd:b5:4b:7f:58:79:3d:12:2d:8e:b4:
                    6a:ff:dd:d9:b1:bd:4c:5e:91:71:9a:a5:90:b3:d8:
                    6b:96:d2:52:c6:4a:e2:63:8c:25:6e:a0:40:bc:c4:
                    ca:a4:f9:79:4c:9d:c8:3a:c1:41:f8:58:bd:60:eb:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:B5:3C:43:09:5B:2D:3A:44:4B:65:A7:28:B0:EE:68:35:5D:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TtG1PEMJWy06REtlpyiw7mg1Xbg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:63:2a:e0:90:3f:60:ba:e0:17:49:87:f4:32:b4:b2:42:2c:
         60:2b:99:17:4a:86:51:96:39:d6:29:a9:17:eb:e8:58:6b:18:
         6a:ba:09:2d:46:11:d6:b9:a2:d0:e8:54:73:0d:b5:36:33:2f:
         f0:b1:90:e3:fd:3d:2f:c9:99:a2:be:0d:a7:dc:c3:07:ac:44:
         30:cb:ea:6e:72:ec:b9:e2:db:c2:85:f7:5e:5f:76:eb:2b:89:
         99:30:b1:ae:1e:2c:76:a9:55:bd:53:f2:2c:cf:5c:81:a8:f7:
         08:20:a1:de:2e:b1:1b:4b:cd:dd:fd:ef:89:d8:93:80:32:50:
         5c:e6:28:ce:d9:d0:52:3d:ee:e9:8a:58:fa:52:5a:02:f6:3a:
         69:56:e2:52:f6:dd:39:4b:10:c0:d8:10:ae:03:be:75:e7:5d:
         ca:3c:68:59:3f:a6:3b:86:a8:a4:ec:5d:cd:2c:c2:1c:c1:a9:
         6d:dc:06:64:44:45:45:36:97:c4:86:8d:4f:9c:b5:70:63:8a:
         0c:e7:2c:85:38:67:f7:55:33:70:81:c1:0a:d6:81:f5:0c:d2:
         3e:5a:c2:b0:d7:ed:71:c3:18:f0:83:b4:b8:a8:2b:a7:74:a3:
         40:5e:34:5c:de:71:f4:e4:23:54:8a:69:d6:65:19:e2:53:b5:
         a3:7a:f2:c7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjUyMjRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFRDFCNTNDNDMwOTVC
MkQzQTQ0NEI2NUE3MjhCMEVFNjgzNTVEQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwdMMLT5Tt97upomE2DxXH01FFcVElH1YTnLVAfVd5ZrCIgDDD
psOhx044AHjNC+QLtad+186Vcioy1MPDDjoFgCsaugYabwh6lYtKRmf5GMFLNleI
VNmnay/BrstQdGXzYoI1/8ydvpG32ex/MlnR6JnuFdz2VhR4Zsd1PHA7fsArI71J
HVVptQMJg518wQOXamU+r8smz5XgtzEC9FgmHqahxjExGOUhGhiLh4S5ntCoJ5Id
rKoJrSAZYGZSZl5oFuo5Mv3dtUt/WHk9Ei2OtGr/3dmxvUxekXGapZCz2GuW0lLG
SuJjjCVuoEC8xMqk+XlMncg6wUH4WL1g66LBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTtG1PEMJWy06REtlpyiw7mg1XbgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1R0RzFQRU1KV3kwNlJFdGxweWl3N21nMVhiZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPbekAwDQYJKoZIhvcNAQELBQADggEBAMxjKuCQP2C64BdJh/QytLJCLGAr
mRdKhlGWOdYpqRfr6FhrGGq6CS1GEda5otDoVHMNtTYzL/CxkOP9PS/JmaK+Dafc
wwesRDDL6m5y7Lni28KF915fdusriZkwsa4eLHapVb1T8izPXIGo9wggod4usRtL
zd3974nYk4AyUFzmKM7Z0FI97umKWPpSWgL2OmlW4lL23TlLEMDYEK4DvnXnXco8
aFk/pjuGqKTsXc0swhzBqW3cBmRERUU2l8SGjU+ctXBjigznLIU4Z/dVM3CBwQrW
gfUM0j5awrDX7XHDGPCDtLioK6d0o0BeNFzecfTkI1SKadZlGeJTtaN68sc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:14 2026 by rpki-client