Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/asjS6FtToCUyLL0FAoWtx2hr8lM.roa
File:                     asjS6FtToCUyLL0FAoWtx2hr8lM.roa (raw, json)
Hash identifier:          jED0SLQoafHjWjTaxPxVdGl+aCT1m3QkE6mFV6fkPEU=
Subject key identifier:   6A:C8:D2:E8:5B:53:A0:25:32:2C:BD:05:02:85:AD:C7:68:6B:F2:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       110C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/asjS6FtToCUyLL0FAoWtx2hr8lM.roa
Signing time:             Sun 01 Mar 2026 02:03:01 +0000
ROA not before:           Sun 01 Mar 2026 02:03:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4364 (0x110c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:03:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6AC8D2E85B53A025322CBD050285ADC7686BF253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:48:0d:e5:3e:6a:50:6b:37:0a:08:98:b2:
                    0a:94:f0:cd:9f:00:a2:0a:8d:bd:a1:86:57:c4:1c:
                    69:bb:47:d9:bb:91:5a:b9:7e:90:a7:20:4e:b7:cf:
                    66:75:68:55:08:12:69:90:f0:ea:18:ad:9b:da:b4:
                    e1:33:88:7d:a8:5c:ec:dc:4b:ca:4e:56:cd:dc:7a:
                    fb:a5:1c:14:72:be:98:9a:d6:13:6e:b3:d7:fa:0f:
                    17:06:31:8d:6a:b2:68:2d:fe:a0:72:c0:2f:e1:28:
                    78:80:c1:2b:e7:de:7f:f3:6d:47:be:e6:5c:ff:cf:
                    da:f5:af:92:df:66:ec:38:bd:a8:68:06:a9:9f:e8:
                    8b:a0:a3:61:81:11:06:be:4e:14:cd:c8:5e:a9:fd:
                    dc:55:6d:24:71:61:15:96:53:ae:e3:3c:b3:a9:96:
                    11:d0:88:b9:83:91:be:0a:78:c4:3f:1d:1c:29:a5:
                    26:a7:5b:a1:57:be:17:4b:3c:70:21:3b:48:2f:98:
                    8d:db:33:9f:09:83:b8:5c:e1:2f:d4:60:86:26:24:
                    4b:dd:38:a9:8e:d2:65:3d:2e:38:8d:dc:6d:80:f2:
                    ec:e0:7e:c0:e5:74:77:9e:3c:64:b6:7a:fa:9b:82:
                    0d:06:f0:36:c8:56:00:e2:8e:11:c5:27:75:2e:16:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C8:D2:E8:5B:53:A0:25:32:2C:BD:05:02:85:AD:C7:68:6B:F2:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/asjS6FtToCUyLL0FAoWtx2hr8lM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:ed:c3:5a:c9:fa:a3:6a:da:32:d7:66:21:a1:39:24:bd:91:
         24:65:fd:cd:50:12:92:ba:a2:dc:4a:c1:e3:0f:4f:1a:68:b0:
         d5:5d:1a:ec:d8:80:a6:be:c6:41:99:1c:15:f8:4a:39:c9:49:
         6a:9e:b4:0a:0f:34:0a:40:1c:16:7c:97:80:8f:6b:ad:95:3c:
         4c:2f:a8:b8:7c:ff:b0:19:ac:ac:21:da:9e:d5:9e:b1:12:65:
         db:a5:6e:90:19:74:a0:59:dc:ae:ad:96:b5:43:84:f4:c3:25:
         f4:f2:1a:06:0e:b0:96:93:c0:43:a6:5c:8c:7a:82:2b:4f:51:
         1e:b0:88:f7:7b:96:a6:3e:ae:ed:12:fc:a9:fe:4c:40:7c:eb:
         93:fd:73:ac:dc:25:0a:dc:1d:e4:71:1a:38:6a:06:ab:a3:be:
         18:5b:71:f8:8e:c8:6a:b4:9c:26:af:75:ca:c0:d9:35:2d:9d:
         79:a6:63:7f:6f:35:5f:6a:ed:41:8c:95:51:72:21:b1:b2:09:
         45:91:4d:3c:ba:80:64:c2:22:30:2e:19:33:42:21:5d:d7:fa:
         58:b3:6c:90:ff:92:ea:ba:5d:2b:81:e6:70:6b:65:9e:fb:76:
         96:2a:c2:ff:14:20:15:92:c0:a3:e9:36:59:24:50:0a:e7:73:
         97:40:fb:d8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjAzMDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBQzhEMkU4NUI1M0Ew
MjUzMjJDQkQwNTAyODVBREM3Njg2QkYyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGvEgN5T5qUGs3CgiYsgqU8M2fAKIKjb2hhlfEHGm7R9m7kVq5
fpCnIE63z2Z1aFUIEmmQ8OoYrZvatOEziH2oXOzcS8pOVs3cevulHBRyvpia1hNu
s9f6DxcGMY1qsmgt/qBywC/hKHiAwSvn3n/zbUe+5lz/z9r1r5LfZuw4vahoBqmf
6Iugo2GBEQa+ThTNyF6p/dxVbSRxYRWWU67jPLOplhHQiLmDkb4KeMQ/HRwppSan
W6FXvhdLPHAhO0gvmI3bM58Jg7hc4S/UYIYmJEvdOKmO0mU9LjiN3G2A8uzgfsDl
dHeePGS2evqbgg0G8DbIVgDijhHFJ3UuFiDRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUasjS6FtToCUyLL0FAoWtx2hr8lMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2FzalM2RnRUb0NVeUxMMEZBb1d0eDJocjhsTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYPowDQYJKoZIhvcNAQELBQADggEBAN7tw1rJ+qNq2jLXZiGhOSS9kSRl
/c1QEpK6otxKweMPTxposNVdGuzYgKa+xkGZHBX4SjnJSWqetAoPNApAHBZ8l4CP
a62VPEwvqLh8/7AZrKwh2p7VnrESZdulbpAZdKBZ3K6tlrVDhPTDJfTyGgYOsJaT
wEOmXIx6gitPUR6wiPd7lqY+ru0S/Kn+TEB865P9c6zcJQrcHeRxGjhqBqujvhhb
cfiOyGq0nCavdcrA2TUtnXmmY39vNV9q7UGMlVFyIbGyCUWRTTy6gGTCIjAuGTNC
IV3X+lizbJD/kuq6XSuB5nBrZZ77dpYqwv8UIBWSwKPpNlkkUArnc5dA+9g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:52 2026 by rpki-client