Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
File:                     gus8qtK14fRmnkkUCNNPbu19wlk.roa (raw, json)
Hash identifier:          y+YgU0wTRvgv/HMsTnUkMRsWB3Jbk3eGucOgWRbt4/4=
Subject key identifier:   82:EB:3C:AA:D2:B5:E1:F4:66:9E:49:14:08:D3:4F:6E:ED:7D:C2:59
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
Signing time:             Sun 01 Mar 2026 02:02:51 +0000
ROA not before:           Sun 01 Mar 2026 02:02:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4347 (0x10fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=82EB3CAAD2B5E1F4669E491408D34F6EED7DC259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:3c:4f:4f:d8:57:85:72:46:83:e4:53:20:
                    dc:88:01:be:06:cd:52:48:4d:09:d9:74:14:e1:93:
                    ce:c7:10:44:77:39:f5:2c:aa:d6:7b:d0:e8:61:61:
                    04:77:48:c0:33:3f:07:6f:0d:6b:f8:93:97:ea:5d:
                    a3:98:8b:79:b5:1b:5b:56:a0:f5:f9:eb:16:b6:c1:
                    b8:9b:da:30:8f:56:a1:dd:d7:ba:d5:96:de:31:cf:
                    fe:ba:e9:e9:19:26:c8:00:d7:b0:02:3b:e0:58:9f:
                    85:92:9d:f0:d4:3f:68:f8:da:55:55:fe:ca:9c:fe:
                    b0:04:1b:1f:21:3c:c1:48:66:14:81:b3:a0:44:f8:
                    79:50:6c:ad:3c:73:95:f6:49:b9:9c:58:a4:ab:5d:
                    f3:39:7f:d0:04:38:ad:90:11:44:65:e6:82:11:88:
                    2c:9e:76:4d:66:e7:32:53:60:99:95:4d:a1:e2:32:
                    a1:27:9e:40:82:6e:e3:b1:2b:5d:aa:3b:6e:1b:3f:
                    11:75:67:90:28:c3:c6:1d:10:f3:0f:21:1d:4d:2c:
                    ef:6e:9a:3c:29:0a:4f:cb:af:45:37:a5:e9:0f:c0:
                    8e:40:5d:ef:b4:b0:dd:fc:03:17:b6:a2:4b:f1:ca:
                    fc:be:40:9e:1e:1f:7b:b2:c1:85:d6:26:9e:12:88:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:3C:AA:D2:B5:E1:F4:66:9E:49:14:08:D3:4F:6E:ED:7D:C2:59
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gus8qtK14fRmnkkUCNNPbu19wlk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:1c:8e:a3:6e:c5:74:88:8d:bd:a7:f0:44:06:0c:56:b9:
         73:7f:d9:19:2c:3d:ba:fa:9b:10:5f:6c:fa:ae:92:c7:ca:97:
         f6:7a:fa:96:c2:b3:6f:bc:cf:ee:64:57:29:45:47:8d:fa:fc:
         e9:c3:f4:08:84:69:57:3a:1c:dd:52:2a:aa:a7:2f:2c:1f:70:
         d4:85:a7:98:05:d1:49:0e:95:bd:11:3e:d9:d6:6f:21:f4:ed:
         94:1a:5b:42:de:23:d0:a6:10:36:29:bd:0d:97:9a:75:e7:0d:
         8d:d3:28:50:90:6a:a1:f9:ab:09:85:c3:15:fa:97:ee:66:64:
         ff:08:40:a0:44:d3:50:9e:c7:22:70:27:d6:cb:02:36:fc:58:
         70:33:57:aa:b5:d9:4c:eb:ca:8f:14:cc:08:1d:1e:8b:8e:73:
         76:9d:dd:4b:60:59:0b:a7:cd:4e:01:e7:40:d8:7b:82:36:80:
         6e:d0:06:ea:54:d7:ab:8d:2a:5b:6b:ea:b7:bf:da:66:ce:77:
         34:26:e6:ec:cf:6f:78:1b:bb:6e:b5:30:d0:cb:35:de:55:e9:
         43:74:69:e6:5e:6e:b9:6f:12:a5:b1:03:ef:f1:75:fe:53:1f:
         1e:ba:6a:18:9c:1f:c0:ba:66:93:22:b4:65:83:97:5c:2f:c1:
         95:c6:d4:4a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjAyNTFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyRUIzQ0FBRDJCNUUx
RjQ2NjlFNDkxNDA4RDM0RjZFRUQ3REMyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCQ+DxPT9hXhXJGg+RTINyIAb4GzVJITQnZdBThk87HEER3OfUs
qtZ70OhhYQR3SMAzPwdvDWv4k5fqXaOYi3m1G1tWoPX56xa2wbib2jCPVqHd17rV
lt4xz/666ekZJsgA17ACO+BYn4WSnfDUP2j42lVV/sqc/rAEGx8hPMFIZhSBs6BE
+HlQbK08c5X2SbmcWKSrXfM5f9AEOK2QEURl5oIRiCyedk1m5zJTYJmVTaHiMqEn
nkCCbuOxK12qO24bPxF1Z5Aow8YdEPMPIR1NLO9umjwpCk/Lr0U3pekPwI5AXe+0
sN38Axe2okvxyvy+QJ4eH3uywYXWJp4SiDSbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgus8qtK14fRmnkkUCNNPbu19wlkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2d1czhxdEsxNGZSbW5ra1VDTk5QYnUxOXdsay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaBgwDQYJKoZIhvcNAQELBQADggEBAB7THI6jbsV0iI29p/BEBgxWuXN/
2RksPbr6mxBfbPquksfKl/Z6+pbCs2+8z+5kVylFR436/OnD9AiEaVc6HN1SKqqn
LywfcNSFp5gF0UkOlb0RPtnWbyH07ZQaW0LeI9CmEDYpvQ2XmnXnDY3TKFCQaqH5
qwmFwxX6l+5mZP8IQKBE01CexyJwJ9bLAjb8WHAzV6q12Uzryo8UzAgdHouOc3ad
3UtgWQunzU4B50DYe4I2gG7QBupU16uNKltr6re/2mbOdzQm5uzPb3gbu261MNDL
Nd5V6UN0aeZebrlvEqWxA+/xdf5THx66ahicH8C6ZpMitGWDl1wvwZXG1Eo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:32 2026 by rpki-client