Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7nK2n2kHLNBX7CvjOwRnJ75CvM.roa
File:                     p7nK2n2kHLNBX7CvjOwRnJ75CvM.roa (raw, json)
Hash identifier:          +ThgkthEyAOPBLOm04/0yAMOOsXnQ0oI9zbiT10wGrc=
Subject key identifier:   A7:B9:CA:DA:7D:A4:1C:B3:41:5F:B0:AF:8C:EC:11:9C:9E:F9:0A:F3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1308
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7nK2n2kHLNBX7CvjOwRnJ75CvM.roa
Signing time:             Sun 01 Mar 2026 03:28:05 +0000
ROA not before:           Sun 01 Mar 2026 03:28:05 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4872 (0x1308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:28:05 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A7B9CADA7DA41CB3415FB0AF8CEC119C9EF90AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:b2:50:e2:9b:f0:20:f6:66:32:cb:31:fa:
                    46:dc:f4:90:0d:39:35:1f:48:ae:db:26:97:38:ac:
                    18:d2:65:62:2a:2a:d0:66:b4:dd:da:d0:b5:0a:8c:
                    92:10:70:f8:56:5e:4f:2c:d9:d9:9f:e2:1c:5a:c9:
                    22:ac:86:61:7f:be:29:f1:dc:da:b4:15:11:ab:c3:
                    53:b8:0e:95:73:86:f0:10:4f:da:73:58:10:42:57:
                    cc:08:d0:e7:64:81:a1:be:30:ea:03:a6:6e:08:2f:
                    62:d6:ce:65:83:31:40:57:df:d1:a8:b5:0a:8b:c1:
                    58:ea:d2:e1:93:b4:a8:2f:78:3b:18:32:ee:39:4c:
                    c8:83:4c:fd:e6:f6:6a:f2:3f:f2:cd:2a:3f:e6:3e:
                    46:94:2b:2f:e4:b0:11:7e:ea:7d:0b:bd:bb:a6:fb:
                    c8:02:1a:a4:65:1c:92:fc:16:ef:aa:5b:07:14:9f:
                    24:7a:c7:7e:7e:60:b3:01:e0:3e:16:06:20:44:53:
                    57:ac:81:6f:cb:28:0c:62:13:33:0a:d6:ec:b9:7c:
                    35:fc:43:38:2f:e7:26:4e:ed:46:dd:1d:0c:dc:83:
                    48:5d:0e:8e:8b:a3:e4:c7:18:58:8b:e1:02:34:dd:
                    4c:83:c4:df:ff:ae:bd:1e:e5:21:3a:7d:a0:e9:32:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:CA:DA:7D:A4:1C:B3:41:5F:B0:AF:8C:EC:11:9C:9E:F9:0A:F3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7nK2n2kHLNBX7CvjOwRnJ75CvM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:53:4a:e0:20:36:d1:9d:12:e6:10:a7:a9:b4:c8:2b:2a:
         04:75:9e:66:88:f1:7e:1d:b6:d4:b5:15:82:c0:76:40:84:05:
         79:71:e6:5c:ab:5d:70:2d:ea:df:15:08:b9:79:02:49:78:73:
         a5:a7:00:23:dd:47:92:25:cb:2c:c7:26:00:55:c6:3b:00:2c:
         2d:63:40:8d:83:4b:72:24:f0:95:cb:b7:cb:ac:24:c1:c0:c0:
         9c:10:b6:de:4a:b8:5b:47:b2:88:f5:33:b8:22:e2:15:73:4b:
         2b:d9:c1:df:9b:1e:96:4b:48:76:cc:7a:61:a9:7c:03:97:1e:
         5b:2f:3a:2a:7f:a0:8f:69:52:ef:42:09:64:79:00:50:59:cf:
         02:0f:8c:2f:3e:d5:22:d7:8e:b2:3a:2e:5c:54:7d:04:d5:22:
         a8:33:a7:15:d6:d3:c3:0d:a2:f5:5e:b8:89:e7:cc:c5:62:40:
         57:49:df:79:68:cf:62:a1:2c:25:b8:55:0c:71:df:90:83:a3:
         f9:ba:c0:91:5e:d2:33:f4:64:2f:5d:c4:02:1a:4e:91:6c:3f:
         c2:de:c5:0b:9b:e3:ac:ac:7f:42:62:f9:52:bb:b1:e2:ae:e0:
         fc:a2:2b:fb:80:33:38:73:a6:7c:59:26:93:f4:d2:3c:40:c2:
         82:11:ea:3e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzI4MDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3QjlDQURBN0RBNDFD
QjM0MTVGQjBBRjhDRUMxMTlDOUVGOTBBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7LLJQ4pvwIPZmMssx+kbc9JANOTUfSK7bJpc4rBjSZWIqKtBm
tN3a0LUKjJIQcPhWXk8s2dmf4hxaySKshmF/vinx3Nq0FRGrw1O4DpVzhvAQT9pz
WBBCV8wI0OdkgaG+MOoDpm4IL2LWzmWDMUBX39GotQqLwVjq0uGTtKgveDsYMu45
TMiDTP3m9mryP/LNKj/mPkaUKy/ksBF+6n0Lvbum+8gCGqRlHJL8Fu+qWwcUnyR6
x35+YLMB4D4WBiBEU1esgW/LKAxiEzMK1uy5fDX8Qzgv5yZO7UbdHQzcg0hdDo6L
o+THGFiL4QI03UyDxN//rr0e5SE6faDpMiypAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp7nK2n2kHLNBX7CvjOwRnJ75CvMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3A3bksybjJrSExOQlg3Q3ZqT3dSbko3NUN2TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYlowDQYJKoZIhvcNAQELBQADggEBAHgOU0rgIDbRnRLmEKeptMgrKgR1
nmaI8X4dttS1FYLAdkCEBXlx5lyrXXAt6t8VCLl5Akl4c6WnACPdR5IlyyzHJgBV
xjsALC1jQI2DS3Ik8JXLt8usJMHAwJwQtt5KuFtHsoj1M7gi4hVzSyvZwd+bHpZL
SHbMemGpfAOXHlsvOip/oI9pUu9CCWR5AFBZzwIPjC8+1SLXjrI6LlxUfQTVIqgz
pxXW08MNovVeuInnzMViQFdJ33loz2KhLCW4VQxx35CDo/m6wJFe0jP0ZC9dxAIa
TpFsP8LexQub46ysf0Ji+VK7seKu4PyiK/uAMzhzpnxZJpP00jxAwoIR6j4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:02 2026 by rpki-client