Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
File:                     wsAZyL0k7HMqDMUj1kIo-WQyta4.roa (raw, json)
Hash identifier:          2kI3zRv3xswPaJNdqQwT374EQT1ey7/E3hYGTk+5O3Y=
Subject key identifier:   C2:C0:19:C8:BD:24:EC:73:2A:0C:C5:23:D6:42:28:F9:64:32:B5:AE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
Signing time:             Sun 01 Mar 2026 02:44:27 +0000
ROA not before:           Sun 01 Mar 2026 02:44:27 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4584 (0x11e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:44:27 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C2C019C8BD24EC732A0CC523D64228F96432B5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:18:3b:e1:b6:e3:b9:da:b7:af:b4:4b:1a:
                    bd:73:f5:a8:71:63:3e:b6:84:7a:09:24:8c:9b:f5:
                    22:9d:d5:93:2a:97:b3:c7:00:88:84:3d:60:cf:03:
                    f5:85:55:99:74:d3:44:6c:48:ba:ef:12:23:63:4d:
                    15:96:ee:16:fa:88:a4:5b:89:f9:7d:b3:67:84:38:
                    aa:44:bd:a6:84:02:e6:5d:ac:a1:4b:c4:b5:85:f7:
                    52:68:e1:bc:e7:83:3e:84:07:fd:84:e1:e2:38:98:
                    59:09:d2:12:a7:5c:96:c8:af:8e:77:2c:4f:9c:c4:
                    46:d4:e5:75:bd:34:2e:31:39:c6:d8:86:af:90:da:
                    a0:a5:f5:f0:fb:50:74:f8:0d:13:42:8f:98:5e:75:
                    23:73:94:3e:0e:00:c4:09:45:a7:17:e4:47:03:d6:
                    ec:38:ea:5a:50:bd:f2:27:bc:4d:f4:a5:fd:65:38:
                    17:d8:02:b9:9e:d4:e6:8e:40:2a:e4:62:8a:0e:c7:
                    6c:79:f0:62:4e:64:2e:4d:64:61:f3:6a:97:e0:83:
                    d0:24:b6:cc:9a:43:aa:98:3f:ad:9f:66:eb:69:ab:
                    72:1d:8c:49:02:15:f0:73:b8:27:2d:7d:d8:6a:5a:
                    8b:ce:a4:aa:93:75:27:10:09:b9:33:7e:8a:b6:37:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:19:C8:BD:24:EC:73:2A:0C:C5:23:D6:42:28:F9:64:32:B5:AE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wsAZyL0k7HMqDMUj1kIo-WQyta4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e5:97:c2:91:12:26:16:24:dc:06:da:03:2e:07:af:28:c9:e3:
         9f:df:3c:5b:7c:89:03:a7:74:a4:39:96:57:dd:61:00:22:46:
         94:5d:b3:81:c8:5d:6d:0e:66:8d:33:8b:49:83:41:5c:78:82:
         3e:42:dc:83:1e:b3:e9:d5:a5:c7:a4:83:70:a4:4f:43:33:e2:
         08:da:fe:77:bf:de:b6:b4:56:c4:58:10:55:0c:f9:2a:0f:81:
         a4:e2:59:a5:c5:c5:39:75:f8:45:d0:ad:22:66:0f:39:6b:ee:
         fc:7d:7a:ef:8d:60:7f:cd:ff:9d:c0:cd:98:a6:b2:f5:0b:d1:
         32:a0:9f:f2:ee:4e:e3:15:b3:ab:3a:8a:5c:bf:83:be:6f:6f:
         5b:da:61:4d:17:8d:d5:e0:6e:0e:ba:ba:a5:6c:72:d9:82:34:
         79:88:e7:eb:5c:a7:02:59:7f:f9:05:1a:5d:ee:23:ac:ca:7e:
         d3:5e:34:42:e5:bc:a8:c6:96:ae:c5:69:82:f7:87:ff:af:d7:
         25:6d:3c:d4:91:03:9c:3f:1e:25:b1:97:0d:41:0f:b9:a2:ef:
         83:76:a5:30:36:96:7a:6f:7d:57:6a:d9:51:05:66:a3:7a:75:
         cf:86:ae:4a:35:63:10:63:d3:f8:c7:d5:10:97:17:63:bb:26:
         cd:6d:fc:9d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MjQ0MjdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyQzAxOUM4QkQyNEVD
NzMyQTBDQzUyM0Q2NDIyOEY5NjQzMkI1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu9Rg74bbjudq3r7RLGr1z9ahxYz62hHoJJIyb9SKd1ZMql7PH
AIiEPWDPA/WFVZl000RsSLrvEiNjTRWW7hb6iKRbifl9s2eEOKpEvaaEAuZdrKFL
xLWF91Jo4bzngz6EB/2E4eI4mFkJ0hKnXJbIr453LE+cxEbU5XW9NC4xOcbYhq+Q
2qCl9fD7UHT4DRNCj5hedSNzlD4OAMQJRacX5EcD1uw46lpQvfInvE30pf1lOBfY
Arme1OaOQCrkYooOx2x58GJOZC5NZGHzapfgg9AktsyaQ6qYP62fZutpq3IdjEkC
FfBzuCctfdhqWovOpKqTdScQCbkzfoq2Nyu7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwsAZyL0k7HMqDMUj1kIo+WQyta4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dzQVp5TDBrN0hNcURNVWoxa0lvLVdReXRhNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxbMAwDQYJKoZIhvcNAQELBQADggEBAOWXwpESJhYk3AbaAy4HryjJ45/f
PFt8iQOndKQ5llfdYQAiRpRds4HIXW0OZo0zi0mDQVx4gj5C3IMes+nVpcekg3Ck
T0Mz4gja/ne/3ra0VsRYEFUM+SoPgaTiWaXFxTl1+EXQrSJmDzlr7vx9eu+NYH/N
/53AzZimsvUL0TKgn/LuTuMVs6s6ily/g75vb1vaYU0XjdXgbg66uqVsctmCNHmI
5+tcpwJZf/kFGl3uI6zKftNeNELlvKjGlq7FaYL3h/+v1yVtPNSRA5w/HiWxlw1B
D7mi74N2pTA2lnpvfVdq2VEFZqN6dc+Grko1YxBj0/jH1RCXF2O7Js1t/J0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:37 2026 by rpki-client