Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Ft4cV3F1lMw5Uu26hSEU1o1mBg.roa
File:                     9Ft4cV3F1lMw5Uu26hSEU1o1mBg.roa (raw, json)
Hash identifier:          AaSXGvtz8jC2RSEW4rXfplAzeSJbLhQrcKBCYzg8F8E=
Subject key identifier:   F4:5B:78:71:5D:C5:D6:53:30:E5:4B:B6:EA:14:84:53:5A:35:98:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Ft4cV3F1lMw5Uu26hSEU1o1mBg.roa
Signing time:             Tue 31 Mar 2026 07:56:37 +0000
ROA not before:           Tue 31 Mar 2026 07:56:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5108 (0x13f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F45B78715DC5D65330E54BB6EA1484535A359818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:88:e9:2c:77:7d:06:4f:ea:87:be:52:fc:
                    26:a1:bc:01:20:2d:90:4b:dc:ba:9b:c1:73:57:9e:
                    6a:c9:7c:40:37:7f:c1:28:c7:d9:dc:79:a2:05:34:
                    ba:a8:17:1e:0a:3b:ee:99:f8:32:4d:5d:a7:63:9a:
                    9a:d5:8d:8c:3f:d5:84:48:3f:34:c0:57:94:87:21:
                    6f:fa:e6:de:47:08:a2:ff:b4:87:d7:26:da:7c:80:
                    84:98:00:8f:3e:f7:68:c5:41:ec:b7:ec:da:37:7f:
                    43:99:8d:4d:10:8c:72:e8:6f:1c:a6:0a:73:1e:cd:
                    48:52:c5:f1:a4:fe:04:57:5f:63:ea:21:8f:02:33:
                    82:de:48:df:dd:ff:fa:54:fd:96:8b:cd:73:4f:2f:
                    e1:42:6d:40:82:5d:06:8c:ed:1d:4d:28:21:12:6f:
                    3a:90:d6:26:5c:59:65:5b:e8:06:90:41:c4:54:15:
                    bb:97:94:59:17:88:5c:ec:8c:b3:38:0c:0f:20:1f:
                    9f:29:00:f7:be:8c:dd:c9:87:39:08:68:e4:31:f1:
                    69:33:8f:b2:49:86:87:87:08:46:c9:8f:a2:6e:78:
                    67:cf:fe:05:26:81:8b:aa:54:52:5a:9e:bd:de:83:
                    a2:f7:ca:96:fe:02:9f:4a:33:08:11:62:7b:43:e7:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:78:71:5D:C5:D6:53:30:E5:4B:B6:EA:14:84:53:5A:35:98:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9Ft4cV3F1lMw5Uu26hSEU1o1mBg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:67:41:1b:18:b7:82:58:87:1a:48:c1:f3:ea:d2:1a:fb:
         7c:b3:5f:20:df:d9:32:03:08:e4:4f:8a:44:41:2e:b5:8f:db:
         34:25:94:17:7e:51:65:b5:57:87:78:a3:04:e2:1d:b7:dc:54:
         3b:12:e2:9c:b0:fd:d1:fd:56:bf:fb:44:e0:90:66:67:81:91:
         6e:bb:37:b9:1f:22:23:fe:31:97:ea:85:19:e4:4b:40:63:21:
         58:fd:65:57:80:71:cb:04:7c:62:e5:6a:b4:11:dd:bb:e0:63:
         37:49:f6:ea:f6:64:88:47:bb:87:a5:85:86:41:32:a0:3c:cc:
         3d:65:5a:4f:fd:63:91:78:1e:a7:e9:ce:7a:5d:d5:df:98:72:
         66:11:16:4e:1e:35:49:3b:75:97:a5:7c:14:e2:3d:65:bf:42:
         aa:6c:62:5f:5c:f3:56:1b:0d:24:0d:bf:2a:ab:24:56:b9:e1:
         17:03:02:f0:55:f7:f9:75:8a:53:f6:a5:3f:86:8b:6c:33:76:
         29:81:16:61:82:b4:bd:6a:f8:0c:ca:b3:e3:84:a0:fb:2c:2f:
         8d:9b:1e:5c:44:c8:bc:a0:c8:81:e3:03:14:97:c5:80:73:48:
         8c:a2:13:85:0e:d8:c9:15:c3:83:99:33:49:99:fa:58:b7:b9:
         9b:c7:9f:1c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0NUI3ODcxNURDNUQ2
NTMzMEU1NEJCNkVBMTQ4NDUzNUEzNTk4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJCYjpLHd9Bk/qh75S/CahvAEgLZBL3LqbwXNXnmrJfEA3f8Eo
x9nceaIFNLqoFx4KO+6Z+DJNXadjmprVjYw/1YRIPzTAV5SHIW/65t5HCKL/tIfX
Jtp8gISYAI8+92jFQey37No3f0OZjU0QjHLobxymCnMezUhSxfGk/gRXX2PqIY8C
M4LeSN/d//pU/ZaLzXNPL+FCbUCCXQaM7R1NKCESbzqQ1iZcWWVb6AaQQcRUFbuX
lFkXiFzsjLM4DA8gH58pAPe+jN3JhzkIaOQx8Wkzj7JJhoeHCEbJj6JueGfP/gUm
gYuqVFJanr3eg6L3ypb+Ap9KMwgRYntD533lAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9Ft4cV3F1lMw5Uu26hSEU1o1mBgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzlGdDRjVjNGMWxNdzVVdTI2aFNFVTFvMW1CZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYiQwDQYJKoZIhvcNAQELBQADggEB
AFfIZ0EbGLeCWIcaSMHz6tIa+3yzXyDf2TIDCORPikRBLrWP2zQllBd+UWW1V4d4
owTiHbfcVDsS4pyw/dH9Vr/7ROCQZmeBkW67N7kfIiP+MZfqhRnkS0BjIVj9ZVeA
ccsEfGLlarQR3bvgYzdJ9ur2ZIhHu4elhYZBMqA8zD1lWk/9Y5F4Hqfpznpd1d+Y
cmYRFk4eNUk7dZelfBTiPWW/QqpsYl9c81YbDSQNvyqrJFa54RcDAvBV9/l1ilP2
pT+Gi2wzdimBFmGCtL1q+AzKs+OEoPssL42bHlxEyLygyIHjAxSXxYBzSIyiE4UO
2MkVw4OZM0mZ+li3uZvHnxw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:25 2026 by rpki-client