Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa
File:                     A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa (raw, json)
Hash identifier:          313YcQ8dkW536rxQiv0egL3ow51LjrFiZbZMDvAVTUQ=
Subject key identifier:   03:F9:98:D8:F2:AE:FD:C1:2D:9B:C0:15:90:75:CA:9A:AE:9C:C1:C1
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       B0
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa
Signing time:             Tue 31 Mar 2026 07:55:20 +0000
ROA not before:           Tue 31 Mar 2026 07:55:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        160.249.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03F998D8F2AEFDC12D9BC0159075CA9AAE9CC1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:6f:73:a5:da:97:7a:55:39:ea:1d:08:41:
                    27:60:7e:4c:25:6c:9f:5b:f7:34:b5:de:17:1b:e8:
                    52:98:7b:e8:63:ad:34:4c:33:d0:fd:14:60:a7:15:
                    2c:17:e2:df:01:4c:a9:16:c3:ec:31:89:c2:25:09:
                    94:44:23:bf:db:e7:02:e5:e9:42:0c:cf:ca:f7:a4:
                    bd:67:42:b5:39:04:8d:70:82:70:3e:a7:ae:6c:81:
                    d4:3e:4a:7c:9d:39:6c:2a:45:33:07:60:63:be:c1:
                    58:3d:fa:8b:e6:02:90:c3:bd:9b:72:8b:11:df:2e:
                    c5:1c:a6:88:8f:5a:dd:27:47:e3:0b:8b:f5:30:5e:
                    f4:67:17:de:3e:13:f5:18:d5:63:fd:b0:46:29:24:
                    c8:d4:56:2c:25:91:08:17:85:3a:ed:7b:93:64:e5:
                    fb:fe:c0:ff:b9:c5:37:77:7f:55:56:70:41:87:c8:
                    8a:cd:78:e6:3f:1a:ec:d6:55:9f:79:32:70:cc:a3:
                    5d:fc:6a:3c:a6:d9:1a:47:5f:89:16:83:9d:55:37:
                    c9:14:29:e9:7d:0d:b0:03:7f:61:4f:18:96:9f:a5:
                    f7:4d:d1:7f:61:d2:c1:00:4a:44:15:a3:a5:4e:05:
                    30:0a:fb:57:fb:ab:dc:3a:d7:8d:bd:32:58:65:86:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:98:D8:F2:AE:FD:C1:2D:9B:C0:15:90:75:CA:9A:AE:9C:C1:C1
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A_mY2PKu_cEtm8AVkHXKmq6cwcE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:ef:80:9a:86:9e:e0:f3:3d:b2:31:f6:da:f2:d9:d0:75:
         38:06:98:e5:41:6d:5b:41:f5:3a:25:d4:f7:e0:87:de:24:e6:
         e7:b2:3c:c6:57:fc:8f:cf:e1:11:98:42:c0:e2:7d:c0:cd:e2:
         78:18:c6:0a:e2:b7:8e:79:04:07:5b:d8:ba:5c:20:da:c5:6c:
         8d:8f:50:eb:e3:63:ad:45:dc:e1:db:f3:af:f1:5f:55:37:80:
         b2:31:a0:0f:cd:6c:49:24:16:cc:97:fd:45:8b:d5:1a:b8:57:
         1d:80:42:ac:4f:38:48:2e:12:52:ce:2f:e4:03:43:03:8e:2c:
         0e:31:13:14:51:b5:d6:58:b1:8d:ce:7a:d4:f4:3f:3a:b5:40:
         57:4d:fd:2a:2d:c1:77:c2:9d:d5:a1:b3:ef:92:5f:d4:e0:6a:
         29:f8:e3:07:b0:68:08:14:89:ca:7b:d5:48:2b:04:d1:8d:b5:
         ad:f2:59:e8:08:e2:f0:34:ce:34:5f:1f:f1:ee:46:40:2b:e9:
         66:02:47:69:38:ec:af:4d:f6:69:52:d8:fc:26:58:55:f0:3e:
         d7:44:6f:b1:50:94:ad:f3:95:92:ec:52:d1:d7:fd:3a:85:32:
         a9:ef:b8:ba:ea:81:ac:4b:e3:e8:80:ba:a2:92:a9:a1:d7:66:
         33:ee:c0:ec
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw
NzU1MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzRjk5OEQ4RjJBRUZE
QzEyRDlCQzAxNTkwNzVDQTlBQUU5Q0MxQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI7G9zpdqXelU56h0IQSdgfkwlbJ9b9zS13hcb6FKYe+hjrTRM
M9D9FGCnFSwX4t8BTKkWw+wxicIlCZREI7/b5wLl6UIMz8r3pL1nQrU5BI1wgnA+
p65sgdQ+SnydOWwqRTMHYGO+wVg9+ovmApDDvZtyixHfLsUcpoiPWt0nR+MLi/Uw
XvRnF94+E/UY1WP9sEYpJMjUViwlkQgXhTrte5Nk5fv+wP+5xTd3f1VWcEGHyIrN
eOY/GuzWVZ95MnDMo138ajym2RpHX4kWg51VN8kUKel9DbADf2FPGJafpfdN0X9h
0sEASkQVo6VOBTAK+1f7q9w61429MlhlhsSTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUA/mY2PKu/cEtm8AVkHXKmq6cwcEwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0FfbVkyUEt1X2NFdG04QVZrSFhLbXE2Y3djRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg+VwwDQYJKoZIhvcNAQELBQADggEB
ADas74Cahp7g8z2yMfba8tnQdTgGmOVBbVtB9Tol1Pfgh94k5ueyPMZX/I/P4RGY
QsDifcDN4ngYxgrit455BAdb2LpcINrFbI2PUOvjY61F3OHb86/xX1U3gLIxoA/N
bEkkFsyX/UWL1Rq4Vx2AQqxPOEguElLOL+QDQwOOLA4xExRRtdZYsY3OetT0Pzq1
QFdN/SotwXfCndWhs++SX9Tgain44wewaAgUicp71UgrBNGNta3yWegI4vA0zjRf
H/HuRkAr6WYCR2k47K9N9mlS2PwmWFXwPtdEb7FQlK3zlZLsUtHX/TqFMqnvuLrq
gaxL4+iAuqKSqaHXZjPuwOw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:08 2026 by rpki-client