Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bohj68WVts8AKJsVYwFiEssE8MY.roa
File:                     Bohj68WVts8AKJsVYwFiEssE8MY.roa (raw, json)
Hash identifier:          sqe6CDJ8rrIVbEx5eRDS6VDH0W+SqmlrDhXog43d7+M=
Subject key identifier:   06:88:63:EB:C5:95:B6:CF:00:28:9B:15:63:01:62:12:CB:04:F0:C6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15B8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bohj68WVts8AKJsVYwFiEssE8MY.roa
Signing time:             Tue 31 Mar 2026 08:00:17 +0000
ROA not before:           Tue 31 Mar 2026 08:00:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5560 (0x15b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=068863EBC595B6CF00289B1563016212CB04F0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:a4:7b:6e:fa:92:65:cb:62:d2:6a:6d:23:
                    04:a4:89:10:1f:ab:f9:7b:4b:64:7d:a6:74:7c:52:
                    03:28:b0:e0:d1:eb:26:1f:6e:2e:1e:39:57:83:14:
                    85:22:98:c3:51:c3:74:d9:90:1f:6e:50:2b:46:a4:
                    f6:50:6d:80:a5:e2:f7:8f:0a:20:32:d6:bc:19:11:
                    de:a4:40:bd:42:e4:71:e5:c2:24:e0:6c:c4:5d:a6:
                    2c:9c:bd:6a:8b:36:bd:d1:80:fc:24:6c:ad:7b:1c:
                    4a:ad:c7:ee:1c:42:92:21:c5:e5:2d:f9:69:4b:5a:
                    7b:91:ff:75:05:2b:59:5e:d5:89:5c:06:b7:cd:46:
                    b1:64:56:34:96:05:88:09:be:8c:b8:5a:ae:ff:0c:
                    42:d3:8b:42:30:96:d3:bd:4c:41:61:83:3b:d8:3a:
                    3c:23:38:ce:a9:a5:8a:3d:ab:9e:f8:0d:f6:20:8a:
                    5d:07:f3:7e:09:d1:2e:81:b9:70:d4:3b:1f:76:2d:
                    fa:46:32:d7:9c:4c:63:aa:98:16:bf:9b:6d:77:de:
                    fe:ba:93:a6:a3:96:4a:2a:56:47:a1:1f:79:82:0f:
                    ca:84:86:4d:ba:e8:ea:49:ae:ab:47:9c:a4:20:e8:
                    b4:c8:c1:f0:f7:88:64:c9:f5:a3:a4:59:dd:e2:5d:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:63:EB:C5:95:B6:CF:00:28:9B:15:63:01:62:12:CB:04:F0:C6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bohj68WVts8AKJsVYwFiEssE8MY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:95:f9:74:77:ad:3b:5a:e3:2d:51:19:3e:9d:db:67:bf:98:
         72:d9:82:be:f3:78:d6:4c:4e:2a:90:02:9b:57:0e:b6:a2:69:
         08:b8:fe:d2:65:34:89:80:46:de:2e:c2:bb:88:17:6f:3a:5a:
         e5:f3:89:76:bb:18:77:c4:af:bf:b6:ac:06:05:91:6e:ca:e7:
         41:b7:cd:61:45:63:a6:34:99:82:d0:3c:b8:4c:cf:ee:9c:e6:
         20:04:ee:4d:5b:5d:e5:b5:4b:0f:5a:07:1b:31:01:08:19:32:
         cc:aa:7d:8d:a6:77:44:0e:5f:9b:e6:fb:e1:05:17:87:79:c5:
         b0:e5:39:37:21:40:72:d8:1c:18:64:59:b3:11:de:26:a4:0d:
         5c:26:35:37:a1:e6:99:c9:6d:9d:52:d5:0b:9b:f1:d2:9a:f1:
         60:45:86:33:57:dd:be:ae:b1:95:54:94:50:6e:f5:20:da:0d:
         01:57:69:d0:dc:92:a5:d5:1f:6b:9c:85:7e:dd:cf:27:61:86:
         74:df:ae:10:a1:61:15:84:1d:8c:45:99:0a:4b:4b:a7:df:b0:
         7d:a3:d5:0a:73:d7:2e:9d:10:f0:9e:24:9d:9d:27:c3:86:5a:
         b9:9a:16:7c:3b:37:f4:c6:67:a1:8b:01:5c:e3:3e:a1:fa:6b:
         b5:24:3e:4d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2ODg2M0VCQzU5NUI2
Q0YwMDI4OUIxNTYzMDE2MjEyQ0IwNEYwQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6haR7bvqSZcti0mptIwSkiRAfq/l7S2R9pnR8UgMosODR6yYf
bi4eOVeDFIUimMNRw3TZkB9uUCtGpPZQbYCl4vePCiAy1rwZEd6kQL1C5HHlwiTg
bMRdpiycvWqLNr3RgPwkbK17HEqtx+4cQpIhxeUt+WlLWnuR/3UFK1le1YlcBrfN
RrFkVjSWBYgJvoy4Wq7/DELTi0IwltO9TEFhgzvYOjwjOM6ppYo9q574DfYgil0H
834J0S6BuXDUOx92LfpGMtecTGOqmBa/m2133v66k6ajlkoqVkehH3mCD8qEhk26
6OpJrqtHnKQg6LTIwfD3iGTJ9aOkWd3iXVE/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBohj68WVts8AKJsVYwFiEssE8MYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0JvaGo2OFdWdHM4QUtKc1ZZd0ZpRXNzRThNWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaQ4wDQYJKoZIhvcNAQELBQADggEB
AN+V+XR3rTta4y1RGT6d22e/mHLZgr7zeNZMTiqQAptXDraiaQi4/tJlNImARt4u
wruIF286WuXziXa7GHfEr7+2rAYFkW7K50G3zWFFY6Y0mYLQPLhMz+6c5iAE7k1b
XeW1Sw9aBxsxAQgZMsyqfY2md0QOX5vm++EFF4d5xbDlOTchQHLYHBhkWbMR3iak
DVwmNTeh5pnJbZ1S1Qub8dKa8WBFhjNX3b6usZVUlFBu9SDaDQFXadDckqXVH2uc
hX7dzydhhnTfrhChYRWEHYxFmQpLS6ffsH2j1Qpz1y6dEPCeJJ2dJ8OGWrmaFnw7
N/TGZ6GLAVzjPqH6a7UkPk0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:02 2026 by rpki-client