Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa
File:                     BudHWbVk8_PVkRhjdv7ba5ehGyI.roa (raw, json)
Hash identifier:          K0f3MOiy2hNnjlpMERiPgJ/VZ6nFr4IWRrlSU/FH3Zg=
Subject key identifier:   06:E7:47:59:B5:64:F3:F3:D5:91:18:63:76:FE:DB:6B:97:A1:1B:22
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       162B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa
Signing time:             Tue 31 Mar 2026 08:01:18 +0000
ROA not before:           Tue 31 Mar 2026 08:01:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5675 (0x162b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06E74759B564F3F3D591186376FEDB6B97A11B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:6b:18:82:34:6a:9f:9d:c3:0b:2b:22:8c:
                    da:b7:bb:c0:76:c1:c2:11:83:08:27:08:d0:09:41:
                    b9:8d:01:98:c6:84:2d:e9:5f:04:9e:88:2e:79:b3:
                    dd:60:3e:46:95:86:1b:68:e0:21:d6:fd:32:1d:aa:
                    01:eb:d5:a2:b5:d7:21:34:13:0f:df:8a:98:e5:0f:
                    4a:71:24:5e:fd:1a:d4:be:31:36:3a:c2:ed:7c:5f:
                    00:51:bb:b3:35:5e:7a:0c:ee:a3:84:c4:e1:bf:cb:
                    bf:ee:66:78:49:c4:00:ae:1e:f9:91:c6:ec:ce:bf:
                    5b:78:ca:be:55:34:0e:9e:3b:28:49:23:c9:a2:78:
                    7f:c4:8f:0c:46:af:c6:68:26:37:46:05:7d:8d:20:
                    1c:78:a2:28:68:d1:b2:2d:06:85:3f:7a:37:5d:53:
                    7a:ca:ac:dc:41:c5:1c:77:cd:2c:08:25:b3:89:63:
                    6b:11:88:aa:9b:38:4a:14:e3:88:b5:98:ab:1f:2d:
                    16:78:d1:af:94:ad:55:2a:e1:86:cf:ec:6d:6b:88:
                    e7:6c:85:e6:92:f9:b3:0b:35:41:a7:a6:ec:ac:92:
                    cf:a0:3a:51:8a:70:c2:a9:79:d3:f2:52:10:9e:03:
                    0b:05:9a:00:ec:dd:5f:90:37:19:50:20:8d:e9:ed:
                    80:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:47:59:B5:64:F3:F3:D5:91:18:63:76:FE:DB:6B:97:A1:1B:22
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BudHWbVk8_PVkRhjdv7ba5ehGyI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:40:1e:b4:d5:53:c7:d6:fc:e5:e2:11:73:8d:6d:4c:3d:e5:
         9a:1b:9f:9f:5a:a7:d0:43:50:01:8a:3e:a7:58:36:b3:46:36:
         70:85:d8:80:77:65:bc:51:9c:bc:19:ef:9e:2f:91:db:1d:45:
         f4:82:8b:41:98:06:3d:af:a4:c5:cd:2c:e0:ca:7f:de:93:bb:
         59:bb:f0:a7:24:8f:51:79:ce:7c:d8:19:26:4f:de:be:be:6a:
         5c:08:73:06:06:1e:f8:31:32:ea:8d:1d:26:a5:5f:ee:b2:d7:
         6b:b0:83:fd:6e:be:57:38:01:5d:23:2c:8b:ae:93:c6:1f:ce:
         93:82:9a:aa:31:b6:13:41:a6:10:65:65:7a:c7:83:f5:8d:4c:
         98:24:c3:62:45:06:9e:bd:a8:dc:06:35:af:9b:55:e7:64:e4:
         a6:96:c6:dc:f0:fe:a9:e7:1f:ea:ab:27:93:f6:c6:db:8f:9d:
         00:4b:16:50:5a:78:cd:76:3f:cc:a1:2d:60:5a:1c:7c:b1:1e:
         40:63:a2:26:b7:c0:5f:a0:6a:a9:ef:e2:6b:55:92:17:fa:74:
         48:68:d7:41:01:5d:db:2d:1f:6b:cb:d3:6a:ba:86:2c:ea:10:
         1c:33:89:f4:ae:be:ff:e9:ab:4d:e8:d8:c8:ce:a3:83:b2:9b:
         3c:ab:31:44
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2RTc0NzU5QjU2NEYz
RjNENTkxMTg2Mzc2RkVEQjZCOTdBMTFCMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4XGsYgjRqn53DCysijNq3u8B2wcIRgwgnCNAJQbmNAZjGhC3p
XwSeiC55s91gPkaVhhto4CHW/TIdqgHr1aK11yE0Ew/fipjlD0pxJF79GtS+MTY6
wu18XwBRu7M1XnoM7qOExOG/y7/uZnhJxACuHvmRxuzOv1t4yr5VNA6eOyhJI8mi
eH/EjwxGr8ZoJjdGBX2NIBx4oiho0bItBoU/ejddU3rKrNxBxRx3zSwIJbOJY2sR
iKqbOEoU44i1mKsfLRZ40a+UrVUq4YbP7G1riOdsheaS+bMLNUGnpuysks+gOlGK
cMKpedPyUhCeAwsFmgDs3V+QNxlQII3p7YB7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBudHWbVk8/PVkRhjdv7ba5ehGyIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0J1ZEhXYlZrOF9QVmtSaGpkdjdiYTVlaEd5SS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYCgwDQYJKoZIhvcNAQELBQADggEB
ADdAHrTVU8fW/OXiEXONbUw95Zobn59ap9BDUAGKPqdYNrNGNnCF2IB3ZbxRnLwZ
754vkdsdRfSCi0GYBj2vpMXNLODKf96Tu1m78Kckj1F5znzYGSZP3r6+alwIcwYG
HvgxMuqNHSalX+6y12uwg/1uvlc4AV0jLIuuk8YfzpOCmqoxthNBphBlZXrHg/WN
TJgkw2JFBp69qNwGNa+bVedk5KaWxtzw/qnnH+qrJ5P2xtuPnQBLFlBaeM12P8yh
LWBaHHyxHkBjoia3wF+gaqnv4mtVkhf6dEho10EBXdstH2vL02q6hizqEBwzifSu
vv/pq03o2MjOo4OymzyrMUQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client