Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpWGvKTBDg2cueuI9wO8npyTUC0.roa
File:                     JpWGvKTBDg2cueuI9wO8npyTUC0.roa (raw, json)
Hash identifier:          z2cR19C0NUBdocy7gD/9N78U+s23fo0VgbjPOa8lSMs=
Subject key identifier:   26:95:86:BC:A4:C1:0E:0D:9C:B9:EB:88:F7:03:BC:9E:9C:93:50:2D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpWGvKTBDg2cueuI9wO8npyTUC0.roa
Signing time:             Tue 31 Mar 2026 08:00:28 +0000
ROA not before:           Tue 31 Mar 2026 08:00:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5584 (0x15d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=269586BCA4C10E0D9CB9EB88F703BC9E9C93502D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:75:a8:3f:dd:b8:a9:d9:4c:ee:84:be:39:
                    4b:82:15:44:ae:f7:75:05:74:10:5a:09:e8:31:c3:
                    57:a8:f1:c7:5e:79:78:8b:fa:04:6d:46:82:42:e7:
                    8d:fd:ce:ac:f1:35:e5:70:d4:79:3f:84:db:47:84:
                    96:82:39:3a:59:f3:f6:8e:c9:8b:79:63:8b:92:0c:
                    7b:9e:6a:a6:c8:af:3e:52:1d:6e:9b:75:3d:c7:ad:
                    03:2a:48:20:12:8a:ff:cb:78:82:48:f3:b4:34:7f:
                    9b:f4:99:66:c9:3d:ce:1a:8e:ad:83:66:6a:02:4e:
                    46:22:20:ff:98:76:4b:2d:09:84:e9:a0:a7:74:dd:
                    0f:10:db:8b:bf:92:cb:4c:28:02:a6:e2:5e:5c:12:
                    ce:95:de:2f:14:02:e6:59:7d:70:9f:9d:1d:41:e7:
                    eb:55:3a:79:cc:63:af:4e:00:1c:27:c5:e3:b2:3a:
                    83:3f:17:74:06:14:1a:89:d4:6f:c7:6a:ba:21:86:
                    c4:92:41:40:48:49:5b:ca:26:4f:2a:20:72:54:8d:
                    99:01:fc:27:6e:5f:aa:f1:66:74:10:6c:58:0e:c6:
                    05:35:35:f5:62:85:1b:53:14:98:7e:75:36:07:44:
                    f1:8a:7d:89:62:79:26:8c:a0:74:3e:9a:6b:c9:44:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:86:BC:A4:C1:0E:0D:9C:B9:EB:88:F7:03:BC:9E:9C:93:50:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpWGvKTBDg2cueuI9wO8npyTUC0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:62:7c:13:07:15:61:97:a5:32:3f:71:f4:93:61:c9:57:
         56:41:20:30:46:03:43:45:bb:d6:a5:73:80:9a:37:83:37:fb:
         71:ef:c3:28:52:19:9a:bf:68:d7:d7:12:00:fa:a6:a4:05:81:
         be:23:03:9b:28:b2:35:0d:47:62:3e:52:71:69:ef:20:d8:39:
         80:2d:7e:a7:31:6a:62:40:df:c0:7b:33:3a:58:0c:f6:a7:28:
         8a:6f:8a:a6:a1:b8:14:e9:e1:4c:18:4f:db:a3:ec:cf:77:7e:
         c1:60:9e:f1:01:cb:5b:8d:bf:42:35:c1:49:21:00:7d:99:0f:
         4d:1e:80:b1:67:9f:f0:67:28:7c:89:fa:d1:17:e9:0c:f7:e5:
         2f:5e:27:c8:7f:a0:a5:5f:36:fb:a1:6d:1c:37:34:e1:f4:7d:
         d8:9f:36:7e:e8:37:7b:30:03:ee:fe:2a:77:17:5d:da:2b:cf:
         9a:1b:e0:c6:ac:90:35:1b:03:d9:7d:a0:bb:8f:27:f6:26:a5:
         c4:67:2c:8c:e8:ee:10:13:31:1c:0b:4b:25:a0:c8:3c:02:7b:
         4f:1b:bc:17:ae:8b:c9:13:c8:c9:c3:8e:0f:9e:d9:62:0c:71:
         d8:1b:bc:d1:e3:0a:52:c1:82:36:4b:01:38:5a:9a:c3:9f:a6:
         dc:f7:4f:85
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwMjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2OTU4NkJDQTRDMTBF
MEQ5Q0I5RUI4OEY3MDNCQzlFOUM5MzUwMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYYnWoP924qdlM7oS+OUuCFUSu93UFdBBaCegxw1eo8cdeeXiL
+gRtRoJC5439zqzxNeVw1Hk/hNtHhJaCOTpZ8/aOyYt5Y4uSDHueaqbIrz5SHW6b
dT3HrQMqSCASiv/LeIJI87Q0f5v0mWbJPc4ajq2DZmoCTkYiIP+YdkstCYTpoKd0
3Q8Q24u/kstMKAKm4l5cEs6V3i8UAuZZfXCfnR1B5+tVOnnMY69OABwnxeOyOoM/
F3QGFBqJ1G/HarohhsSSQUBISVvKJk8qIHJUjZkB/CduX6rxZnQQbFgOxgU1NfVi
hRtTFJh+dTYHRPGKfYlieSaMoHQ+mmvJRD3/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJpWGvKTBDg2cueuI9wO8npyTUC0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0pwV0d2S1RCRGcyY3VldUk5d084bnB5VFVDMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYjAwDQYJKoZIhvcNAQELBQADggEB
AJLJYnwTBxVhl6UyP3H0k2HJV1ZBIDBGA0NFu9alc4CaN4M3+3HvwyhSGZq/aNfX
EgD6pqQFgb4jA5sosjUNR2I+UnFp7yDYOYAtfqcxamJA38B7MzpYDPanKIpviqah
uBTp4UwYT9uj7M93fsFgnvEBy1uNv0I1wUkhAH2ZD00egLFnn/BnKHyJ+tEX6Qz3
5S9eJ8h/oKVfNvuhbRw3NOH0fdifNn7oN3swA+7+KncXXdorz5ob4MaskDUbA9l9
oLuPJ/YmpcRnLIzo7hATMRwLSyWgyDwCe08bvBeui8kTyMnDjg+e2WIMcdgbvNHj
ClLBgjZLAThamsOfptz3T4U=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client