Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPwpNlIrbkhj1YfzhUmaQkNoPiU.roa
File:                     QPwpNlIrbkhj1YfzhUmaQkNoPiU.roa (raw, json)
Hash identifier:          Z03jVRZ1bQKYjuIheHNCRRn24CMIQMsolAjANAShniU=
Subject key identifier:   40:FC:29:36:52:2B:6E:48:63:D5:87:F3:85:49:9A:42:43:68:3E:25
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1828
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPwpNlIrbkhj1YfzhUmaQkNoPiU.roa
Signing time:             Tue 31 Mar 2026 08:05:23 +0000
ROA not before:           Tue 31 Mar 2026 08:05:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6184 (0x1828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=40FC2936522B6E4863D587F385499A4243683E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:c2:dc:36:bc:1e:b8:dc:b1:5d:34:48:6a:
                    6c:62:d4:c2:1b:68:3b:7d:08:26:c2:84:3d:ef:82:
                    2e:14:25:b6:21:13:3a:d3:a8:91:7b:7d:21:17:11:
                    51:0a:05:14:99:5b:ed:ac:6c:b3:fa:b0:f8:f6:91:
                    1c:4d:9a:b3:63:99:10:15:cb:46:93:65:fa:98:0d:
                    e9:3a:11:1b:4d:2a:2d:1b:0c:67:af:7d:40:6e:52:
                    70:59:b1:62:99:08:02:35:dd:ed:59:cb:c9:d0:26:
                    2d:18:27:70:d6:e4:2c:2f:51:d3:08:af:5f:88:e3:
                    e6:46:a0:04:a2:73:c5:84:09:7a:35:b3:a7:6d:6a:
                    4b:fb:0a:df:a8:56:33:eb:19:26:e5:a7:7d:c3:04:
                    ee:f5:87:ad:cd:77:63:e2:40:95:28:df:ac:30:59:
                    74:7f:ad:64:25:b1:61:f3:45:a5:a8:7a:76:b9:35:
                    2c:e6:4a:c9:3c:34:b1:ee:5d:5f:8c:a9:1c:d1:2f:
                    94:c4:d1:5e:5f:5d:c4:f2:fa:11:67:14:d1:41:fe:
                    4d:e4:8e:11:cd:5d:2d:3d:f4:64:4b:1f:10:1e:0b:
                    bd:69:80:09:76:2a:9f:5c:af:4c:ad:9e:47:e2:b8:
                    fd:e3:16:60:2e:aa:41:10:85:a7:06:c4:e3:44:c8:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:29:36:52:2B:6E:48:63:D5:87:F3:85:49:9A:42:43:68:3E:25
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPwpNlIrbkhj1YfzhUmaQkNoPiU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:ba:1b:a6:49:d0:ca:23:54:4d:77:4e:ce:83:24:e3:c0:
         ee:b0:4d:3b:3e:43:2c:bf:8a:c4:77:7f:74:a7:44:c8:18:8f:
         c9:a0:08:5d:3f:fb:7d:93:f4:34:ed:cc:af:7a:d3:0e:be:f8:
         d5:c7:e4:08:30:33:de:ea:72:2d:8b:af:46:34:36:0c:ac:50:
         6e:a5:2f:c9:90:ed:33:cc:ba:bd:76:13:c4:d4:86:de:d3:05:
         fa:72:13:e5:b9:46:49:85:bb:94:8a:73:6f:37:a0:56:52:3d:
         7c:82:80:1d:bf:43:44:35:b3:10:27:3f:ab:81:7f:14:70:ab:
         3b:60:29:26:e3:14:4b:df:77:6e:9f:7a:20:de:9f:6c:ed:22:
         8f:17:fb:bf:07:b4:3f:1d:df:46:a3:c2:5a:c5:da:e1:c6:6a:
         60:79:a0:75:da:eb:1d:3e:a9:68:5e:a2:06:1a:50:3d:65:33:
         78:ac:0c:15:1a:aa:b4:e2:12:fc:50:a9:8d:36:3b:a2:7b:7e:
         c5:2c:5f:67:61:43:59:39:47:21:ea:ea:c8:32:b8:43:c1:fb:
         77:7f:c1:15:75:c1:84:ce:7d:cc:49:14:b8:1a:d5:3a:64:d1:
         29:c0:e6:0a:c6:9d:4e:24:91:bc:7a:8f:d2:5a:35:48:af:53:
         d5:ba:b7:c4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA1MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRkMyOTM2NTIyQjZF
NDg2M0Q1ODdGMzg1NDk5QTQyNDM2ODNFMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqlMLcNrweuNyxXTRIamxi1MIbaDt9CCbChD3vgi4UJbYhEzrT
qJF7fSEXEVEKBRSZW+2sbLP6sPj2kRxNmrNjmRAVy0aTZfqYDek6ERtNKi0bDGev
fUBuUnBZsWKZCAI13e1Zy8nQJi0YJ3DW5CwvUdMIr1+I4+ZGoASic8WECXo1s6dt
akv7Ct+oVjPrGSblp33DBO71h63Nd2PiQJUo36wwWXR/rWQlsWHzRaWoena5NSzm
Ssk8NLHuXV+MqRzRL5TE0V5fXcTy+hFnFNFB/k3kjhHNXS099GRLHxAeC71pgAl2
Kp9cr0ytnkfiuP3jFmAuqkEQhacGxONEyD+FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUQPwpNlIrbkhj1YfzhUmaQkNoPiUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1FQd3BObElyYmtoajFZZnpoVW1hUWtOb1BpVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxbYAwDQYJKoZIhvcNAQELBQADggEB
ACDguhumSdDKI1RNd07OgyTjwO6wTTs+Qyy/isR3f3SnRMgYj8mgCF0/+32T9DTt
zK960w6++NXH5AgwM97qci2Lr0Y0NgysUG6lL8mQ7TPMur12E8TUht7TBfpyE+W5
RkmFu5SKc283oFZSPXyCgB2/Q0Q1sxAnP6uBfxRwqztgKSbjFEvfd26feiDen2zt
Io8X+78HtD8d30ajwlrF2uHGamB5oHXa6x0+qWheogYaUD1lM3isDBUaqrTiEvxQ
qY02O6J7fsUsX2dhQ1k5RyHq6sgyuEPB+3d/wRV1wYTOfcxJFLga1Tpk0SnA5grG
nU4kkbx6j9JaNUivU9W6t8Q=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:02 2026 by rpki-client