Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RptXv_1b7aiJ-0lAxdcokMqsIJo.roa
File:                     RptXv_1b7aiJ-0lAxdcokMqsIJo.roa (raw, json)
Hash identifier:          2Fwd1oY26C+HXAkHgVccvMbGpIxVae4gilugUSW/SwQ=
Subject key identifier:   46:9B:57:BF:FD:5B:ED:A8:89:FB:49:40:C5:D7:28:90:CA:AC:20:9A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RptXv_1b7aiJ-0lAxdcokMqsIJo.roa
Signing time:             Tue 31 Mar 2026 07:56:30 +0000
ROA not before:           Tue 31 Mar 2026 07:56:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5091 (0x13e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=469B57BFFD5BEDA889FB4940C5D72890CAAC209A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:82:ec:aa:d9:91:d5:3a:92:71:eb:77:25:
                    27:36:0a:e8:65:d1:31:28:74:bb:0d:d1:27:51:c5:
                    1f:7b:e8:02:44:fe:fa:fc:2e:67:af:46:f6:1a:24:
                    1c:cf:1e:62:11:61:12:f5:99:07:62:1c:6b:bb:12:
                    bb:53:d1:f7:2f:76:41:8f:be:39:f4:d0:11:57:66:
                    1a:20:09:4b:ce:ae:28:7a:05:76:0c:bd:a1:1f:ae:
                    ac:78:d3:62:7d:13:a4:74:56:33:0b:f0:17:5f:5a:
                    32:bc:c4:28:32:fb:1c:1b:fd:d1:f3:44:01:8d:38:
                    c8:23:3b:46:1f:e0:5e:bf:51:fa:2f:31:ea:e0:4d:
                    5e:6d:2d:92:63:14:9d:80:cb:0e:9c:70:69:32:f9:
                    9c:02:06:ed:61:2d:5c:fc:3c:d0:46:e4:16:cd:6c:
                    33:88:83:ce:81:c6:7c:37:fe:0f:e4:fc:dd:fd:c3:
                    d7:6b:e3:d6:a1:83:74:17:8c:d3:98:d9:8f:14:36:
                    4c:70:a9:07:86:72:ef:e9:64:44:d1:15:79:ea:d0:
                    a5:44:58:01:7e:6a:0e:a0:44:67:d5:d4:0c:79:3c:
                    a9:a0:d8:92:cf:2c:15:52:9d:13:37:1a:bc:53:e2:
                    d9:f9:69:a9:1b:54:19:50:47:dc:14:99:67:24:97:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:57:BF:FD:5B:ED:A8:89:FB:49:40:C5:D7:28:90:CA:AC:20:9A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RptXv_1b7aiJ-0lAxdcokMqsIJo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:3c:62:88:b7:ee:99:b6:51:15:9c:2e:40:bc:ae:60:4b:5c:
         b8:9d:7c:f2:23:5a:06:91:c6:d3:fb:15:45:29:a7:02:1f:69:
         6b:a2:8e:3a:3a:6f:8b:0d:0d:b2:06:d4:c6:1d:92:54:14:41:
         7f:a6:b9:c8:b6:b9:a6:ee:47:44:47:33:f1:a8:d5:27:85:5c:
         c5:f7:40:74:82:03:03:44:e0:79:d1:df:62:b7:72:7d:de:1a:
         58:3b:67:0e:92:dc:79:ab:44:b7:75:44:26:e9:b2:b3:60:c4:
         e4:4b:4d:a2:1a:a4:10:cf:e8:d2:e6:a3:d1:2f:a8:89:48:13:
         72:d5:99:71:d6:7a:53:81:3e:c2:61:87:42:27:5d:57:97:cf:
         b0:fe:5e:4e:32:99:c7:09:c0:25:ae:ba:d0:88:58:91:79:58:
         dc:7b:2a:d5:5d:70:ae:ce:ba:e6:6c:c3:fc:bc:c5:ec:ff:f0:
         16:fe:2b:38:dc:c7:54:66:09:02:9d:ca:8e:5a:20:32:34:18:
         9c:a7:30:cc:98:7d:bf:90:63:41:c5:e6:33:82:f7:69:9c:81:
         1e:f5:4c:a5:cf:71:1e:aa:6e:f1:b2:7f:61:3c:d5:46:16:41:
         13:8f:b1:78:b3:21:6c:74:74:c5:ea:4f:fd:08:fd:86:70:db:
         c1:a1:fe:0c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2OUI1N0JGRkQ1QkVE
QTg4OUZCNDk0MEM1RDcyODkwQ0FBQzIwOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLzoLsqtmR1TqScet3JSc2Cuhl0TEodLsN0SdRxR976AJE/vr8
LmevRvYaJBzPHmIRYRL1mQdiHGu7ErtT0fcvdkGPvjn00BFXZhogCUvOrih6BXYM
vaEfrqx402J9E6R0VjML8BdfWjK8xCgy+xwb/dHzRAGNOMgjO0Yf4F6/UfovMerg
TV5tLZJjFJ2Ayw6ccGky+ZwCBu1hLVz8PNBG5BbNbDOIg86Bxnw3/g/k/N39w9dr
49ahg3QXjNOY2Y8UNkxwqQeGcu/pZETRFXnq0KVEWAF+ag6gRGfV1Ax5PKmg2JLP
LBVSnRM3GrxT4tn5aakbVBlQR9wUmWcklzz5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQURptXv/1b7aiJ+0lAxdcokMqsIJowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1JwdFh2XzFiN2FpSi0wbEF4ZGNva01xc0lKby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYuAwDQYJKoZIhvcNAQELBQADggEB
AL48Yoi37pm2URWcLkC8rmBLXLidfPIjWgaRxtP7FUUppwIfaWuijjo6b4sNDbIG
1MYdklQUQX+muci2uabuR0RHM/Go1SeFXMX3QHSCAwNE4HnR32K3cn3eGlg7Zw6S
3HmrRLd1RCbpsrNgxORLTaIapBDP6NLmo9EvqIlIE3LVmXHWelOBPsJhh0InXVeX
z7D+Xk4ymccJwCWuutCIWJF5WNx7KtVdcK7OuuZsw/y8xez/8Bb+Kzjcx1RmCQKd
yo5aIDI0GJynMMyYfb+QY0HF5jOC92mcgR71TKXPcR6qbvGyf2E81UYWQROPsXiz
IWx0dMXqT/0I/YZw28Gh/gw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client