Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SnvnBgmZvEx8FkU21Znz400Ax_4.roa
File:                     SnvnBgmZvEx8FkU21Znz400Ax_4.roa (raw, json)
Hash identifier:          emT5edFa6KsFwupvyvggqcBKi/XN9E02EBTUtTEb+5Q=
Subject key identifier:   4A:7B:E7:06:09:99:BC:4C:7C:16:45:36:D5:99:F3:E3:4D:00:C7:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1651
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SnvnBgmZvEx8FkU21Znz400Ax_4.roa
Signing time:             Tue 31 Mar 2026 08:01:34 +0000
ROA not before:           Tue 31 Mar 2026 08:01:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5713 (0x1651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4A7BE7060999BC4C7C164536D599F3E34D00C7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:24:b4:d3:fb:37:39:bf:65:0a:76:79:db:59:
                    f8:9d:31:6c:29:85:c8:4d:df:40:1d:24:4e:75:57:
                    0e:d0:3f:f4:1e:ea:24:f4:2d:94:9b:fc:4a:a3:d5:
                    57:ae:90:6f:73:95:e0:15:4e:47:31:b5:b6:12:e8:
                    14:79:31:c7:33:5a:77:ff:eb:14:91:6e:5a:fe:7b:
                    48:7c:aa:e5:a2:52:e1:d4:e9:d3:51:d9:43:45:b7:
                    95:c4:cf:36:38:21:da:11:e3:ce:c9:e7:f4:90:c9:
                    22:44:84:7d:88:1a:b2:ca:88:63:e8:1d:05:fa:2a:
                    fe:e4:c0:c3:8a:50:e6:3c:03:b4:9f:34:41:2e:4b:
                    ea:d1:08:ae:b0:11:a7:74:f3:11:40:5a:f3:2a:e2:
                    53:71:85:5b:de:69:c2:2f:67:97:6d:89:9c:ee:31:
                    ed:80:70:61:5a:fd:04:93:60:58:16:ea:18:84:a6:
                    89:67:e5:e2:a0:07:ff:28:4d:b9:ac:60:d7:c6:23:
                    4a:1c:99:a6:15:c0:f3:e7:ea:ea:80:84:1f:e7:87:
                    0a:ee:15:41:86:b4:a6:10:d3:03:eb:dd:f6:c3:9d:
                    b2:4f:16:e2:f1:7b:14:95:ce:67:c4:99:73:2b:5e:
                    8e:b3:b6:75:e0:2c:c2:1b:9b:c0:1a:f6:ed:a8:1e:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:E7:06:09:99:BC:4C:7C:16:45:36:D5:99:F3:E3:4D:00:C7:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SnvnBgmZvEx8FkU21Znz400Ax_4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:39:15:5b:d7:4a:41:3e:fc:4e:2a:5f:a3:c3:ab:3b:3b:
         5b:cc:ad:c6:50:83:9b:2b:b3:b6:0d:03:94:23:c5:2b:ee:e9:
         cd:ac:bd:8e:c1:6a:3d:c9:9a:e3:a2:1b:e8:c7:8b:ad:0a:ac:
         17:49:60:e1:5b:e5:c1:bd:59:b9:61:1e:b1:27:3b:a6:5d:d1:
         6a:c2:5c:f9:d9:88:f2:c4:a6:90:f5:47:cd:de:0b:e6:95:1e:
         01:22:a2:a2:c9:f2:b1:32:e5:9b:d4:d6:b7:38:aa:3e:2a:8d:
         28:66:88:eb:94:f7:0d:b8:f7:56:98:62:1c:1c:f8:5a:31:dd:
         66:1d:56:17:6e:9a:be:8e:9b:64:5d:47:7a:71:4e:18:b9:83:
         d0:cb:be:20:c0:58:a2:1e:12:57:29:7e:97:ff:55:13:5b:dd:
         3b:26:16:de:76:7d:0b:97:75:94:7d:31:13:96:9f:59:ea:6c:
         1a:80:e8:67:45:78:4a:2b:e5:24:bf:b3:d0:14:65:32:f5:56:
         d6:2f:ff:71:e0:47:eb:09:95:c8:62:64:cb:0d:d8:75:6b:a7:
         13:99:fb:35:8b:ce:01:aa:1f:64:a1:e0:56:5b:45:b8:12:14:
         97:37:0a:c2:b0:d4:ea:2e:8d:ec:27:e3:13:f3:32:e1:54:eb:
         93:c9:26:ff
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxMzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRBN0JFNzA2MDk5OUJD
NEM3QzE2NDUzNkQ1OTlGM0UzNEQwMEM3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2JLTT+zc5v2UKdnnbWfidMWwphchN30AdJE51Vw7QP/Qe6iT0
LZSb/Eqj1VeukG9zleAVTkcxtbYS6BR5McczWnf/6xSRblr+e0h8quWiUuHU6dNR
2UNFt5XEzzY4IdoR487J5/SQySJEhH2IGrLKiGPoHQX6Kv7kwMOKUOY8A7SfNEEu
S+rRCK6wEad08xFAWvMq4lNxhVveacIvZ5dtiZzuMe2AcGFa/QSTYFgW6hiEpoln
5eKgB/8oTbmsYNfGI0ocmaYVwPPn6uqAhB/nhwruFUGGtKYQ0wPr3fbDnbJPFuLx
exSVzmfEmXMrXo6ztnXgLMIbm8Aa9u2oHs31AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSnvnBgmZvEx8FkU21Znz400Ax/4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1Nudm5CZ21adkV4OEZrVTIxWm56NDAwQXhfNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxaC4wDQYJKoZIhvcNAQELBQADggEB
ALGBORVb10pBPvxOKl+jw6s7O1vMrcZQg5srs7YNA5QjxSvu6c2svY7Baj3JmuOi
G+jHi60KrBdJYOFb5cG9WblhHrEnO6Zd0WrCXPnZiPLEppD1R83eC+aVHgEioqLJ
8rEy5ZvU1rc4qj4qjShmiOuU9w2491aYYhwc+Fox3WYdVhdumr6Om2RdR3pxThi5
g9DLviDAWKIeElcpfpf/VRNb3TsmFt52fQuXdZR9MROWn1nqbBqA6GdFeEor5SS/
s9AUZTL1VtYv/3HgR+sJlchiZMsN2HVrpxOZ+zWLzgGqH2Sh4FZbRbgSFJc3CsKw
1Ooujewn4xPzMuFU65PJJv8=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client