Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bMT96tX7udG9xO-576uFFxmMbLU.roa
File:                     bMT96tX7udG9xO-576uFFxmMbLU.roa (raw, json)
Hash identifier:          YgfDSjggZmHltgi1nh4sPvTOcosa1XcQOqryvjrR4mQ=
Subject key identifier:   6C:C4:FD:EA:D5:FB:B9:D1:BD:C4:EF:B9:EF:AB:85:17:19:8C:6C:B5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15B6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bMT96tX7udG9xO-576uFFxmMbLU.roa
Signing time:             Tue 31 Mar 2026 08:00:15 +0000
ROA not before:           Tue 31 Mar 2026 08:00:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5558 (0x15b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6CC4FDEAD5FBB9D1BDC4EFB9EFAB8517198C6CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:8a:36:72:af:97:fe:1e:ce:5f:ae:88:26:
                    26:77:30:85:99:c9:87:e7:d1:96:07:a3:11:b5:15:
                    25:5e:b6:2d:8d:e3:c9:47:4d:09:1f:ca:fc:0e:51:
                    6b:59:1e:d5:07:82:9f:89:43:dc:63:6c:f6:2b:74:
                    22:bf:86:ef:c1:37:ec:f2:53:8d:15:9b:6b:79:14:
                    ce:4a:31:bc:84:69:5a:5d:1a:99:5b:04:2d:bf:cf:
                    29:21:0b:88:32:b2:11:58:1d:e8:da:00:e4:e5:6d:
                    03:77:93:0d:c0:56:3c:8c:af:c3:01:c3:26:5a:fb:
                    6d:df:c5:f0:6a:bd:4e:be:ff:f5:6b:10:ef:ac:4b:
                    bb:5b:70:1e:d8:98:08:16:ac:a1:a2:31:a5:c3:44:
                    c2:1e:38:b6:fd:c6:08:58:da:d2:a5:24:fa:4a:f2:
                    41:e7:8d:ca:6d:59:3f:12:bb:b7:b9:0e:2e:20:b4:
                    55:69:c5:22:1f:22:d8:3f:2f:8f:2f:b9:c6:08:09:
                    52:05:51:2c:f8:2f:53:c4:1f:e3:68:8d:40:60:53:
                    ef:ed:14:7f:11:c7:12:c7:d8:36:4f:db:41:af:d7:
                    f5:e2:8d:d2:d5:d0:b1:ff:54:fc:81:38:9d:84:7c:
                    aa:94:9b:50:2c:74:e8:76:85:8a:af:72:79:15:58:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:FD:EA:D5:FB:B9:D1:BD:C4:EF:B9:EF:AB:85:17:19:8C:6C:B5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bMT96tX7udG9xO-576uFFxmMbLU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:e7:f7:92:c1:36:b3:14:e4:ac:ea:a8:6e:6e:b7:c5:29:b3:
         02:e3:f7:1c:7d:b5:7a:83:f7:92:24:4d:7e:04:ce:71:20:2d:
         db:3e:5a:f0:e4:b2:7d:be:f8:5c:f3:de:56:63:3d:34:b4:5a:
         c5:38:65:16:fc:06:9f:c1:80:ac:9e:11:26:7c:13:55:cb:39:
         cf:62:0f:25:81:2d:aa:38:7e:77:9f:6e:9d:96:30:e7:56:38:
         bd:6f:b8:34:de:e7:9e:89:2b:2f:0a:b9:8a:dd:ea:29:46:c6:
         c6:51:55:d9:b1:60:26:5c:87:ff:db:54:ad:93:b3:46:49:33:
         f9:a3:02:ad:fc:07:5b:f8:4e:a7:fe:a3:1d:97:65:66:7b:8c:
         83:32:d7:a6:93:82:32:76:48:53:96:ca:9f:bb:b5:41:84:80:
         ee:43:d9:8c:19:88:56:a0:a3:c6:d1:f9:4b:9c:ec:9d:73:b2:
         f8:5b:f5:9d:22:c3:97:04:24:37:d6:2d:e1:b7:18:9b:03:ed:
         19:cb:2e:83:f2:d2:f0:53:4e:94:7e:78:c2:62:e3:35:b7:18:
         28:55:2f:5d:c5:17:d6:a0:de:60:db:e0:1e:65:da:f1:a0:e9:
         5e:4d:d1:55:7b:6f:11:f4:65:73:db:33:be:92:73:34:f8:53:
         b3:c7:07:9e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDQzRGREVBRDVGQkI5
RDFCREM0RUZCOUVGQUI4NTE3MTk4QzZDQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVjoo2cq+X/h7OX66IJiZ3MIWZyYfn0ZYHoxG1FSVeti2N48lH
TQkfyvwOUWtZHtUHgp+JQ9xjbPYrdCK/hu/BN+zyU40Vm2t5FM5KMbyEaVpdGplb
BC2/zykhC4gyshFYHejaAOTlbQN3kw3AVjyMr8MBwyZa+23fxfBqvU6+//VrEO+s
S7tbcB7YmAgWrKGiMaXDRMIeOLb9xghY2tKlJPpK8kHnjcptWT8Su7e5Di4gtFVp
xSIfItg/L48vucYICVIFUSz4L1PEH+NojUBgU+/tFH8RxxLH2DZP20Gv1/XijdLV
0LH/VPyBOJ2EfKqUm1AsdOh2hYqvcnkVWIWBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbMT96tX7udG9xO+576uFFxmMbLUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2JNVDk2dFg3dWRHOXhPLTU3NnVGRnhtTWJMVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaVgwDQYJKoZIhvcNAQELBQADggEB
AALn95LBNrMU5KzqqG5ut8UpswLj9xx9tXqD95IkTX4EznEgLds+WvDksn2++Fzz
3lZjPTS0WsU4ZRb8Bp/BgKyeESZ8E1XLOc9iDyWBLao4fnefbp2WMOdWOL1vuDTe
556JKy8KuYrd6ilGxsZRVdmxYCZch//bVK2Ts0ZJM/mjAq38B1v4Tqf+ox2XZWZ7
jIMy16aTgjJ2SFOWyp+7tUGEgO5D2YwZiFago8bR+Uuc7J1zsvhb9Z0iw5cEJDfW
LeG3GJsD7RnLLoPy0vBTTpR+eMJi4zW3GChVL13FF9ag3mDb4B5l2vGg6V5N0VV7
bxH0ZXPbM76SczT4U7PHB54=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client