Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r-AvqBEK8bMv9tNRjt0peBIN3k8.roa
File:                     r-AvqBEK8bMv9tNRjt0peBIN3k8.roa (raw, json)
Hash identifier:          gW3VWS+ApUzKD1FmVy6WCleRUJZfjbFt9Vsq5eUAGsY=
Subject key identifier:   AF:E0:2F:A8:11:0A:F1:B3:2F:F6:D3:51:8E:DD:29:78:12:0D:DE:4F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1793
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r-AvqBEK8bMv9tNRjt0peBIN3k8.roa
Signing time:             Tue 31 Mar 2026 08:04:08 +0000
ROA not before:           Tue 31 Mar 2026 08:04:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.100.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6035 (0x1793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AFE02FA8110AF1B32FF6D3518EDD2978120DDE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:21:68:0e:32:f1:74:4e:25:ee:e3:95:c5:
                    95:f3:aa:36:fb:ec:2b:ca:ad:74:7d:e2:23:94:b6:
                    2c:32:a2:26:ae:48:2d:c9:b3:c0:44:b4:e2:df:e6:
                    2c:1c:64:5a:d5:79:db:9b:65:b2:28:50:91:11:39:
                    f8:4a:d1:a7:d3:06:fe:7f:bc:99:e2:70:49:e7:f8:
                    59:25:3d:c5:85:15:4f:43:4e:e6:78:9a:91:dd:19:
                    f8:ac:81:bb:55:d4:45:8c:13:33:fb:f5:11:75:8c:
                    49:93:60:1a:32:cc:9a:f5:fc:47:40:5c:c1:9f:f0:
                    57:ed:11:86:49:27:7e:20:68:24:21:23:6d:ec:e2:
                    e9:60:f8:f3:b0:33:ac:1d:32:d8:d6:92:f9:f0:77:
                    1d:e6:ee:72:b4:87:9b:a3:90:b9:1f:1b:ea:18:ee:
                    32:04:df:57:b7:c2:2e:30:0c:3c:6b:af:b5:a8:3a:
                    cd:fa:0a:67:d0:a5:d7:b8:92:ee:f8:fc:93:20:11:
                    8a:fc:d6:a9:39:4c:f6:d8:7b:f3:02:e9:c4:40:8a:
                    b7:19:ab:db:15:be:cb:46:d4:ab:51:b4:13:b8:c3:
                    28:3e:45:36:fa:5c:e2:04:33:a2:99:71:ff:0d:f0:
                    27:31:56:6c:94:60:88:5b:15:7e:a3:25:0d:a0:93:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:2F:A8:11:0A:F1:B3:2F:F6:D3:51:8E:DD:29:78:12:0D:DE:4F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r-AvqBEK8bMv9tNRjt0peBIN3k8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:a7:cb:90:9d:87:33:27:6e:5a:19:79:b3:d4:b7:77:3f:
         f3:2e:88:8d:1d:38:86:28:2f:9e:0d:3f:fc:9c:29:8c:5f:48:
         7d:53:7f:51:de:40:b9:ba:88:4a:b2:8d:ce:3c:e7:82:00:19:
         06:3d:2e:f6:82:07:71:5a:14:4a:7b:fd:8a:de:40:16:ec:cd:
         68:8e:58:93:1b:50:c2:11:31:36:8b:ed:0e:b5:1d:49:1c:b7:
         66:4f:10:cd:e0:a8:e6:90:e0:f0:81:27:f9:75:74:07:a8:3b:
         28:94:43:65:79:4e:2b:7a:b8:e3:27:73:06:ea:40:c1:6d:d3:
         c0:07:87:1a:ef:cb:07:47:fc:a6:30:2a:04:4b:91:f9:a7:a9:
         7b:3a:99:3d:4e:9e:b0:ed:4a:91:7a:71:c1:34:85:cb:da:39:
         22:2d:00:32:44:81:f8:c1:bd:49:54:f6:4a:b6:2a:f6:66:12:
         b7:ea:7f:ee:88:ce:70:0e:41:b2:47:63:08:c7:e0:a3:09:ba:
         e6:9a:a4:e2:d2:3b:bc:5d:c3:68:ba:f9:a1:2e:95:c0:ec:ba:
         13:c0:ed:88:53:86:84:d8:b4:9c:71:00:09:02:a8:9e:17:9a:
         be:3d:f0:3d:1a:75:9c:32:34:dd:7e:44:ac:03:d9:9a:2f:cb:
         43:72:4e:63
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGRTAyRkE4MTEwQUYx
QjMyRkY2RDM1MThFREQyOTc4MTIwRERFNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEWSFoDjLxdE4l7uOVxZXzqjb77CvKrXR94iOUtiwyoiauSC3J
s8BEtOLf5iwcZFrVedubZbIoUJEROfhK0afTBv5/vJnicEnn+FklPcWFFU9DTuZ4
mpHdGfisgbtV1EWMEzP79RF1jEmTYBoyzJr1/EdAXMGf8FftEYZJJ34gaCQhI23s
4ulg+POwM6wdMtjWkvnwdx3m7nK0h5ujkLkfG+oY7jIE31e3wi4wDDxrr7WoOs36
CmfQpde4ku74/JMgEYr81qk5TPbYe/MC6cRAircZq9sVvstG1KtRtBO4wyg+RTb6
XOIEM6KZcf8N8CcxVmyUYIhbFX6jJQ2gk8VtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUr+AvqBEK8bMv9tNRjt0peBIN3k8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3ItQXZxQkVLOGJNdjl0TlJqdDBwZUJJTjNrOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQxZLAwDQYJKoZIhvcNAQELBQADggEB
AADTp8uQnYczJ25aGXmz1Ld3P/MuiI0dOIYoL54NP/ycKYxfSH1Tf1HeQLm6iEqy
jc4854IAGQY9LvaCB3FaFEp7/YreQBbszWiOWJMbUMIRMTaL7Q61HUkct2ZPEM3g
qOaQ4PCBJ/l1dAeoOyiUQ2V5Tit6uOMncwbqQMFt08AHhxrvywdH/KYwKgRLkfmn
qXs6mT1OnrDtSpF6ccE0hcvaOSItADJEgfjBvUlU9kq2KvZmErfqf+6IznAOQbJH
YwjH4KMJuuaapOLSO7xdw2i6+aEulcDsuhPA7YhThoTYtJxxAAkCqJ4Xmr498D0a
dZwyNN1+RKwD2Zovy0NyTmM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:01 2026 by rpki-client