Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWPCCYdTtFQTjBcV41NJU12rmwQ.roa
File:                     rWPCCYdTtFQTjBcV41NJU12rmwQ.roa (raw, json)
Hash identifier:          sWLcHCODd5mYSZ7lp9OEP+BTZxTWbkIvWMiYxT8Trcw=
Subject key identifier:   AD:63:C2:09:87:53:B4:54:13:8C:17:15:E3:53:49:53:5D:AB:9B:04
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       152C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWPCCYdTtFQTjBcV41NJU12rmwQ.roa
Signing time:             Tue 31 Mar 2026 07:59:06 +0000
ROA not before:           Tue 31 Mar 2026 07:59:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5420 (0x152c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD63C2098753B454138C1715E35349535DAB9B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:13:df:5e:ec:27:a0:82:f0:f1:53:88:9f:
                    ac:f2:01:e5:ab:de:a4:66:2c:51:58:e7:98:03:3c:
                    81:a3:ad:28:44:b8:f5:cc:26:4d:91:54:c8:91:7f:
                    d1:3e:b1:ca:82:2d:13:2f:50:15:ae:07:14:2f:90:
                    91:68:48:96:59:ac:74:78:7e:10:62:be:82:64:8d:
                    55:b9:94:a5:7a:c1:bf:a1:22:aa:2c:1f:5d:59:ee:
                    ea:38:fe:66:ac:8e:6a:3f:39:92:80:79:bf:1e:53:
                    c9:4b:c0:bc:7e:78:5a:44:b3:8a:dc:a7:3f:39:77:
                    f8:a2:2d:41:c6:f1:f7:19:e5:6f:90:29:ea:65:69:
                    19:ec:da:05:0c:1c:d5:46:73:98:d9:b9:ec:d6:d3:
                    23:09:e3:e1:f2:ce:00:87:26:38:76:0f:42:b4:bd:
                    cd:b7:a0:a3:6d:7b:84:60:b1:99:a6:d3:8b:ba:38:
                    51:28:96:e2:07:7e:dd:c5:78:cf:50:b8:96:2a:9e:
                    45:d5:6e:f3:84:ce:e3:22:80:4e:9a:a8:31:15:56:
                    90:2e:a3:c6:62:17:52:c8:7d:79:ec:37:5e:43:96:
                    c9:bb:12:76:78:41:90:27:32:7d:f0:05:b4:1a:71:
                    84:0d:1e:b4:67:44:d7:f2:4f:29:94:7e:3f:60:60:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:63:C2:09:87:53:B4:54:13:8C:17:15:E3:53:49:53:5D:AB:9B:04
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rWPCCYdTtFQTjBcV41NJU12rmwQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:4b:59:20:85:5f:66:fa:e4:42:53:4c:be:51:ec:73:ed:
         30:91:6f:63:39:33:1a:01:47:5e:3b:e9:72:5f:38:24:be:7b:
         d0:f4:65:c0:5d:89:5d:8c:99:49:e9:0e:8d:03:fb:20:ba:b7:
         0f:ec:53:5b:ac:ea:03:fd:86:4e:72:e6:6c:91:b4:d2:14:5c:
         56:f4:23:c2:ff:3f:08:10:2a:28:95:fa:68:c0:1d:5c:c1:9a:
         82:a3:7c:54:67:23:1d:ed:af:1a:f1:b1:c9:18:5a:94:9b:9a:
         fc:60:9a:5c:43:45:6d:14:ab:50:98:16:99:72:8e:69:eb:31:
         34:ad:0d:e0:68:a5:c4:49:ce:3f:a1:a3:a9:ad:27:bb:ef:c1:
         79:a5:f6:21:ba:ab:89:8e:2e:be:18:f2:30:f4:f5:f8:cb:86:
         ac:ae:b0:e9:32:67:c6:ed:42:b4:32:02:27:96:47:42:2d:48:
         7d:2c:84:0b:cd:7e:93:73:25:1b:be:7e:f6:e0:6f:7a:13:a8:
         88:3e:aa:1d:a1:de:f2:54:e0:9d:9a:2f:e8:01:a2:e4:50:60:
         c7:06:c5:fa:22:df:3a:e8:bd:7d:32:5e:30:e2:fa:15:71:8a:
         1f:89:67:06:72:6d:5f:d6:80:94:c7:b3:c2:2a:a4:2d:37:2e:
         e1:49:ef:06
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFENjNDMjA5ODc1M0I0
NTQxMzhDMTcxNUUzNTM0OTUzNURBQjlCMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFZBPfXuwnoILw8VOIn6zyAeWr3qRmLFFY55gDPIGjrShEuPXM
Jk2RVMiRf9E+scqCLRMvUBWuBxQvkJFoSJZZrHR4fhBivoJkjVW5lKV6wb+hIqos
H11Z7uo4/masjmo/OZKAeb8eU8lLwLx+eFpEs4rcpz85d/iiLUHG8fcZ5W+QKepl
aRns2gUMHNVGc5jZuezW0yMJ4+HyzgCHJjh2D0K0vc23oKNte4RgsZmm04u6OFEo
luIHft3FeM9QuJYqnkXVbvOEzuMigE6aqDEVVpAuo8ZiF1LIfXnsN15Dlsm7EnZ4
QZAnMn3wBbQacYQNHrRnRNfyTymUfj9gYGu9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUrWPCCYdTtFQTjBcV41NJU12rmwQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3JXUENDWWRUdEZRVGpCY1Y0MU5KVTEycm13US5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExZxAwDQYJKoZIhvcNAQELBQADggEB
AGxnS1kghV9m+uRCU0y+Uexz7TCRb2M5MxoBR1476XJfOCS+e9D0ZcBdiV2MmUnp
Do0D+yC6tw/sU1us6gP9hk5y5myRtNIUXFb0I8L/PwgQKiiV+mjAHVzBmoKjfFRn
Ix3trxrxsckYWpSbmvxgmlxDRW0Uq1CYFplyjmnrMTStDeBopcRJzj+ho6mtJ7vv
wXml9iG6q4mOLr4Y8jD09fjLhqyusOkyZ8btQrQyAieWR0ItSH0shAvNfpNzJRu+
fvbgb3oTqIg+qh2h3vJU4J2aL+gBouRQYMcGxfoi3zrovX0yXjDi+hVxih+JZwZy
bV/WgJTHs8IqpC03LuFJ7wY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:10 2026 by rpki-client