Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbp68PHCiLQ9bJYE-9P6xEbYMPc.roa
File:                     rbp68PHCiLQ9bJYE-9P6xEbYMPc.roa (raw, json)
Hash identifier:          ctIOpSx6OTZyjDskxcPSzB1IHtnIspBqDjmAdXhQFmM=
Subject key identifier:   AD:BA:7A:F0:F1:C2:88:B4:3D:6C:96:04:FB:D3:FA:C4:46:D8:30:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbp68PHCiLQ9bJYE-9P6xEbYMPc.roa
Signing time:             Tue 31 Mar 2026 07:56:32 +0000
ROA not before:           Tue 31 Mar 2026 07:56:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5098 (0x13ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ADBA7AF0F1C288B43D6C9604FBD3FAC446D830F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:a3:9e:e1:32:2e:64:c5:c2:9f:64:06:53:
                    64:ff:95:7d:3b:b5:fa:7a:17:1f:ef:7d:e1:cf:e7:
                    53:b7:8a:88:e7:95:55:5b:b2:cc:56:81:54:81:dd:
                    5e:4d:3b:61:4c:5d:10:83:7a:16:40:17:e3:8b:2c:
                    60:8a:02:eb:6f:c1:7a:f7:3d:fe:d9:5d:d3:62:71:
                    3b:5c:09:38:c8:4c:c7:98:40:97:62:1d:c8:61:d4:
                    f7:07:cf:b2:0b:0f:a0:54:aa:c3:9c:c3:25:e1:15:
                    32:84:18:66:f7:23:b8:e1:13:b4:88:d8:05:47:ea:
                    22:d5:9c:56:c3:df:4e:f6:28:f3:30:88:49:7c:80:
                    70:10:4b:ad:ce:c4:93:a4:d5:28:e9:16:f9:30:2f:
                    0b:15:e4:c2:c7:66:3c:fd:c1:6f:7f:f0:79:c4:88:
                    e9:1d:40:e7:55:a0:0f:8b:70:82:c9:9b:24:24:0e:
                    ce:1d:5f:34:09:82:ff:5a:0b:9c:b4:c8:bd:ca:70:
                    6e:61:a0:09:27:36:77:be:7d:3f:24:02:ed:09:7d:
                    6b:7d:2f:a5:7a:00:dd:93:44:e8:2b:dd:8b:b2:db:
                    be:2b:55:4c:96:8f:e4:f6:c2:f5:b5:1e:09:de:16:
                    37:9a:bc:a3:32:cc:aa:04:ae:c4:54:68:fd:82:cc:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:7A:F0:F1:C2:88:B4:3D:6C:96:04:FB:D3:FA:C4:46:D8:30:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbp68PHCiLQ9bJYE-9P6xEbYMPc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:c5:4f:e3:ff:7e:0b:af:44:df:c1:4f:b7:4c:fd:34:87:
         5a:20:97:86:8f:f3:c8:78:b3:84:85:9f:0d:32:eb:4a:87:f1:
         8d:6d:f3:d2:4f:65:6a:b3:6f:20:e6:a9:88:bd:41:ce:fa:47:
         da:52:e8:b6:36:18:01:1a:9a:db:13:ec:ef:2d:f7:59:d6:97:
         a2:27:f3:6f:82:a9:18:ef:ee:2e:bb:d1:c1:7b:a3:75:fd:fe:
         35:fa:be:4c:e9:97:30:0b:f8:65:06:13:8f:7f:6e:21:10:5e:
         74:ca:45:8a:da:87:8d:7b:95:55:73:68:69:13:5f:d1:67:c6:
         c7:01:1f:f7:4e:26:c9:68:f1:c9:e1:87:39:18:40:64:9f:5c:
         1f:eb:bc:a1:99:2d:82:50:f5:19:23:da:66:22:a6:57:be:ec:
         3d:b3:f3:65:5f:99:8e:a7:86:93:1e:da:d3:57:19:71:c4:bf:
         58:a8:dc:93:f4:4d:42:08:91:34:12:de:c7:bf:b6:3c:5c:ff:
         d7:df:0b:15:bf:d3:f7:38:8c:07:63:97:59:6a:ad:77:a3:61:
         3d:0c:59:8e:99:df:f5:f7:f8:5c:6c:40:dc:6e:f6:cc:8b:c3:
         01:5f:15:b1:ad:d4:e4:d2:71:3f:17:fc:8a:39:ed:94:ce:52:
         86:08:ef:ea
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFEQkE3QUYwRjFDMjg4
QjQzRDZDOTYwNEZCRDNGQUM0NDZEODMwRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTYaOe4TIuZMXCn2QGU2T/lX07tfp6Fx/vfeHP51O3iojnlVVb
ssxWgVSB3V5NO2FMXRCDehZAF+OLLGCKAutvwXr3Pf7ZXdNicTtcCTjITMeYQJdi
Hchh1PcHz7ILD6BUqsOcwyXhFTKEGGb3I7jhE7SI2AVH6iLVnFbD3072KPMwiEl8
gHAQS63OxJOk1SjpFvkwLwsV5MLHZjz9wW9/8HnEiOkdQOdVoA+LcILJmyQkDs4d
XzQJgv9aC5y0yL3KcG5hoAknNne+fT8kAu0JfWt9L6V6AN2TROgr3Yuy274rVUyW
j+T2wvW1HgneFjeavKMyzKoErsRUaP2CzCyDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUrbp68PHCiLQ9bJYE+9P6xEbYMPcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3JicDY4UEhDaUxROWJKWUUtOVA2eEViWU1QYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYrwwDQYJKoZIhvcNAQELBQADggEB
AAwgxU/j/34Lr0TfwU+3TP00h1ogl4aP88h4s4SFnw0y60qH8Y1t89JPZWqzbyDm
qYi9Qc76R9pS6LY2GAEamtsT7O8t91nWl6In82+CqRjv7i670cF7o3X9/jX6vkzp
lzAL+GUGE49/biEQXnTKRYrah417lVVzaGkTX9FnxscBH/dOJslo8cnhhzkYQGSf
XB/rvKGZLYJQ9Rkj2mYiple+7D2z82VfmY6nhpMe2tNXGXHEv1io3JP0TUIIkTQS
3se/tjxc/9ffCxW/0/c4jAdjl1lqrXejYT0MWY6Z3/X3+FxsQNxu9syLwwFfFbGt
1OTScT8X/Io57ZTOUoYI7+o=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:43 2026 by rpki-client