Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa
File:                     tqSMgpmm19D0RgT5QMaR1u4A6NE.roa (raw, json)
Hash identifier:          SUEx0DUyVhX892e2dfHhDcYYQEREDgPdBD5icwvOYdk=
Subject key identifier:   B6:A4:8C:82:99:A6:D7:D0:F4:46:04:F9:40:C6:91:D6:EE:00:E8:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       160A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa
Signing time:             Tue 31 Mar 2026 08:00:59 +0000
ROA not before:           Tue 31 Mar 2026 08:00:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5642 (0x160a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6A48C8299A6D7D0F44604F940C691D6EE00E8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:ea:70:e2:c4:d5:a8:55:0c:3a:aa:7a:a5:
                    e2:e2:23:ad:97:9d:78:82:47:aa:74:36:8a:81:8a:
                    ee:63:b7:35:a8:b7:20:c2:55:15:be:3c:f4:81:ab:
                    7c:2e:2d:6c:0b:21:9e:74:e7:6e:56:c5:ba:de:13:
                    4b:a6:18:a9:3e:13:fd:76:f8:af:5e:11:f6:1f:ad:
                    b9:5d:f9:1f:96:e9:80:87:b8:ff:02:78:ad:d7:10:
                    ac:0b:10:0a:89:e6:d0:d4:dc:c9:f1:f0:c0:bb:d4:
                    52:50:46:de:06:a7:82:dd:17:c3:e5:26:d8:1c:a2:
                    e1:4c:88:08:21:0f:07:71:70:9a:6f:be:30:4c:9d:
                    f3:da:76:0a:06:a6:30:71:01:9a:3f:bb:9e:e4:40:
                    f9:18:24:a2:d4:f6:46:b1:c3:1d:50:dd:78:a8:a0:
                    60:2a:30:69:73:8a:90:5f:7f:4e:16:cc:1f:c9:aa:
                    51:5a:71:ea:cb:4a:68:0b:ba:0f:c8:f2:b9:5f:87:
                    86:79:15:30:76:c4:12:ab:38:43:cb:f1:05:72:7e:
                    c1:54:f8:03:75:02:f1:4f:a8:ea:96:12:38:37:c8:
                    98:70:9b:33:37:bb:c0:d7:25:d1:ad:7d:9c:41:be:
                    0c:96:f1:3a:3e:09:76:fd:ba:24:11:f4:7e:45:ec:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A4:8C:82:99:A6:D7:D0:F4:46:04:F9:40:C6:91:D6:EE:00:E8:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tqSMgpmm19D0RgT5QMaR1u4A6NE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:0f:c3:e2:ba:4a:e6:4a:45:ee:ef:fa:8f:20:ba:5e:d8:
         63:94:2b:c4:1f:01:2e:10:29:bd:c0:db:12:f4:0e:c7:a9:03:
         4b:98:e5:88:c1:09:e9:13:a9:49:ee:98:b9:14:dc:23:63:7b:
         d1:da:82:f0:93:20:f0:51:81:9f:12:22:d8:e9:ac:f4:15:17:
         bd:16:96:c0:7b:ad:aa:ce:c0:00:1e:5a:7e:3d:f6:a4:67:1e:
         b2:a8:e7:c4:4d:9c:38:2b:85:4a:28:ed:c5:66:cc:89:d5:3d:
         64:ce:20:fd:7c:b4:2d:65:fd:bc:5b:5c:83:be:bf:28:6c:40:
         1d:4d:38:5a:1c:72:2e:0f:fc:1f:fd:30:8a:e4:9a:53:b3:ad:
         95:c1:21:18:8a:a2:9f:1c:95:13:5d:2e:37:9c:e9:d5:5d:40:
         45:da:8b:fc:f3:a0:dd:12:74:b5:4d:e1:01:95:6d:7e:ff:75:
         79:bf:96:79:ee:c0:5d:ee:6b:0b:af:a8:94:89:09:fb:b0:00:
         71:1a:87:0e:a5:9e:d5:18:da:ef:3e:d0:72:c3:8d:10:85:9c:
         ee:9c:e4:f1:38:b5:4e:48:10:16:6b:ab:23:2b:ef:50:fd:e4:
         d2:21:49:58:20:7c:23:6d:bc:e8:8f:2e:ab:ab:03:97:0f:0c:
         4f:a2:3c:dd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwNTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI2QTQ4QzgyOTlBNkQ3
RDBGNDQ2MDRGOTQwQzY5MUQ2RUUwMEU4RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEaepw4sTVqFUMOqp6peLiI62XnXiCR6p0NoqBiu5jtzWotyDC
VRW+PPSBq3wuLWwLIZ50525WxbreE0umGKk+E/12+K9eEfYfrbld+R+W6YCHuP8C
eK3XEKwLEAqJ5tDU3Mnx8MC71FJQRt4Gp4LdF8PlJtgcouFMiAghDwdxcJpvvjBM
nfPadgoGpjBxAZo/u57kQPkYJKLU9kaxwx1Q3XiooGAqMGlzipBff04WzB/JqlFa
cerLSmgLug/I8rlfh4Z5FTB2xBKrOEPL8QVyfsFU+AN1AvFPqOqWEjg3yJhwmzM3
u8DXJdGtfZxBvgyW8To+CXb9uiQR9H5F7LZDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUtqSMgpmm19D0RgT5QMaR1u4A6NEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L3RxU01ncG1tMTlEMFJnVDVRTWFSMXU0QTZORS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYn4wDQYJKoZIhvcNAQELBQADggEB
AE3iD8PiukrmSkXu7/qPILpe2GOUK8QfAS4QKb3A2xL0DsepA0uY5YjBCekTqUnu
mLkU3CNje9HagvCTIPBRgZ8SItjprPQVF70WlsB7rarOwAAeWn499qRnHrKo58RN
nDgrhUoo7cVmzInVPWTOIP18tC1l/bxbXIO+vyhsQB1NOFocci4P/B/9MIrkmlOz
rZXBIRiKop8clRNdLjec6dVdQEXai/zzoN0SdLVN4QGVbX7/dXm/lnnuwF3uawuv
qJSJCfuwAHEahw6lntUY2u8+0HLDjRCFnO6c5PE4tU5IEBZrqyMr71D95NIhSVgg
fCNtvOiPLqurA5cPDE+iPN0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client