Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
File:                     GbCu5SCf5QkB90YBRx0os7Fa36s.roa (raw, json)
Hash identifier:          HBHTT5VeGLRg+FwzBuLLjv/Izk9C5IZfgw8+46cfn/8=
Subject key identifier:   19:B0:AE:E5:20:9F:E5:09:01:F7:46:01:47:1D:28:B3:B1:5A:DF:AB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       104F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
Signing time:             Sun 01 Feb 2026 01:32:40 +0000
ROA not before:           Sun 01 Feb 2026 01:32:40 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4175 (0x104f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb  1 01:32:40 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=19B0AEE5209FE50901F74601471D28B3B15ADFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:98:00:f7:8b:36:79:e8:40:a5:2e:37:b2:a6:
                    18:75:2c:fd:95:d6:0b:6a:07:cb:e4:58:ab:fc:a1:
                    ba:eb:8f:06:50:ec:6a:67:d6:49:80:b1:53:71:b5:
                    05:86:18:e2:2b:94:e7:54:cb:e8:26:f7:79:14:0c:
                    2a:8f:c9:3f:b9:f5:bd:49:a6:46:31:04:0a:43:5c:
                    6f:f3:f3:8d:30:34:65:f7:83:07:42:dd:82:99:54:
                    3a:9c:89:f6:ab:41:1c:7e:22:2d:23:29:9d:fb:80:
                    91:07:83:a1:ac:ec:70:8d:23:43:4b:29:35:27:6a:
                    71:2e:9f:86:8b:78:c4:14:b5:d6:51:c0:eb:0e:b0:
                    93:11:8f:49:da:2c:00:a4:09:21:a5:97:28:66:c1:
                    da:ef:06:96:c7:da:17:ee:d7:5f:4b:7c:27:63:ce:
                    02:55:66:30:29:aa:b7:32:a1:5d:c7:97:43:8f:1f:
                    d6:13:d4:6f:3b:b7:35:a0:c0:a6:dc:ec:3c:5f:d6:
                    74:51:e5:6a:ef:98:ed:91:f2:a6:72:31:94:bf:41:
                    11:e2:68:51:4b:bd:94:98:eb:31:6c:4b:d3:a2:c7:
                    c0:a5:4e:3e:10:bc:4f:f7:c3:65:b7:b8:b3:09:ad:
                    ec:42:f3:f2:76:71:d8:8a:33:5a:a7:7f:43:97:78:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B0:AE:E5:20:9F:E5:09:01:F7:46:01:47:1D:28:B3:B1:5A:DF:AB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbCu5SCf5QkB90YBRx0os7Fa36s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:e1:00:b3:0a:93:5f:3e:ae:27:c8:cc:be:27:2f:81:fe:c4:
         0a:38:21:8d:b7:1f:d8:b7:ab:c0:59:b6:27:4c:97:8c:ee:20:
         30:97:50:be:a5:67:1c:d0:93:5f:13:55:fa:44:6c:a7:4b:3f:
         a4:25:67:23:47:58:5e:53:99:df:df:ec:60:70:56:5b:41:d6:
         11:bc:20:86:37:1f:41:7f:6d:7a:9e:00:b9:51:1c:6c:e5:30:
         85:61:26:6c:ec:3e:c3:f7:c1:6f:d9:d2:ef:13:e3:44:19:64:
         66:ca:72:82:c4:4c:c4:58:ed:66:d0:6b:75:6e:15:27:d9:0c:
         8a:2d:b3:03:41:2e:b9:62:4d:7e:58:71:b0:17:d0:06:90:4a:
         8d:e0:dd:f8:58:0e:5c:b4:a7:60:3e:b3:67:09:80:f8:03:22:
         5c:44:18:1b:49:d8:0c:8a:5f:1a:cc:09:aa:31:80:38:3b:ca:
         17:f0:9c:8b:15:ad:04:df:40:ad:5e:0a:b7:6a:c7:ed:34:5e:
         bf:85:2f:cc:73:1a:e6:8c:dc:42:9c:c9:fe:f6:95:84:a1:35:
         53:c4:0c:94:26:ad:ac:f4:f0:f8:76:cb:6b:91:70:5e:77:7b:
         4d:96:fb:c1:90:5a:1c:84:20:b7:91:f8:51:44:e6:d9:15:20:
         98:20:35:43
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAyMDEw
MTMyNDBaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5QjBBRUU1MjA5RkU1
MDkwMUY3NDYwMTQ3MUQyOEIzQjE1QURGQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzmAD3izZ56EClLjeyphh1LP2V1gtqB8vkWKv8obrrjwZQ7Gpn
1kmAsVNxtQWGGOIrlOdUy+gm93kUDCqPyT+59b1JpkYxBApDXG/z840wNGX3gwdC
3YKZVDqcifarQRx+Ii0jKZ37gJEHg6Gs7HCNI0NLKTUnanEun4aLeMQUtdZRwOsO
sJMRj0naLACkCSGllyhmwdrvBpbH2hfu119LfCdjzgJVZjApqrcyoV3Hl0OPH9YT
1G87tzWgwKbc7Dxf1nRR5WrvmO2R8qZyMZS/QRHiaFFLvZSY6zFsS9Oix8ClTj4Q
vE/3w2W3uLMJrexC8/J2cdiKM1qnf0OXeB1ZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGbCu5SCf5QkB90YBRx0os7Fa36swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0diQ3U1U0NmNVFrQjkwWUJSeDBvczdGYTM2cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYJgwDQYJKoZIhvcNAQELBQADggEBANPhALMKk18+rifIzL4nL4H+xAo4
IY23H9i3q8BZtidMl4zuIDCXUL6lZxzQk18TVfpEbKdLP6QlZyNHWF5Tmd/f7GBw
VltB1hG8IIY3H0F/bXqeALlRHGzlMIVhJmzsPsP3wW/Z0u8T40QZZGbKcoLETMRY
7WbQa3VuFSfZDIotswNBLrliTX5YcbAX0AaQSo3g3fhYDly0p2A+s2cJgPgDIlxE
GBtJ2AyKXxrMCaoxgDg7yhfwnIsVrQTfQK1eCrdqx+00Xr+FL8xzGuaM3EKcyf72
lYShNVPEDJQmraz08Ph2y2uRcF53e02W+8GQWhyEILeR+FFE5tkVIJggNUM=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:04 2026 by rpki-client