Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8jRmaitIMwpgXH5Yh847JKRRDA.roa
File:                     J8jRmaitIMwpgXH5Yh847JKRRDA.roa (raw, json)
Hash identifier:          c7wzfQaR/gqutG6pkutA/KAfMGwX0rBYE5DJ5mdQJQ4=
Subject key identifier:   27:C8:D1:99:A8:AD:20:CC:29:81:71:F9:62:1F:38:EC:92:91:44:30
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       187B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8jRmaitIMwpgXH5Yh847JKRRDA.roa
Signing time:             Wed 20 May 2026 06:31:44 +0000
ROA not before:           Wed 20 May 2026 06:31:44 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6267 (0x187b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 20 06:31:44 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=27C8D199A8AD20CC298171F9621F38EC92914430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:00:3c:62:30:a5:79:9a:6a:df:7b:3a:21:
                    22:be:3f:93:f1:c4:86:57:ed:9a:f9:29:d9:38:31:
                    82:74:e2:23:27:83:ec:0d:17:5f:30:f5:73:d3:4f:
                    e9:7f:47:16:53:f0:5d:98:dc:a4:32:81:ed:d2:49:
                    51:e1:ef:36:f2:c4:f9:ea:f9:e0:7d:37:ed:e3:77:
                    31:dc:68:b8:8c:4b:7a:44:b5:6b:10:fc:f1:0d:63:
                    60:4c:ba:19:2c:a9:02:5d:75:f3:30:63:c5:d2:d0:
                    38:7c:ea:91:30:a3:3b:af:e9:39:20:9f:6e:f1:25:
                    d7:8a:14:39:d9:5f:0a:17:2b:9f:ba:a2:2e:a6:86:
                    bb:9f:d5:e3:3c:d0:1d:2a:f2:93:55:42:67:52:8f:
                    f1:a4:b7:d7:81:aa:0c:49:51:dc:5a:ae:4b:b8:37:
                    6a:57:df:ba:7d:96:a6:df:03:59:95:a2:9c:de:aa:
                    78:51:d3:e6:88:b8:51:ad:2a:49:98:21:d4:06:1b:
                    e3:4e:d4:11:f4:a5:70:0d:e6:02:4f:3f:ad:c6:b0:
                    d2:4f:ae:51:c3:c8:e2:b0:b3:71:b5:3f:0d:39:f9:
                    5d:dc:29:5f:de:01:4c:66:57:d2:12:0b:5a:01:e2:
                    85:83:1e:fd:79:aa:99:2f:ca:dc:b5:f1:f0:6f:2d:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:D1:99:A8:AD:20:CC:29:81:71:F9:62:1F:38:EC:92:91:44:30
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J8jRmaitIMwpgXH5Yh847JKRRDA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:70:95:8d:1c:1a:94:f0:32:f1:96:21:b7:4b:37:ee:72:
         75:4d:4a:05:c8:5b:a4:b9:74:f3:65:28:01:85:84:63:8b:7a:
         1d:0a:fd:43:43:17:25:61:e7:a2:0a:30:17:bc:0b:a4:3f:05:
         1c:db:a9:1c:31:2a:b2:f6:84:20:68:0d:d7:ec:2f:bf:d3:27:
         6d:69:cc:c1:b6:c1:82:f3:30:44:97:09:02:22:e3:85:36:0a:
         40:59:bd:14:73:07:d6:86:45:1a:c0:be:00:ba:bf:dc:e2:c9:
         df:b6:19:f1:7e:48:0a:e7:a7:be:bc:c1:ce:a4:1c:18:7e:98:
         4f:c1:0a:22:2d:8d:7a:02:df:19:df:fd:1e:08:2c:04:fe:41:
         45:ac:f8:90:c9:54:df:c7:a7:c3:e9:d8:ed:c2:38:01:6f:73:
         e1:a1:2f:33:94:9d:9c:c2:06:82:82:1f:91:82:94:ed:47:2e:
         bb:9b:57:23:c0:7b:3a:a0:8d:94:49:9d:81:04:20:00:41:d2:
         4f:30:b7:46:e0:b6:44:74:04:85:bd:63:2d:ff:8c:a1:04:39:
         79:22:4c:8b:e2:d9:2c:b3:f7:6a:4e:36:f4:88:12:91:03:19:
         b9:a6:b1:f5:be:fe:89:db:4b:24:be:e3:07:d6:f7:10:dc:3a:
         ed:20:a4:28
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICGHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjA1MjAw
NjMxNDRaFw0yNzA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI3QzhEMTk5QThBRDIw
Q0MyOTgxNzFGOTYyMUYzOEVDOTI5MTQ0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKCwA8YjCleZpq33s6ISK+P5PxxIZX7Zr5Kdk4MYJ04iMng+wN
F18w9XPTT+l/RxZT8F2Y3KQyge3SSVHh7zbyxPnq+eB9N+3jdzHcaLiMS3pEtWsQ
/PENY2BMuhksqQJddfMwY8XS0Dh86pEwozuv6Tkgn27xJdeKFDnZXwoXK5+6oi6m
hruf1eM80B0q8pNVQmdSj/Gkt9eBqgxJUdxarku4N2pX37p9lqbfA1mVopzeqnhR
0+aIuFGtKkmYIdQGG+NO1BH0pXAN5gJPP63GsNJPrlHDyOKws3G1Pw05+V3cKV/e
AUxmV9ISC1oB4oWDHv15qpkvyty18fBvLQ8vAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJ8jRmaitIMwpgXH5Yh847JKRRDAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0o4alJtYWl0SU13cGdYSDVZaDg0N0pLUlJEQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxaTAwDQYJKoZIhvcNAQELBQADggEB
AEj7cJWNHBqU8DLxliG3SzfucnVNSgXIW6S5dPNlKAGFhGOLeh0K/UNDFyVh56IK
MBe8C6Q/BRzbqRwxKrL2hCBoDdfsL7/TJ21pzMG2wYLzMESXCQIi44U2CkBZvRRz
B9aGRRrAvgC6v9ziyd+2GfF+SArnp768wc6kHBh+mE/BCiItjXoC3xnf/R4ILAT+
QUWs+JDJVN/Hp8Pp2O3COAFvc+GhLzOUnZzCBoKCH5GClO1HLrubVyPAezqgjZRJ
nYEEIABB0k8wt0bgtkR0BIW9Yy3/jKEEOXkiTIvi2Syz92pONvSIEpEDGbmmsfW+
/onbSyS+4wfW9xDcOu0gpCg=
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:12 2026 by rpki-client