Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0AQU4gfJcsPRp3H_fzorKt1xU0.roa
File:                     w0AQU4gfJcsPRp3H_fzorKt1xU0.roa (raw, json)
Hash identifier:          9ycpxmNiWnBj9r7Aczn7nC7xHtYEeKEtLldN4uhuIwk=
Subject key identifier:   C3:40:10:53:88:1F:25:CB:0F:46:9D:C7:FD:FC:E8:AC:AB:75:C5:4D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       135C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0AQU4gfJcsPRp3H_fzorKt1xU0.roa
Signing time:             Wed 25 Mar 2026 09:10:49 +0000
ROA not before:           Wed 25 Mar 2026 09:10:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4956 (0x135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 25 09:10:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C3401053881F25CB0F469DC7FDFCE8ACAB75C54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:80:68:fd:e6:1e:44:05:ba:70:ca:a1:94:
                    1d:21:58:d6:b4:81:5f:53:ae:1c:88:eb:84:d8:ea:
                    97:fe:98:72:a5:cd:9f:cc:b8:ec:ed:8f:7e:6b:4c:
                    d4:78:7d:c2:54:32:51:95:1e:ce:4d:a0:bb:09:e6:
                    37:41:ee:ae:b3:c0:54:30:96:48:e2:35:e7:17:17:
                    e7:e8:b1:48:2e:e2:cd:c7:fc:da:a1:0b:46:71:88:
                    75:76:77:80:b1:e1:e1:f6:15:6f:d6:2c:59:f3:f1:
                    a7:b7:af:f7:06:f4:e9:61:d4:ba:cf:72:6a:5a:98:
                    52:08:51:63:c2:5a:88:23:d9:3e:ae:f5:c0:ac:1c:
                    03:88:c4:9e:19:51:09:c2:e1:ee:61:72:2a:a7:9b:
                    4f:c6:25:e2:ca:d5:4e:f9:e9:3f:84:7b:25:9a:d0:
                    1d:4b:ee:ae:58:61:2e:8b:24:2f:37:78:64:59:9d:
                    15:44:16:9c:c8:c7:43:85:4f:9b:70:b6:76:c6:ce:
                    d3:5c:36:3f:7e:95:b5:54:e9:1c:14:0b:6c:02:e2:
                    0e:48:e8:17:f1:ed:55:fc:be:85:66:ac:e8:6a:95:
                    98:66:c7:1c:4a:cd:2e:a8:4c:89:49:97:27:0a:c7:
                    89:28:d3:66:7e:dc:d6:16:ba:9d:bc:22:a7:54:9a:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:10:53:88:1F:25:CB:0F:46:9D:C7:FD:FC:E8:AC:AB:75:C5:4D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0AQU4gfJcsPRp3H_fzorKt1xU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:e6:b2:80:a2:7e:31:56:34:e2:2e:b1:1b:76:59:b4:52:
         a1:e5:bd:7f:7f:3c:06:ec:85:24:1a:64:ab:a6:1a:65:38:b1:
         d5:4c:61:b8:fe:f1:1a:9b:f6:18:02:90:ea:5c:24:8c:ea:83:
         34:8f:e1:c3:bb:d5:fd:0f:0a:b6:b4:2a:2e:6a:aa:ee:95:0b:
         39:4f:12:c1:10:57:1b:82:38:27:85:e9:98:c4:e4:61:69:d7:
         a5:d8:64:47:86:88:8e:68:c2:0e:d1:35:67:dd:9f:17:3d:94:
         2b:16:b0:db:33:4f:4b:7c:a9:f2:54:51:cf:2c:e9:da:00:4b:
         07:d1:2e:24:c6:52:f4:9e:cf:10:6a:d8:88:39:e0:74:c1:98:
         c2:4c:ef:15:6b:3b:fd:c1:22:e1:d1:7b:ce:f6:c2:a4:ed:4e:
         24:f2:e0:c8:12:85:84:53:83:1b:ba:df:6b:b8:30:dd:3a:be:
         36:3d:38:d7:93:6b:03:a3:a0:12:03:a7:f3:51:70:a7:cf:7c:
         98:d7:bc:c9:b2:67:1f:9b:de:5a:c5:90:09:54:94:62:05:12:
         51:05:b0:3d:90:e3:01:c2:3e:77:a1:78:88:68:71:be:ce:c3:
         62:d4:ed:9f:58:d4:f6:cb:5d:5a:ec:f7:6f:90:0a:67:bc:3c:
         5e:f8:54:3d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMjUw
OTEwNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMzNDAxMDUzODgxRjI1
Q0IwRjQ2OURDN0ZERkNFOEFDQUI3NUM1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGZYBo/eYeRAW6cMqhlB0hWNa0gV9TrhyI64TY6pf+mHKlzZ/M
uOztj35rTNR4fcJUMlGVHs5NoLsJ5jdB7q6zwFQwlkjiNecXF+fosUgu4s3H/Nqh
C0ZxiHV2d4Cx4eH2FW/WLFnz8ae3r/cG9Olh1LrPcmpamFIIUWPCWogj2T6u9cCs
HAOIxJ4ZUQnC4e5hciqnm0/GJeLK1U756T+EeyWa0B1L7q5YYS6LJC83eGRZnRVE
FpzIx0OFT5twtnbGztNcNj9+lbVU6RwUC2wC4g5I6Bfx7VX8voVmrOhqlZhmxxxK
zS6oTIlJlycKx4ko02Z+3NYWup28IqdUmlZNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUw0AQU4gfJcsPRp3H/fzorKt1xU0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3cwQVFVNGdmSmNzUFJwM0hfZnpvckt0MXhVMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxaiYwDQYJKoZIhvcNAQELBQADggEBAEt85rKAon4xVjTiLrEbdlm0UqHl
vX9/PAbshSQaZKumGmU4sdVMYbj+8Rqb9hgCkOpcJIzqgzSP4cO71f0PCra0Ki5q
qu6VCzlPEsEQVxuCOCeF6ZjE5GFp16XYZEeGiI5owg7RNWfdnxc9lCsWsNszT0t8
qfJUUc8s6doASwfRLiTGUvSezxBq2Ig54HTBmMJM7xVrO/3BIuHRe872wqTtTiTy
4MgShYRTgxu632u4MN06vjY9ONeTawOjoBIDp/NRcKfPfJjXvMmyZx+b3lrFkAlU
lGIFElEFsD2Q4wHCPneheIhocb7Ow2LU7Z9Y1PbLXVrs92+QCme8PF74VD0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:15 2026 by rpki-client