Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0bRNTgRB2ldbYElYUTkgIzPcU8A.roa
File:                     0bRNTgRB2ldbYElYUTkgIzPcU8A.roa (raw, json)
Hash identifier:          4+jmVbqSiY7pZvRSBT3KCGL2fcw1nOcVOsmxlcVI8us=
Subject key identifier:   D1:B4:4D:4E:04:41:DA:57:5B:60:49:58:51:39:20:23:33:DC:53:C0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1222
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0bRNTgRB2ldbYElYUTkgIzPcU8A.roa
Signing time:             Sun 01 Mar 2026 02:52:21 +0000
ROA not before:           Sun 01 Mar 2026 02:52:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4642 (0x1222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:52:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D1B44D4E0441DA575B6049585139202333DC53C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:72:83:29:45:a9:20:ff:8c:89:33:5c:57:
                    13:66:25:19:2c:a2:7c:53:41:dc:e9:9c:9d:a1:5e:
                    da:82:ad:54:f1:a3:93:b1:db:a8:db:5b:51:42:01:
                    f4:57:1e:7d:87:e7:6f:34:9b:2c:89:a9:c1:44:5c:
                    44:f9:b4:69:fd:3e:5c:78:2d:19:1a:59:28:d6:d5:
                    e6:71:01:05:f5:3e:e6:a6:e2:df:59:52:9b:26:e1:
                    d7:1c:86:11:73:af:df:8e:99:a6:1d:91:40:a1:36:
                    2c:7b:4c:19:3c:46:63:eb:a7:85:da:b0:d2:48:53:
                    dc:e9:fe:c9:82:db:e0:de:ee:8a:53:ca:bd:d2:57:
                    6b:9d:fb:2d:22:a5:1b:93:7f:ab:41:77:9e:ef:48:
                    b4:f5:c9:d8:6d:ec:e3:30:3c:a4:28:97:45:f9:a0:
                    d7:ff:90:b4:2e:c4:fa:61:a4:72:89:9f:be:9b:84:
                    6e:89:6c:6f:e0:a1:de:65:d4:8b:cd:54:53:e3:6a:
                    b2:6e:7e:ed:c5:9b:b0:01:89:ed:8b:d1:24:56:01:
                    55:2b:ee:3a:44:c9:54:4f:1d:1e:89:ee:85:e4:c8:
                    eb:1f:b1:b2:b4:82:0f:64:77:2a:39:b6:80:1c:e1:
                    12:cd:c6:bf:c6:2e:81:09:64:e0:70:53:9c:aa:7e:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B4:4D:4E:04:41:DA:57:5B:60:49:58:51:39:20:23:33:DC:53:C0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0bRNTgRB2ldbYElYUTkgIzPcU8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:ed:1e:94:64:f7:85:63:f6:6b:87:48:b8:5a:0c:7f:4c:
         d7:c5:11:2b:3e:af:25:c9:45:af:97:f9:43:f4:4e:28:09:7d:
         4f:92:be:08:ab:ab:68:6a:9c:e2:4f:b9:10:29:9d:9f:5a:1d:
         1f:aa:32:c7:57:91:05:a3:3b:f1:ec:e2:0e:46:c9:cb:1f:98:
         83:b8:b0:fe:8e:6f:56:a5:56:90:53:01:37:5f:e5:6b:73:13:
         ae:fe:5d:22:cd:89:d1:15:39:90:09:f9:be:10:74:06:15:af:
         47:6e:9f:a3:da:e1:a5:81:db:2c:62:62:b3:62:d7:df:af:84:
         4f:ab:f2:b8:39:2d:f3:7f:46:6f:22:2f:ed:80:9f:7e:a1:2c:
         b7:3d:36:4e:09:8a:4d:86:60:d8:a8:13:09:60:c4:67:c2:3c:
         49:fb:84:10:1f:cb:eb:1b:95:3f:c0:62:52:6e:ed:31:ae:bb:
         87:9e:d4:78:15:b1:2e:8b:16:a4:40:f9:dc:78:6d:97:62:07:
         97:66:dd:68:9e:6a:8a:69:57:97:00:4b:89:ef:76:b1:21:09:
         01:40:21:1c:99:01:77:72:27:b3:41:74:f2:fc:96:b0:0c:36:
         cf:e2:6b:85:2e:03:b7:5b:44:08:1e:36:c2:d5:66:ec:07:41:
         c9:d1:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:15 2026 by rpki-client