Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
File:                     3jqm6hcF-peDoECQqJHwX0h5NaU.roa (raw, json)
Hash identifier:          hz+t6b9EOxTFIg66ZzpSbDUN2tneuZ/nIty7ZeVtZVI=
Subject key identifier:   DE:3A:A6:EA:17:05:FA:97:83:A0:40:90:A8:91:F0:5F:48:79:35:A5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1116
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
Signing time:             Sun 01 Mar 2026 02:07:27 +0000
ROA not before:           Sun 01 Mar 2026 02:07:27 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4374 (0x1116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:27 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DE3AA6EA1705FA9783A04090A891F05F487935A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a3:ee:b7:93:96:54:3a:1e:ac:26:f7:c8:eb:
                    c8:0b:92:7f:1f:f7:77:66:a7:4e:6e:e5:6e:1a:ca:
                    9b:a4:c3:ba:d3:7e:e3:05:01:71:93:66:e7:d7:03:
                    5f:31:66:bc:08:b5:e8:bd:25:06:c5:b7:11:26:83:
                    4f:5b:b4:43:07:8f:81:7a:b4:91:7f:77:25:ec:6b:
                    6f:10:2b:19:32:a0:ad:b6:68:71:12:13:80:6c:26:
                    6b:b6:e9:ae:17:b2:6f:26:16:b9:45:a9:ed:30:90:
                    04:f2:b8:31:1a:d0:b6:af:6a:86:43:a6:cc:1d:b7:
                    c5:d9:ac:76:15:51:e6:7c:bd:f5:a1:70:4b:11:01:
                    70:62:68:9b:df:4c:4f:24:a5:a9:fb:c4:3d:42:80:
                    42:50:f9:ba:d0:a3:71:2b:c5:d0:7e:11:2c:fe:09:
                    0c:61:b6:ca:e9:f0:28:9a:6e:6b:4d:e9:86:15:ed:
                    ab:51:05:fa:57:56:d6:d5:85:c7:68:d6:e2:cd:c3:
                    5f:a1:ba:dc:13:13:ca:0a:86:6b:40:64:92:88:f3:
                    ff:e5:27:c5:1d:cd:c9:c5:49:83:40:7d:04:51:aa:
                    f8:ba:00:fb:8d:87:06:02:12:a2:6b:22:00:8d:8d:
                    97:6b:13:f8:d9:50:eb:e8:1a:88:1f:58:6d:48:28:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:A6:EA:17:05:FA:97:83:A0:40:90:A8:91:F0:5F:48:79:35:A5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jqm6hcF-peDoECQqJHwX0h5NaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:c7:e4:ec:b9:14:40:8b:1b:c2:ad:49:9b:93:85:7b:da:
         55:89:43:b2:fd:5c:ff:80:fa:57:11:fa:77:5f:e3:d1:ca:4f:
         0c:5c:ca:5b:a3:ab:c1:b8:f5:ab:f5:8e:57:50:81:27:50:14:
         88:ad:8e:c7:99:62:26:ed:f5:e6:73:39:32:a1:e3:df:7e:31:
         f7:71:63:57:bb:5a:4f:da:02:3d:f1:bf:8b:bf:82:4e:ec:7e:
         b7:b7:fe:e4:1a:ec:3b:e2:50:ba:24:d0:b3:31:a9:1f:e6:f1:
         c8:04:7f:da:f2:85:f4:b6:28:d5:96:fe:94:1d:48:57:1c:8e:
         62:76:8b:73:34:3b:b2:5c:d8:f9:ae:f9:d9:b3:23:8d:8f:40:
         2b:f9:1f:c7:ae:98:86:83:09:a2:e9:43:a6:14:95:e5:5b:8f:
         8e:21:36:0a:61:cc:2a:65:4b:06:01:48:48:72:5e:e0:c3:ff:
         06:06:47:fc:b0:af:0d:fe:3f:c8:ba:c5:70:21:b2:ed:b9:08:
         11:42:90:2e:23:a3:4b:a1:ab:08:80:c9:06:78:d4:0e:f1:b5:
         21:7a:34:98:f7:80:92:4b:8f:4d:6a:7a:4b:d7:37:11:c2:d6:
         f1:d9:d0:7c:b4:05:00:31:16:5c:3f:ec:4d:39:8d:cf:85:e2:
         3d:3c:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:02 2026 by rpki-client