Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rPAghCdt1IjuMkiMa5HZYqs5ig.roa
File:                     3rPAghCdt1IjuMkiMa5HZYqs5ig.roa (raw, json)
Hash identifier:          ytGTrxtr2dBgBwnP8QdT/I3zn3beruxhDf9zTPBE3GM=
Subject key identifier:   DE:B3:C0:82:10:9D:B7:52:23:B8:C9:22:31:AE:47:65:8A:AC:E6:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rPAghCdt1IjuMkiMa5HZYqs5ig.roa
Signing time:             Sun 01 Mar 2026 03:16:25 +0000
ROA not before:           Sun 01 Mar 2026 03:16:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4811 (0x12cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:16:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DEB3C082109DB75223B8C92231AE47658AACE628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:ae:b3:39:6f:6b:48:83:c4:e8:d8:34:10:
                    c2:8b:98:a5:1f:76:a0:0e:7d:a7:45:d6:88:2c:84:
                    0a:f8:3c:03:6a:6f:78:21:79:5f:c3:e9:ab:4b:10:
                    cd:57:2d:1e:e5:09:66:b7:29:2a:8d:e5:89:e3:f6:
                    ba:66:87:ef:aa:0a:f7:53:8c:8d:22:82:f5:4c:b9:
                    1d:cb:b2:d1:55:0e:6c:8e:ec:cf:be:78:e7:13:8a:
                    32:cf:c8:b0:2f:34:70:a8:77:a8:2a:5d:54:a2:51:
                    ab:63:ce:4d:ee:08:24:a8:90:ff:51:ba:35:15:68:
                    12:86:91:57:c3:21:89:e4:73:da:e6:f5:22:c6:cb:
                    e8:34:fb:5c:ba:ad:fe:b6:bf:68:79:09:45:87:11:
                    bd:d1:88:f2:0c:1d:02:8e:81:1d:e5:59:b6:2a:22:
                    3d:78:77:ca:8b:53:8b:e7:57:c5:8d:0a:3f:49:29:
                    fd:65:99:68:22:fc:d1:86:17:81:66:69:a0:2d:1f:
                    8e:1d:59:8f:0a:0c:a2:e7:3d:3e:21:bd:45:6e:80:
                    77:83:ea:e4:35:88:b2:58:67:a3:3e:14:b2:01:19:
                    9f:88:05:24:34:e7:8e:a1:3b:04:1c:9a:07:0c:fb:
                    37:4e:47:0d:77:29:d2:3f:50:3b:4b:99:5d:49:66:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:C0:82:10:9D:B7:52:23:B8:C9:22:31:AE:47:65:8A:AC:E6:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3rPAghCdt1IjuMkiMa5HZYqs5ig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:14:00:1c:6b:31:11:9f:af:4f:74:b8:a8:db:78:e5:5b:
         8b:88:73:48:37:7c:21:0a:cc:bb:b7:22:b5:1d:63:cf:39:f6:
         cd:ad:2f:a8:c8:d1:2d:4d:f3:90:20:8d:30:c0:49:27:e2:c6:
         29:0a:53:98:85:52:b0:ee:9d:35:c9:d2:a6:ce:27:8f:06:4d:
         95:b4:fb:46:60:8a:b2:a7:9f:50:69:ab:2e:88:e6:b7:02:22:
         21:e3:17:49:a0:81:9f:3c:00:6d:61:20:29:9b:d1:73:56:4f:
         c4:dc:c6:e1:c7:d4:0c:fa:6f:1c:68:20:87:bd:27:04:f6:d6:
         9c:aa:d0:9c:3a:29:4e:3e:64:f2:b7:f1:64:a8:c9:07:33:f5:
         44:d8:62:26:65:7e:4f:82:b9:51:20:02:f8:a3:98:ae:52:37:
         d9:9d:64:f9:3b:66:8d:8c:ea:a6:ba:cc:fa:80:73:a4:b0:62:
         50:b9:73:3f:e2:f4:c7:bc:f9:ca:53:b2:a2:b7:d8:cf:5f:8e:
         31:7d:47:48:41:f8:fa:da:fa:76:f9:61:0d:71:be:52:eb:cd:
         e0:b6:9e:16:b0:55:0e:93:7a:95:b4:98:43:64:46:ed:1e:31:
         99:bb:fb:08:32:0f:a6:0a:15:f6:0b:e3:6f:05:41:e0:22:6a:
         ee:76:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:03 2026 by rpki-client