Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/91xoJWTIHWr-f38tUOmrpdHoN-w.roa
File:                     91xoJWTIHWr-f38tUOmrpdHoN-w.roa (raw, json)
Hash identifier:          ONeM4LvmQOSwfZfGkrgTCEvb9k2iK3CvmdUfG9YUDvk=
Subject key identifier:   F7:5C:68:25:64:C8:1D:6A:FE:7F:7F:2D:50:E9:AB:A5:D1:E8:37:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       109A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/91xoJWTIHWr-f38tUOmrpdHoN-w.roa
Signing time:             Sun 01 Mar 2026 01:44:45 +0000
ROA not before:           Sun 01 Mar 2026 01:44:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4250 (0x109a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F75C682564C81D6AFE7F7F2D50E9ABA5D1E837EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:59:d2:1d:b6:08:f5:7e:29:92:98:70:d4:
                    70:5b:1e:c4:58:a3:f4:58:e8:24:96:9f:ff:d4:7a:
                    75:77:42:fc:73:f0:9f:02:de:c1:5d:55:2e:e7:08:
                    33:06:d0:98:b4:86:47:2c:8f:b1:8e:9c:c0:ad:3c:
                    98:ce:99:cc:dc:70:46:5c:64:ee:e2:a4:50:dd:5a:
                    88:af:55:4b:da:7a:3d:c4:6e:83:36:32:02:ce:4b:
                    3b:03:4b:5d:5b:fc:84:35:e3:d1:f4:ab:d7:02:3a:
                    ea:e9:19:0f:91:f4:a6:b2:15:2f:92:80:31:e9:c6:
                    22:8d:db:e5:97:f6:b9:f5:12:9a:ee:07:6f:00:58:
                    ba:c4:36:62:2d:93:60:b1:af:90:97:8b:28:71:72:
                    a6:8e:bf:9e:69:14:d2:c7:8f:18:12:ea:03:e6:0e:
                    59:cd:91:49:06:18:b6:55:fe:63:fc:30:00:c1:4e:
                    4e:0f:c7:49:fe:ea:4a:b5:7a:a2:bd:7c:d9:71:1c:
                    f3:bc:a9:67:92:ae:9c:83:e7:d0:60:1b:76:1c:0c:
                    78:1f:d3:a1:09:40:91:b0:58:b8:c3:fd:b9:56:8c:
                    6a:ec:a0:0c:d8:3f:8d:80:65:d9:d2:46:dc:8b:5a:
                    c0:87:ab:26:f6:da:3e:10:88:6c:d6:0a:07:1a:92:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:68:25:64:C8:1D:6A:FE:7F:7F:2D:50:E9:AB:A5:D1:E8:37:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/91xoJWTIHWr-f38tUOmrpdHoN-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:46:58:e1:5a:c3:e9:65:6d:3b:a4:c7:2f:6b:61:15:be:
         56:09:3a:40:3a:7a:4f:e9:90:c5:b6:a1:39:73:ba:60:55:71:
         b3:3b:4f:e7:46:46:ef:d0:62:ab:4e:b6:c4:fa:23:f7:1f:5f:
         8e:8c:58:c1:de:7d:78:3f:8b:58:f0:fb:25:68:f3:c6:f5:a6:
         62:c0:04:74:b9:39:84:a9:f6:b6:b5:ce:87:be:5f:51:dd:5e:
         66:8c:7b:43:31:2c:79:79:47:2b:92:8b:8c:70:d8:b1:36:e9:
         ae:0d:af:c6:cc:58:53:d8:2f:81:38:8c:18:88:e2:d2:d8:50:
         87:d1:c5:3a:89:5c:d9:f5:18:f1:fa:b6:1c:a8:5f:d9:a1:4d:
         c3:e0:a6:38:d0:54:9d:90:27:a6:c6:91:4d:fe:ef:cd:07:2d:
         ee:d2:28:5d:95:f8:29:e3:63:13:93:b4:26:f2:ec:21:39:b7:
         06:a6:92:b4:ff:5e:6f:8a:51:5a:ea:6a:b0:1b:22:30:2d:cb:
         8c:e0:4b:dd:a4:bf:48:2e:77:3f:cb:fa:5e:38:ae:4f:25:a1:
         ef:6a:c3:c3:34:d1:97:2f:a9:b1:77:54:9b:39:3a:34:79:5a:
         8f:ad:4c:52:87:d9:ce:a4:63:a9:66:3b:6b:b3:d2:2e:cc:dd:
         f8:32:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:37 2026 by rpki-client