Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/B5hgwaPvM6Z8m1j9GbKOrnZ45pg.roa
File:                     B5hgwaPvM6Z8m1j9GbKOrnZ45pg.roa (raw, json)
Hash identifier:          1y3+BeoRRy1rgHnPpBlZJSL0pG0ESE/6cuFXH5IMif0=
Subject key identifier:   07:98:60:C1:A3:EF:33:A6:7C:9B:58:FD:19:B2:8E:AE:76:78:E6:98
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B5hgwaPvM6Z8m1j9GbKOrnZ45pg.roa
Signing time:             Sun 01 Mar 2026 02:40:34 +0000
ROA not before:           Sun 01 Mar 2026 02:40:34 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4557 (0x11cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:40:34 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=079860C1A3EF33A67C9B58FD19B28EAE7678E698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:f0:24:4c:d1:fe:6a:11:d4:ba:6a:4c:bf:
                    57:c6:66:8c:47:c2:9d:91:cb:f6:ad:a8:a4:33:89:
                    c4:df:6b:27:2f:79:69:98:3f:56:a0:0c:5c:31:12:
                    59:64:7f:a1:36:d8:55:85:ee:19:43:bf:98:43:a2:
                    28:31:cd:48:4b:57:df:c4:ea:30:76:d8:61:ca:17:
                    c2:68:af:b7:52:2f:2b:4e:d3:ce:e2:2b:a9:6c:79:
                    92:60:aa:5a:89:a4:9d:76:55:26:93:05:a3:99:9c:
                    6b:84:66:f3:55:36:65:84:ec:09:2a:a1:8a:fe:15:
                    f4:a0:e7:62:66:6a:75:90:77:8c:91:75:11:3a:02:
                    bf:71:0c:b9:08:b9:71:11:80:e5:8e:30:7b:ae:7c:
                    8a:12:32:a0:81:81:a6:5f:f7:2d:cb:83:81:50:2a:
                    b6:0c:91:52:58:56:92:db:19:16:46:f9:26:4b:dd:
                    76:29:ce:68:01:10:17:63:5f:f5:ed:c6:55:bb:bc:
                    9e:b7:e9:52:3d:06:1e:36:6c:94:96:38:28:5a:0a:
                    76:bb:eb:4e:06:8a:ab:f2:fe:07:8e:11:4e:5c:82:
                    6b:5d:19:68:72:77:ce:65:53:6f:80:ed:bf:58:20:
                    7e:5e:d7:80:4a:13:75:d0:45:37:23:9c:47:ea:71:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:98:60:C1:A3:EF:33:A6:7C:9B:58:FD:19:B2:8E:AE:76:78:E6:98
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B5hgwaPvM6Z8m1j9GbKOrnZ45pg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:3a:68:45:59:a9:c8:fb:1e:cc:71:37:30:76:ba:49:d8:fd:
         42:b4:11:17:bc:81:b5:82:be:b5:43:90:c5:f6:99:18:a5:c7:
         6f:58:77:35:9f:67:a1:e8:fd:ef:ab:37:10:8c:0b:85:18:b8:
         3f:d8:70:d5:70:e6:ef:23:f0:15:54:25:42:b1:eb:5b:57:d6:
         05:9c:9a:9f:fe:e3:34:ac:28:b0:c4:27:f1:d8:71:8a:8e:53:
         50:e2:6e:57:f9:c8:55:31:30:a7:27:c0:23:db:72:57:b3:a2:
         50:32:84:a5:b3:29:b0:ae:73:be:9a:a3:1b:0d:9a:c6:5c:72:
         14:cd:9c:16:e1:07:bb:40:80:99:b7:cb:92:72:91:03:50:e3:
         eb:30:11:9d:96:2b:3c:70:47:f4:0a:e2:13:50:fb:fa:26:33:
         d3:33:70:e7:ae:64:bb:2c:ea:a1:5d:64:f6:3f:5d:73:18:5d:
         eb:9d:ef:92:8e:c2:2b:77:ae:47:aa:37:83:17:6c:ff:e5:1b:
         19:f7:7a:37:56:49:6b:53:ad:67:21:0a:6c:14:37:45:49:27:
         d7:b1:1d:c0:1c:73:14:53:79:c9:27:c0:9c:f3:74:32:a1:52:
         58:1c:cc:a9:9f:68:e2:57:11:61:bb:11:18:c4:0d:1a:af:96:
         66:3e:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:33 2026 by rpki-client