Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
File:                     EssII4w8vL5i93pWazaqqmACKgs.roa (raw, json)
Hash identifier:          TS7qPqXseZ0Tmq6tUmZeOU0bdJZX6def66OkuIQzHL4=
Subject key identifier:   12:CB:08:23:8C:3C:BC:BE:62:F7:7A:56:6B:36:AA:AA:60:02:2A:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
Signing time:             Sun 01 Mar 2026 02:40:42 +0000
ROA not before:           Sun 01 Mar 2026 02:40:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4569 (0x11d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:40:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=12CB08238C3CBCBE62F77A566B36AAAA60022A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:14:2e:2e:66:da:05:e1:ce:7f:ed:e5:12:
                    e0:5c:05:56:18:b4:0b:e6:c7:fc:d8:7c:45:53:91:
                    ad:bd:02:5b:3c:c9:90:51:6e:a8:42:2a:ea:e0:b6:
                    cd:74:bf:f2:e3:43:66:29:98:82:40:25:1f:ad:bd:
                    58:44:83:90:91:e7:2b:24:ab:99:e0:50:b3:71:ba:
                    8b:84:55:5e:d4:0c:ae:9a:bf:bf:3b:8f:94:75:b8:
                    79:54:9f:4d:97:08:4d:11:78:f4:97:b2:74:40:37:
                    e6:8d:94:58:ed:11:f8:95:8f:2d:97:8c:3a:4a:4b:
                    86:c3:bd:97:d0:21:fe:ef:47:e8:bc:f3:66:1d:4a:
                    f7:d4:50:73:4b:2e:93:ef:b3:37:a1:ed:77:8b:61:
                    58:b7:7a:3c:22:36:10:c9:f5:10:62:15:f0:8e:18:
                    59:5a:a5:49:43:9b:8d:4e:4f:e5:43:35:f5:57:6b:
                    86:10:f3:b4:53:91:e2:2a:db:4c:62:22:80:85:56:
                    2a:86:96:d1:30:d0:e7:12:5a:86:8f:65:f0:b8:1c:
                    f0:38:4d:0b:67:ae:2e:3b:7a:98:d5:59:2e:d5:51:
                    6a:31:b4:a1:bb:83:91:8e:99:0a:30:00:ac:96:4e:
                    5d:d6:e1:0b:65:55:60:1c:f3:fc:9b:44:31:ee:58:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CB:08:23:8C:3C:BC:BE:62:F7:7A:56:6B:36:AA:AA:60:02:2A:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EssII4w8vL5i93pWazaqqmACKgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:79:c4:d4:b7:5f:91:b4:98:1b:c5:9a:e2:28:05:a9:a9:87:
         ca:f2:b3:28:cd:36:21:3c:9f:fd:a0:77:96:e2:b0:43:71:ec:
         26:c5:c3:d6:3e:c3:6a:99:63:a6:cf:2a:b1:54:32:5a:7e:e1:
         5e:da:91:7f:a4:fd:0c:09:c5:57:d1:bc:3c:8b:ef:2c:c9:ab:
         92:44:c0:17:58:03:00:39:bd:5c:10:fa:b8:ba:7e:38:e4:a4:
         d2:05:d8:b0:97:9f:b4:0c:b8:df:19:06:70:3d:70:d1:61:6c:
         3a:84:35:38:9d:77:7c:3c:da:62:3a:ec:f2:16:34:2b:29:e1:
         49:fd:8d:e6:cc:c8:61:2c:ef:d7:e5:38:2f:90:47:7a:04:78:
         37:a7:aa:4c:2c:fe:e0:c7:4c:5f:f5:39:f6:fb:3e:b8:d5:d1:
         b1:b7:56:38:2e:bc:09:b2:61:bf:91:e1:9c:04:aa:9b:64:1b:
         1d:ae:2d:c6:76:5b:0b:e1:b5:58:02:d0:68:50:91:cb:f4:86:
         92:cd:de:92:d5:18:a8:ad:cd:43:26:df:8a:d6:4c:72:03:db:
         66:32:46:88:82:06:fb:5f:99:d9:55:c6:cc:93:59:aa:dc:09:
         08:65:69:1a:b9:ab:1b:f4:5d:91:40:ca:7f:da:54:a5:91:92:
         03:76:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:28 2026 by rpki-client