Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I0JdIJ6GeBcixxGwL2NWLdjGkYQ.roa
File:                     I0JdIJ6GeBcixxGwL2NWLdjGkYQ.roa (raw, json)
Hash identifier:          6lj+qQ4Lp5abOdC6Rh6aUwcJv4IQYqQDTosZST8kjzM=
Subject key identifier:   23:42:5D:20:9E:86:78:17:22:C7:11:B0:2F:63:56:2D:D8:C6:91:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12EF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I0JdIJ6GeBcixxGwL2NWLdjGkYQ.roa
Signing time:             Sun 01 Mar 2026 03:20:48 +0000
ROA not before:           Sun 01 Mar 2026 03:20:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4847 (0x12ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:20:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=23425D209E86781722C711B02F63562DD8C69184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:5b:29:de:22:a2:1c:25:5f:b5:75:6c:7c:
                    b9:87:46:92:e5:5c:82:e6:e8:51:ae:92:34:ae:23:
                    75:e0:4a:5d:af:de:14:0d:29:59:5c:f6:4d:d3:ac:
                    93:a8:4a:26:b7:a4:6b:4f:96:17:26:a9:fc:9d:7b:
                    98:71:93:e7:40:a8:25:54:de:1f:28:20:f9:b3:b6:
                    f1:72:91:82:c6:18:a3:2b:b1:a5:86:9b:a7:e2:3f:
                    6e:29:0e:2f:1a:5f:84:79:a7:9a:ba:59:a5:d9:b9:
                    0a:40:51:5f:fc:1d:7a:e5:16:d6:e0:3c:d7:52:c3:
                    6d:54:39:6c:fa:f0:89:a9:76:91:12:71:46:3a:9f:
                    8e:e6:f3:fe:80:df:33:c1:d9:43:36:98:1e:1f:82:
                    b4:57:4e:8d:3e:43:2a:f7:86:99:23:41:7c:49:74:
                    74:85:3e:82:f0:11:a9:53:26:e8:39:00:82:21:b7:
                    57:45:03:6f:ef:fb:08:94:e7:c9:6f:f1:d7:a5:2d:
                    06:30:62:35:e0:91:66:31:fc:6f:07:3a:61:8f:a9:
                    f9:0e:b6:01:5f:67:3c:f9:8a:23:f6:5a:f6:52:a5:
                    58:d9:d7:10:25:6e:62:2f:f8:00:b1:6b:71:ee:63:
                    ac:79:f4:35:b3:24:90:2b:05:af:19:93:1e:88:f3:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:42:5D:20:9E:86:78:17:22:C7:11:B0:2F:63:56:2D:D8:C6:91:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I0JdIJ6GeBcixxGwL2NWLdjGkYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:b9:05:e7:9d:f1:ff:7b:a5:d6:a9:33:15:c1:a3:9b:e8:
         8b:d9:93:01:b7:d7:49:7c:f0:8f:01:c7:4f:3b:3f:df:48:54:
         c7:6b:a6:35:87:ea:25:b4:c2:3d:f6:04:89:d1:83:0a:34:7b:
         8d:b3:02:8d:55:04:b1:4a:99:a7:d1:c1:a3:1a:09:55:5f:2c:
         51:0e:aa:09:6e:52:ca:74:3a:0b:e9:87:34:2f:10:61:ee:ea:
         6f:64:10:a1:81:fe:64:c8:b9:cd:6f:b5:50:1c:fe:b8:cc:de:
         50:9a:3f:9a:f9:10:1e:ae:f0:78:19:10:7d:4f:c3:e3:52:94:
         03:bf:ae:b7:c8:0b:be:e2:d0:1f:7a:b4:d3:79:43:45:e6:cc:
         b9:fe:a1:11:ed:5e:78:07:2c:f7:7c:ed:d6:00:aa:d4:5f:1e:
         24:62:31:3c:c9:f5:bc:93:a4:7b:7f:3e:85:ec:23:30:06:4f:
         b1:9d:53:74:e8:8c:68:30:8b:f5:ed:4c:a4:cc:cd:31:63:8e:
         cb:b4:b1:d1:e8:0c:10:83:1c:49:38:cd:7f:3c:20:06:9e:4a:
         00:e8:85:a7:57:10:50:63:48:d6:6d:e3:2a:c0:cc:93:86:6f:
         ff:06:8d:16:35:10:64:aa:9a:93:e8:05:46:cd:be:49:63:9c:
         97:ea:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:19:00 2026 by rpki-client