Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2W43ltq0U-QV-cJcmzEK8KpNBU.roa
File:                     L2W43ltq0U-QV-cJcmzEK8KpNBU.roa (raw, json)
Hash identifier:          qz3arWze6neI74xivrKMpJmyppkYG9K5wUHg7uwNnlU=
Subject key identifier:   2F:65:B8:DE:5B:6A:D1:4F:90:57:E7:09:72:6C:C4:2B:C2:A9:34:15
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1328
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2W43ltq0U-QV-cJcmzEK8KpNBU.roa
Signing time:             Sun 01 Mar 2026 03:36:20 +0000
ROA not before:           Sun 01 Mar 2026 03:36:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4904 (0x1328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:36:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2F65B8DE5B6AD14F9057E709726CC42BC2A93415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:a0:69:85:ab:8c:52:df:40:65:34:a4:9b:
                    f1:0d:13:e2:9e:41:e8:6e:7b:45:f6:08:87:21:27:
                    a6:75:29:fc:b4:e0:ba:b4:3d:76:b8:d3:60:ad:d1:
                    a9:81:da:c9:61:87:d9:83:2e:79:eb:b3:d1:f5:88:
                    e6:fb:83:87:d1:d6:6b:4b:5b:14:2d:db:51:38:50:
                    df:b6:31:44:77:31:91:53:02:cf:8b:14:e5:8d:4e:
                    a6:89:a0:af:3b:8b:cb:ba:f7:91:76:4f:45:d1:cf:
                    99:6f:73:5a:14:46:a7:41:b2:32:64:bc:b2:3d:5e:
                    ca:81:ea:c3:71:d2:67:0a:61:4e:a3:9b:cf:93:6f:
                    77:3f:43:5f:e7:57:52:59:58:8d:5b:ec:55:97:c2:
                    de:7e:ca:a5:bb:a1:8a:bf:16:e7:90:76:24:cb:8b:
                    cd:f9:ed:b6:d4:71:72:2e:77:86:b8:c9:36:e5:6a:
                    bc:28:5b:1b:05:63:28:17:ac:68:e1:04:c0:da:98:
                    2d:42:5a:7e:0e:34:70:40:9e:48:58:53:ca:d1:ad:
                    e0:31:96:74:45:05:ac:a7:86:0c:fd:35:0f:41:96:
                    9a:86:d1:27:b1:79:51:8c:f7:ed:19:89:0c:39:fd:
                    4e:da:3c:82:5e:c2:e7:5f:e9:a3:df:4b:fa:1f:cc:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:B8:DE:5B:6A:D1:4F:90:57:E7:09:72:6C:C4:2B:C2:A9:34:15
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2W43ltq0U-QV-cJcmzEK8KpNBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:36:86:1d:87:18:68:c5:d9:62:41:ad:a4:24:7d:a4:eb:11:
         44:d9:b9:c2:55:b4:4b:83:55:7b:36:64:92:2e:c0:57:23:78:
         45:75:cc:24:27:6f:ce:a3:21:52:9c:ec:bd:df:84:fe:f6:5b:
         0a:79:ad:63:b3:e0:37:f9:b4:cc:5e:bc:e9:43:77:38:89:62:
         10:fa:22:cd:b4:3d:4a:43:4b:62:1f:30:15:01:3c:66:be:66:
         97:30:a8:ee:26:17:5d:e3:49:f8:9e:d4:4f:6f:d0:f7:4a:c4:
         70:48:b9:b4:00:e2:c3:50:6f:a4:36:1f:d3:2a:2c:89:9b:56:
         65:ac:5a:38:72:17:66:0f:d5:10:d7:31:d4:d2:18:8b:9f:05:
         b6:c5:30:a3:45:f2:7f:6c:54:ca:af:65:87:6c:35:6b:af:49:
         e4:db:6c:63:8a:e2:02:7e:b1:01:fb:d8:40:58:fc:4b:37:dc:
         fe:d9:ff:9e:de:57:88:7a:d4:59:d4:55:77:3f:31:46:38:22:
         aa:56:13:7c:f6:48:1e:a8:5d:e0:ac:72:80:c9:1f:b3:d5:15:
         85:65:99:ab:60:df:6c:46:e5:ae:4f:6a:63:3e:98:34:2f:31:
         e2:c0:5a:d5:22:6d:52:88:b6:4e:62:c7:f6:aa:54:44:ab:a5:
         00:90:16:36
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzM2MjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGNjVCOERFNUI2QUQx
NEY5MDU3RTcwOTcyNkNDNDJCQzJBOTM0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOjqBphauMUt9AZTSkm/ENE+KeQehue0X2CIchJ6Z1Kfy04Lq0
PXa402Ct0amB2slhh9mDLnnrs9H1iOb7g4fR1mtLWxQt21E4UN+2MUR3MZFTAs+L
FOWNTqaJoK87i8u695F2T0XRz5lvc1oURqdBsjJkvLI9XsqB6sNx0mcKYU6jm8+T
b3c/Q1/nV1JZWI1b7FWXwt5+yqW7oYq/FueQdiTLi8357bbUcXIud4a4yTblarwo
WxsFYygXrGjhBMDamC1CWn4ONHBAnkhYU8rRreAxlnRFBaynhgz9NQ9BlpqG0Sex
eVGM9+0ZiQw5/U7aPIJewudf6aPfS/ofzGVhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUL2W43ltq0U+QV+cJcmzEK8KpNBUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0wyVzQzbHRxMFUtUVYtY0pjbXpFSzhLcE5CVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABuoxQwDQYJKoZIhvcNAQELBQADggEBANE2hh2HGGjF2WJBraQkfaTrEUTZ
ucJVtEuDVXs2ZJIuwFcjeEV1zCQnb86jIVKc7L3fhP72Wwp5rWOz4Df5tMxevOlD
dziJYhD6Is20PUpDS2IfMBUBPGa+ZpcwqO4mF13jSfie1E9v0PdKxHBIubQA4sNQ
b6Q2H9MqLImbVmWsWjhyF2YP1RDXMdTSGIufBbbFMKNF8n9sVMqvZYdsNWuvSeTb
bGOK4gJ+sQH72EBY/Es33P7Z/57eV4h61FnUVXc/MUY4IqpWE3z2SB6oXeCscoDJ
H7PVFYVlmatg32xG5a5PamM+mDQvMeLAWtUibVKItk5ix/aqVESrpQCQFjY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:16 2026 by rpki-client