Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ny3u-uqxyiY8TJHuWx8ZR00KV_4.roa
File:                     Ny3u-uqxyiY8TJHuWx8ZR00KV_4.roa (raw, json)
Hash identifier:          WfKGGB5NyNJxO3gVdRM+rJoRbfhjQYHWckcFWuqJcRk=
Subject key identifier:   37:2D:EE:FA:EA:B1:CA:26:3C:4C:91:EE:5B:1F:19:47:4D:0A:57:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1084
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ny3u-uqxyiY8TJHuWx8ZR00KV_4.roa
Signing time:             Sun 01 Mar 2026 01:39:59 +0000
ROA not before:           Sun 01 Mar 2026 01:39:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4228 (0x1084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:39:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=372DEEFAEAB1CA263C4C91EE5B1F19474D0A57FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:2d:29:a1:40:83:d8:40:a3:53:d2:8b:ce:
                    e2:7a:c1:c4:dd:d9:97:e7:f0:79:c0:a7:06:c0:8e:
                    c0:86:0e:de:c7:da:7c:cb:88:24:9c:34:71:fc:1b:
                    62:f0:47:ac:e1:f4:45:a7:59:d8:0b:be:2b:bc:a0:
                    4d:62:17:9a:38:7b:a3:02:46:ae:50:5d:63:d0:49:
                    20:fe:c6:30:12:9e:b9:5a:81:db:e7:ee:52:47:fa:
                    98:28:6f:59:63:2a:9a:08:f8:e8:76:36:a4:3b:28:
                    da:60:35:ec:28:b0:f0:1a:70:ae:5d:48:ac:c0:74:
                    fe:ba:89:4f:47:fb:5e:e1:8b:ea:68:3c:f4:6a:dd:
                    0d:dc:ae:e3:6c:5a:c9:bb:c6:7f:f9:7f:a0:d5:78:
                    a7:9b:d8:71:6a:f2:08:7d:1b:3f:8a:56:52:4c:ec:
                    8b:04:b1:32:82:4a:9d:bc:10:1e:c1:71:9d:aa:46:
                    bc:9d:5a:73:e1:b1:4c:58:9a:bb:7b:a0:42:cb:79:
                    ca:e0:4a:41:54:8a:44:a8:f0:9e:5f:fd:94:c6:6e:
                    5d:25:62:ef:7c:bc:a2:55:fd:6f:93:4c:cd:76:3d:
                    28:d0:2e:38:2a:c8:ae:2f:fa:a4:72:7e:b6:7d:4d:
                    71:e5:f9:3d:77:52:ff:90:8e:43:35:10:f8:1f:5d:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:EE:FA:EA:B1:CA:26:3C:4C:91:EE:5B:1F:19:47:4D:0A:57:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ny3u-uqxyiY8TJHuWx8ZR00KV_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:97:41:4e:1b:c7:69:c4:71:7a:dd:55:da:ed:41:a7:68:
         20:e4:29:b7:c4:9b:99:00:c0:a8:79:26:e4:ee:3a:7e:28:ed:
         bf:43:a5:c2:60:69:89:e6:bd:43:3e:13:23:c1:ed:d3:03:08:
         d3:f7:c1:8c:62:06:87:ec:30:3f:eb:43:94:17:78:70:a3:d0:
         48:ca:8f:2a:f6:25:ba:f3:3f:eb:ec:61:84:df:12:20:2a:02:
         65:4c:76:8b:77:52:a9:6e:61:43:60:79:b2:39:4a:e7:85:c4:
         44:6d:99:6e:bb:20:36:74:eb:ed:ee:38:21:51:dc:ea:21:57:
         88:56:f8:09:96:e7:25:b2:8b:03:9e:63:d9:13:9a:5f:07:c6:
         e3:2e:a1:22:a2:61:e3:11:37:38:93:1c:b0:83:38:62:1f:07:
         a4:f3:86:74:a1:f1:d3:d9:5a:23:28:db:ca:15:f0:a8:1c:40:
         16:89:70:6c:41:65:16:05:b1:19:4a:77:29:46:ba:27:f8:3b:
         ea:e0:dc:96:a1:e0:8f:b7:38:14:53:a0:c1:6d:38:57:b5:4c:
         56:10:77:b7:77:78:ef:4b:b3:a7:37:f0:5b:1e:c9:96:d2:e6:
         ab:a0:be:0b:cf:67:69:0f:57:e6:13:36:2e:9f:93:6a:2e:9f:
         54:41:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:39 2026 by rpki-client