Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
File:                     NzImiSBFgHu1n4vFnQXLh5DJPUc.roa (raw, json)
Hash identifier:          omA1iiwh6n3OMH+Y9+9b+sBoBSt57E7b4TUbWFgTrG0=
Subject key identifier:   37:32:26:89:20:45:80:7B:B5:9F:8B:C5:9D:05:CB:87:90:C9:3D:47
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
Signing time:             Sun 01 Mar 2026 01:58:47 +0000
ROA not before:           Sun 01 Mar 2026 01:58:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4339 (0x10f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:58:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=373226892045807BB59F8BC59D05CB8790C93D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:e8:30:93:12:b7:3e:e5:20:ee:fb:30:cc:
                    89:c9:18:f2:c9:5b:cd:46:5d:9a:a6:e8:9f:94:b4:
                    d2:09:28:cd:79:59:ad:27:48:5c:f8:61:9b:04:4b:
                    74:f7:b2:08:50:b3:16:89:f5:8a:69:67:99:f0:9e:
                    60:8e:ba:0a:df:d7:e0:f8:7e:36:77:a4:e5:4a:df:
                    ed:45:7b:9b:7d:30:59:00:4f:ef:fa:ba:19:1c:e1:
                    70:b9:5f:1c:ec:25:15:34:cb:4d:26:3a:fc:0c:58:
                    cd:c4:f2:29:03:f0:28:cc:99:ae:32:ea:4c:0a:bd:
                    ce:17:93:e3:a4:43:01:bc:4c:74:0b:c0:32:41:26:
                    85:0a:d6:b2:e1:34:e8:0e:da:b9:66:78:67:71:ac:
                    f4:4c:f6:0b:c0:34:a8:6a:0e:ea:53:d9:29:7e:77:
                    31:06:45:3d:60:c1:4e:17:d5:77:cc:6c:6b:cc:a9:
                    44:b2:52:de:18:27:b2:6e:86:3e:a9:16:1b:ee:b9:
                    e1:ea:cb:f3:63:93:0a:d4:06:7d:fe:d1:09:9f:a0:
                    80:71:96:67:42:6a:c7:80:6d:52:d8:af:65:e1:a6:
                    9f:f6:c0:a2:6f:6e:c3:ce:c0:5e:a6:db:7c:9c:4d:
                    e3:e4:4d:9e:b1:c9:9a:a0:53:30:54:2e:e1:cc:ea:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:32:26:89:20:45:80:7B:B5:9F:8B:C5:9D:05:CB:87:90:C9:3D:47
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NzImiSBFgHu1n4vFnQXLh5DJPUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:8c:6e:cd:d2:8b:90:b5:d9:4f:ea:bb:e0:1c:1d:e0:e2:
         82:31:02:a8:ec:43:85:08:14:43:12:2a:b4:a7:c3:f9:59:41:
         6c:44:ed:8f:ac:d0:24:7a:70:fe:18:35:34:1c:c8:1c:9b:70:
         23:91:60:d0:63:98:18:2f:22:61:fd:25:a1:54:f6:b1:6f:aa:
         e6:4b:b5:75:a3:4a:63:40:f1:f9:f9:92:c0:08:8f:fd:21:f1:
         0c:3e:83:bc:fb:cd:9a:ab:41:bb:65:ac:60:84:03:aa:de:31:
         1b:fd:0d:3e:9d:7c:c8:2d:27:6f:99:05:2a:3f:5e:d9:ed:22:
         da:7b:92:d4:39:b3:76:c6:d3:6b:96:57:b8:a2:0d:39:87:ed:
         b0:15:1d:06:1d:04:98:ae:e8:47:ea:b1:68:43:c1:fa:16:1c:
         45:a7:8f:3c:61:96:1c:57:60:2d:9b:60:0a:9f:f5:6f:3c:54:
         81:11:5c:99:c6:e2:3a:e0:cd:43:d7:9a:dd:42:96:04:74:51:
         83:28:8d:c7:4b:9e:51:5a:46:77:50:4a:34:d1:21:8e:91:da:
         ba:e7:2f:df:2f:19:90:01:34:d3:2d:da:f9:a5:c3:f8:ac:03:
         68:ea:78:00:20:be:a4:bb:22:10:14:0c:a0:37:c8:a2:9e:2c:
         7c:0e:2b:58
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTU4NDdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3MzIyNjg5MjA0NTgw
N0JCNTlGOEJDNTlEMDVDQjg3OTBDOTNENDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfIugwkxK3PuUg7vswzInJGPLJW81GXZqm6J+UtNIJKM15Wa0n
SFz4YZsES3T3sghQsxaJ9YppZ5nwnmCOugrf1+D4fjZ3pOVK3+1Fe5t9MFkAT+/6
uhkc4XC5XxzsJRU0y00mOvwMWM3E8ikD8CjMma4y6kwKvc4Xk+OkQwG8THQLwDJB
JoUK1rLhNOgO2rlmeGdxrPRM9gvANKhqDupT2Sl+dzEGRT1gwU4X1XfMbGvMqUSy
Ut4YJ7Juhj6pFhvuueHqy/NjkwrUBn3+0QmfoIBxlmdCaseAbVLYr2Xhpp/2wKJv
bsPOwF6m23ycTePkTZ6xyZqgUzBULuHM6uphAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNzImiSBFgHu1n4vFnQXLh5DJPUcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L056SW1pU0JGZ0h1MW40dkZuUVhMaDVESlBVYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAduoQAwDQYJKoZIhvcNAQELBQADggEBADWtjG7N0ouQtdlP6rvgHB3g4oIx
AqjsQ4UIFEMSKrSnw/lZQWxE7Y+s0CR6cP4YNTQcyBybcCORYNBjmBgvImH9JaFU
9rFvquZLtXWjSmNA8fn5ksAIj/0h8Qw+g7z7zZqrQbtlrGCEA6reMRv9DT6dfMgt
J2+ZBSo/XtntItp7ktQ5s3bG02uWV7iiDTmH7bAVHQYdBJiu6EfqsWhDwfoWHEWn
jzxhlhxXYC2bYAqf9W88VIERXJnG4jrgzUPXmt1ClgR0UYMojcdLnlFaRndQSjTR
IY6R2rrnL98vGZABNNMt2vmlw/isA2jqeAAgvqS7IhAUDKA3yKKeLHwOK1g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:15 2026 by rpki-client