Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShuRtECZaqJy03JywK6aV7MvPA0.roa
File:                     ShuRtECZaqJy03JywK6aV7MvPA0.roa (raw, json)
Hash identifier:          3SAlBqBB3V2L5HasoGLACKm9cBRFrxtU3l1CiapUlXk=
Subject key identifier:   4A:1B:91:B4:40:99:6A:A2:72:D3:72:72:C0:AE:9A:57:B3:2F:3C:0D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       10FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShuRtECZaqJy03JywK6aV7MvPA0.roa
Signing time:             Sun 01 Mar 2026 02:02:50 +0000
ROA not before:           Sun 01 Mar 2026 02:02:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4346 (0x10fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:02:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4A1B91B440996AA272D37272C0AE9A57B32F3C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:03:b6:c3:d5:72:18:ca:cf:b8:32:e1:60:
                    10:5e:45:f9:98:70:be:1f:24:50:2d:e6:39:e4:ee:
                    12:ef:ad:3c:5e:8b:2e:ab:37:d0:f9:91:e2:32:94:
                    90:c0:72:1f:58:46:c1:95:03:89:37:86:70:74:f5:
                    3f:80:7e:c8:e0:60:f3:4e:00:56:d2:5b:8f:42:c5:
                    64:8b:b0:6a:af:ff:c8:52:3e:24:2e:a1:db:37:57:
                    9d:d3:15:97:46:18:62:21:05:f3:bc:20:98:16:e0:
                    94:22:83:89:3e:e7:0a:f8:13:5c:fc:de:67:7b:cc:
                    d6:60:9e:ee:0e:54:22:d2:55:26:50:72:c4:0b:37:
                    06:a9:d2:75:d5:0f:5b:44:6a:e9:08:fc:1f:33:f0:
                    6f:25:ab:19:b6:86:26:51:fb:7a:47:ac:b9:60:40:
                    bf:7f:ed:1d:16:d1:b3:18:6f:5c:5d:a5:16:ca:11:
                    ba:10:5c:40:65:70:36:79:28:a8:7a:26:ae:d8:33:
                    2e:23:b9:7f:b2:16:00:cb:de:82:41:db:ba:41:5c:
                    53:7c:83:bb:04:53:9f:83:af:9e:90:0e:d7:b1:a6:
                    f0:fd:36:14:35:98:91:08:ad:c4:67:29:dd:a3:59:
                    bb:d1:51:76:4e:46:69:c3:9a:4a:0e:12:42:70:a4:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1B:91:B4:40:99:6A:A2:72:D3:72:72:C0:AE:9A:57:B3:2F:3C:0D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShuRtECZaqJy03JywK6aV7MvPA0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:27:2a:46:f2:19:11:65:cc:c8:a0:f7:b0:cf:76:8d:08:
         65:d5:04:04:29:9a:73:79:d2:f2:d7:a2:e1:ec:70:55:f5:b0:
         8b:0b:2b:b9:c9:d7:e2:ea:85:e6:f3:cf:36:29:f8:f0:3e:ee:
         21:00:de:e7:b4:ad:fb:f1:fd:c6:27:70:07:7b:e8:56:d9:15:
         97:eb:38:4c:01:95:e4:e6:78:23:5c:4f:e9:20:d5:10:7d:f3:
         2f:0f:08:68:2a:db:ba:fe:d7:f0:c0:2a:c4:24:47:f4:fe:db:
         7d:6b:fe:06:ff:1f:8b:1e:6d:a5:31:47:0c:6b:09:7d:2b:df:
         34:d0:dd:70:fb:57:57:2a:85:5e:5c:3f:7a:46:a9:98:18:23:
         ea:0d:7a:f9:2a:ac:ff:7f:57:b0:0c:69:50:5f:6d:57:44:03:
         d3:5a:8b:2c:30:24:ce:a7:d8:c4:c9:d4:99:7b:98:3c:66:ad:
         3b:5d:5b:3e:07:eb:1a:7e:fe:e3:40:62:49:88:5e:a4:ce:2b:
         47:df:f3:c8:74:24:19:90:09:26:af:dd:ec:a2:59:30:f8:0c:
         3a:c8:8b:32:7d:bb:59:cf:44:27:c0:47:e7:ad:29:65:8b:2b:
         64:65:86:40:10:e6:07:12:9b:60:06:eb:67:b5:84:32:36:f6:
         f5:f4:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:07 2026 by rpki-client