Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V5m6qtmyrBqRtD-btv5NIyr0HUE.roa
File:                     V5m6qtmyrBqRtD-btv5NIyr0HUE.roa (raw, json)
Hash identifier:          Ed4ddY4rQe3Kp/m0Fhbgkn88jfPbIsZ4gjC9s89t+w4=
Subject key identifier:   57:99:BA:AA:D9:B2:AC:1A:91:B4:3F:9B:B6:FE:4D:23:2A:F4:1D:41
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V5m6qtmyrBqRtD-btv5NIyr0HUE.roa
Signing time:             Sun 01 Mar 2026 02:36:18 +0000
ROA not before:           Sun 01 Mar 2026 02:36:18 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4525 (0x11ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:36:18 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5799BAAAD9B2AC1A91B43F9BB6FE4D232AF41D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:ba:c0:81:20:76:b8:66:3e:01:78:40:1b:
                    fd:31:39:99:22:6c:b5:f3:89:b0:ae:df:88:cd:12:
                    44:e9:f6:d8:c9:e2:36:14:6f:56:b9:2c:4e:88:70:
                    8b:58:30:4e:ec:c6:23:a2:82:d6:9b:c1:f7:ee:07:
                    38:70:aa:8c:86:86:b6:6a:7f:48:a1:32:74:40:51:
                    30:05:0a:ea:0d:0e:9d:bf:66:f1:c7:f4:e1:d9:3d:
                    1e:c3:82:27:18:72:c7:66:6a:64:2d:39:2e:d0:69:
                    72:f5:ab:b8:e8:2f:45:ca:48:be:5b:eb:66:1e:17:
                    ac:47:61:02:ed:c0:83:9a:75:3f:6d:f1:d0:2d:70:
                    e4:db:04:11:eb:3d:6a:4d:46:91:9d:23:83:6a:8a:
                    e7:e8:d8:6c:df:af:e1:27:ff:ed:d4:43:7a:10:25:
                    09:39:86:95:7d:7e:96:8f:d4:6a:ba:fd:a6:2e:a5:
                    e8:bf:be:b8:ba:79:ef:ed:b4:2f:76:34:80:47:9c:
                    e7:f4:83:7b:f8:21:1c:df:20:85:f2:b3:5a:cf:f2:
                    e5:ed:f4:49:c2:61:65:ae:cf:75:fb:c8:bb:d2:42:
                    ec:4b:fd:eb:72:dd:63:b9:aa:19:dc:22:cc:6a:55:
                    13:a9:3c:66:23:23:98:b4:c5:b3:49:92:85:2e:11:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:BA:AA:D9:B2:AC:1A:91:B4:3F:9B:B6:FE:4D:23:2A:F4:1D:41
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V5m6qtmyrBqRtD-btv5NIyr0HUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:f8:01:ff:43:ad:f6:1f:4e:5e:8c:78:08:83:1b:8b:fa:
         86:2f:85:a6:78:2b:41:bc:c9:0c:f3:d8:64:63:c7:e0:67:f0:
         48:ec:7a:64:ed:15:ff:19:89:62:68:52:85:f1:ff:22:4c:36:
         b2:ba:63:06:ea:0b:49:f2:4a:0d:6c:fa:72:0d:ce:af:dd:a3:
         67:61:38:8a:b4:60:8d:c1:c0:32:06:3e:fa:7b:35:80:71:ae:
         a3:38:aa:9a:d3:cc:f6:bc:cf:c5:11:28:20:31:63:db:ac:35:
         4b:56:9f:91:f5:37:ca:b6:b5:13:b1:c9:59:c2:c9:71:08:c1:
         23:d7:79:69:8f:97:19:90:65:15:20:d9:95:51:55:c2:7c:7c:
         33:5d:c9:fa:d9:18:c7:f1:20:62:3a:3d:ff:c4:5c:01:95:04:
         54:6e:6a:2b:18:e3:34:45:9e:24:2b:5a:a4:57:75:21:70:a9:
         17:e4:d4:4a:a8:75:06:ca:a9:0b:1f:30:4b:99:ad:7c:ed:dd:
         01:97:d6:10:10:76:6f:b4:a9:3e:63:fa:5e:30:83:b6:6e:e9:
         8c:f6:07:94:9d:cc:54:06:69:ca:c0:fe:e7:c4:df:a8:07:8e:
         a9:1d:98:f7:a9:e7:0e:0c:e6:c8:7f:6f:92:17:15:ea:97:49:
         f0:d6:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:28 2026 by rpki-client