Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
File:                     ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa (raw, json)
Hash identifier:          GrRpiTqH3vpLcr1oJJceYIWI9qCJf945sya1mKNF+VU=
Subject key identifier:   66:28:48:D7:07:AC:4A:B1:D3:B5:66:45:C0:BC:CD:49:6D:59:0F:06
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       11A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
Signing time:             Sun 01 Mar 2026 02:31:19 +0000
ROA not before:           Sun 01 Mar 2026 02:31:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:31:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=662848D707AC4AB1D3B56645C0BCCD496D590F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:08:f5:d1:ee:9d:2f:a5:bd:5c:e8:3a:d8:
                    26:24:1d:39:34:11:e3:35:d4:fe:67:4e:59:8e:f4:
                    d2:9f:50:1f:d3:b3:9c:d4:02:e6:bb:98:3d:72:a7:
                    81:34:7f:f7:69:21:f1:2c:55:37:30:31:7a:cb:61:
                    d0:68:ad:6a:72:b6:93:bd:db:15:31:6a:6b:a6:07:
                    3d:33:e4:6e:73:65:51:56:39:98:10:33:2a:9e:e4:
                    7f:5a:92:a6:e4:00:88:19:36:c7:12:87:e9:df:36:
                    6f:81:f2:ae:6c:60:2a:6f:2b:a7:15:24:3f:75:fd:
                    aa:8d:36:0c:25:13:dd:d4:18:21:a5:b8:82:2d:12:
                    dc:61:70:8a:99:6e:a9:30:60:5d:99:b9:cc:d4:b0:
                    2b:fa:ff:ae:14:95:84:2a:d0:70:31:aa:94:85:fa:
                    c6:9b:ee:67:a9:92:ef:d8:ac:05:ea:08:a0:17:d5:
                    16:35:f8:af:09:68:bc:9f:f2:77:1f:a9:f3:e0:3c:
                    f3:13:b2:a1:67:16:22:7c:e6:ca:d7:55:8f:48:5c:
                    bc:6b:da:35:7f:09:d1:61:2e:da:d0:71:b0:df:d2:
                    c8:36:df:4f:38:dc:7a:c4:11:d3:59:e8:11:44:b9:
                    9e:88:35:98:e1:d9:cc:4c:f4:0b:02:e3:57:72:2b:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:48:D7:07:AC:4A:B1:D3:B5:66:45:C0:BC:CD:49:6D:59:0F:06
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZihI1wesSrHTtWZFwLzNSW1ZDwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e6:f8:d5:25:cc:60:e6:ce:20:b9:fd:af:c4:6d:74:e1:d9:97:
         8a:ee:02:73:f2:1f:74:0c:81:ff:fb:e8:59:79:35:d2:36:ab:
         91:40:61:15:33:76:0e:73:51:28:6c:08:65:c0:a5:64:d5:70:
         af:6c:56:0a:98:9c:c3:d8:eb:3f:0c:17:c6:5c:22:b1:77:6d:
         30:97:1d:ff:9e:b5:be:33:6e:d5:04:a4:b5:95:91:d5:f1:05:
         6d:4d:40:d4:73:89:d1:c1:73:b2:a0:30:af:a2:f3:aa:38:16:
         24:84:c6:cd:2e:bc:3f:32:9e:09:5b:0f:b4:a3:37:b4:8e:bb:
         ed:56:da:e1:0e:14:d4:0e:dc:8d:17:ae:95:64:37:cb:1c:75:
         93:df:c7:4f:7a:71:39:34:15:d5:46:7c:dd:de:65:e9:b8:aa:
         6e:d0:5a:87:51:dd:f8:d2:a1:67:c4:7a:bd:7c:88:9c:42:c0:
         cd:60:4d:02:87:a2:b1:e0:e4:aa:36:f7:42:5c:46:92:d6:15:
         2d:cf:f7:ff:27:8f:12:40:7e:fc:db:5e:f2:85:e6:57:d5:68:
         87:43:85:8d:25:b3:46:5b:e7:dc:ab:85:12:87:1f:aa:7c:ff:
         37:76:b6:5e:3b:20:e4:9e:b4:5a:2e:e1:1b:31:0d:36:d7:f0:
         d0:8f:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:35 2026 by rpki-client