Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
File:                     Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa (raw, json)
Hash identifier:          lzB9KZgDKpptSwoVkN+vfJDGXBh/zreqR4uO/MFGloM=
Subject key identifier:   66:FC:3E:5C:63:DB:A8:05:B2:35:B8:53:A7:4A:16:7E:16:F5:8B:47
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1250
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
Signing time:             Sun 01 Mar 2026 02:56:41 +0000
ROA not before:           Sun 01 Mar 2026 02:56:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.162.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4688 (0x1250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=66FC3E5C63DBA805B235B853A74A167E16F58B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:d0:da:28:c7:9c:f9:43:07:fe:9c:ab:b0:
                    19:51:0c:2d:d3:0c:ea:a2:f8:91:df:d3:f5:f3:18:
                    02:da:09:5f:73:49:2d:26:19:ea:16:91:64:14:47:
                    e0:cd:99:30:3e:6f:06:1c:39:2e:a8:ca:9f:e4:a7:
                    50:3e:eb:d2:b4:9b:c9:24:44:ab:b4:dc:61:1f:5e:
                    1e:bb:ed:24:a3:e4:42:e5:14:bd:0f:29:8e:45:84:
                    c6:5d:97:37:a2:a1:72:c3:68:29:ea:d1:3b:ac:4e:
                    e4:5e:db:78:a1:43:b8:56:d6:b7:38:14:fe:5d:b8:
                    9e:ac:71:83:09:13:7c:e9:0f:b8:d3:29:d2:94:ff:
                    ff:ab:79:59:87:1b:8a:dc:36:70:bb:0f:20:ac:4b:
                    58:2b:ee:bb:35:c7:9f:62:b8:9a:1f:f5:ef:f1:88:
                    56:2c:54:90:bb:e3:c2:55:6b:0b:db:b7:aa:09:00:
                    45:95:60:fd:5e:dc:00:bf:e3:ef:4b:de:70:6e:b0:
                    a1:75:eb:d2:64:ae:ad:7b:79:7e:b1:0c:e4:d0:b6:
                    20:6e:d0:70:ca:57:c2:21:1f:03:4d:02:44:6d:0e:
                    03:e2:49:0b:e5:18:d4:00:be:0c:9e:77:54:69:77:
                    82:8d:84:1f:3b:0d:93:79:9d:85:2b:a7:c1:09:44:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:3E:5C:63:DB:A8:05:B2:35:B8:53:A7:4A:16:7E:16:F5:8B:47
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zvw-XGPbqAWyNbhTp0oWfhb1i0c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         af:2a:20:30:dd:d4:58:b1:c9:eb:60:dd:17:d3:28:97:d5:aa:
         96:40:37:c5:58:11:5b:8a:97:54:24:aa:73:ee:81:ad:33:1a:
         35:7c:42:8d:80:c6:3c:9c:58:6e:0c:aa:a6:69:35:ed:60:b3:
         8b:08:3e:0c:58:70:02:6b:ac:b9:cf:9c:9b:fe:3c:06:85:54:
         ca:17:b8:d5:36:69:34:d6:aa:ac:ac:b4:3e:1a:84:1b:cb:bb:
         c4:74:f4:af:c6:25:ed:07:9a:43:b4:5f:4b:d3:b1:83:1f:10:
         cc:a2:ba:ef:fd:83:bc:da:77:2f:71:26:9d:74:94:4d:eb:66:
         a2:c1:05:f4:26:68:79:68:80:8e:f2:e3:76:d2:c6:49:26:8d:
         6a:37:09:c3:6e:c1:57:7a:75:fa:09:cd:dd:d2:d5:9b:e6:b3:
         bf:12:53:fe:77:e9:c6:c3:de:75:45:a8:4a:6d:02:10:3b:a0:
         b1:83:ed:40:8e:33:0d:1f:5c:7a:03:69:5d:ff:d6:80:76:a4:
         c7:55:96:ee:7f:eb:b6:ce:10:fd:08:59:7f:b3:23:60:d8:f7:
         16:34:27:f9:e8:23:b3:cd:32:c3:5d:c7:78:93:8b:99:4c:09:
         aa:17:39:e7:f3:7a:07:08:ef:e2:2d:82:50:06:97:0b:13:d1:
         5e:64:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:25 2026 by rpki-client