Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mSLYv0fkgxdVFzGdnTRf1nrBbY.roa
File:                     _mSLYv0fkgxdVFzGdnTRf1nrBbY.roa (raw, json)
Hash identifier:          1/vMjNWL0Mt4oMWlR07m2oQO+TQoexYDiNi6DpHd8zE=
Subject key identifier:   FE:64:8B:62:FD:1F:92:0C:5D:54:5C:C6:76:74:D1:7F:59:EB:05:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       131C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mSLYv0fkgxdVFzGdnTRf1nrBbY.roa
Signing time:             Sun 01 Mar 2026 03:32:38 +0000
ROA not before:           Sun 01 Mar 2026 03:32:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4892 (0x131c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:32:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FE648B62FD1F920C5D545CC67674D17F59EB05B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:29:87:aa:35:2d:50:c2:02:f6:6a:d5:ab:
                    c5:56:58:f9:b1:5c:a9:4a:fc:0f:87:e4:6e:50:40:
                    9e:c1:04:47:f2:68:14:96:61:60:8d:6c:1d:e0:c9:
                    d2:52:9c:c4:ae:63:26:f8:01:05:fc:b5:09:3c:ab:
                    85:4f:03:e8:a3:3f:59:61:48:c7:f9:5e:0f:fd:fc:
                    43:56:8e:48:21:2c:3e:58:0f:e8:c2:9b:b5:7c:91:
                    da:13:a7:e7:07:3c:fe:a2:58:5b:0f:00:2c:c1:bb:
                    49:d9:49:87:c6:36:7a:cc:f5:52:fb:50:9e:33:f4:
                    a2:35:74:e3:93:ea:c4:a8:ec:b2:ae:83:4a:b4:94:
                    2c:f9:bd:52:83:12:1c:0a:40:87:65:a5:39:71:ec:
                    17:1c:5d:92:64:d3:79:a2:0c:8f:72:52:db:2f:f8:
                    d5:a5:60:15:4b:75:61:09:03:3c:91:86:ec:9e:79:
                    c5:08:bc:f5:d4:71:c6:09:40:d5:12:02:3f:15:9e:
                    14:44:03:29:6a:c7:35:e9:c1:93:36:97:29:02:0d:
                    ff:12:0d:c1:28:91:1a:93:ae:bc:a8:ff:17:d5:34:
                    21:64:92:45:53:e5:6e:df:76:da:6f:eb:38:e9:f4:
                    37:d6:ea:60:5c:40:e2:84:d5:43:5a:0b:6c:7b:d1:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:64:8B:62:FD:1F:92:0C:5D:54:5C:C6:76:74:D1:7F:59:EB:05:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mSLYv0fkgxdVFzGdnTRf1nrBbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:4c:a5:a3:3f:11:b9:c3:77:c9:e8:2d:f8:29:1a:c4:d6:
         08:69:41:a1:29:6c:12:82:d4:a9:fc:cb:fe:1b:36:6b:12:69:
         c3:5a:00:06:66:8c:65:2b:86:34:78:9b:c6:f7:e3:c7:ce:e9:
         c1:55:f2:9d:ba:74:8b:2b:61:df:6c:b1:5c:88:76:f2:de:1a:
         d2:eb:3b:04:4a:d0:a1:85:b6:21:a2:bc:06:ed:32:8d:23:d5:
         80:f9:35:f7:20:a5:bd:40:1e:84:62:7f:a2:be:08:31:ba:ca:
         ee:2e:ad:92:43:44:52:b3:e1:22:31:49:b5:5b:a5:8f:96:f0:
         cc:08:dc:64:cc:a1:5e:2d:9e:cc:2d:aa:98:a4:c2:d5:7c:5b:
         c0:f4:08:10:ba:ab:a7:0d:74:24:bc:6d:92:a0:24:bb:85:84:
         be:17:e8:78:e1:44:98:90:cf:89:fe:c5:b3:c6:09:d5:76:6a:
         57:bd:f6:2a:90:06:4b:42:e5:b8:a1:dd:32:7a:ba:e5:38:a2:
         f5:c6:ff:1d:bd:95:3b:79:b7:1b:74:31:bc:0f:14:a6:5b:c8:
         f2:47:7a:6b:00:83:fa:21:a6:61:f7:a8:92:4d:45:3c:e4:9c:
         78:10:83:f7:23:7f:18:50:dd:97:6f:71:7e:4f:b1:10:27:d7:
         d2:fe:a8:05
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICExwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MzMyMzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZFNjQ4QjYyRkQxRjky
MEM1RDU0NUNDNjc2NzREMTdGNTlFQjA1QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhaimHqjUtUMIC9mrVq8VWWPmxXKlK/A+H5G5QQJ7BBEfyaBSW
YWCNbB3gydJSnMSuYyb4AQX8tQk8q4VPA+ijP1lhSMf5Xg/9/ENWjkghLD5YD+jC
m7V8kdoTp+cHPP6iWFsPACzBu0nZSYfGNnrM9VL7UJ4z9KI1dOOT6sSo7LKug0q0
lCz5vVKDEhwKQIdlpTlx7BccXZJk03miDI9yUtsv+NWlYBVLdWEJAzyRhuyeecUI
vPXUccYJQNUSAj8VnhREAylqxzXpwZM2lykCDf8SDcEokRqTrryo/xfVNCFkkkVT
5W7fdtpv6zjp9DfW6mBcQOKE1UNaC2x70eI1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/mSLYv0fkgxdVFzGdnTRf1nrBbYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L19tU0xZdjBma2d4ZFZGekdkblRSZjFuckJiWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJuocwwDQYJKoZIhvcNAQELBQADggEBACLoTKWjPxG5w3fJ6C34KRrE1ghp
QaEpbBKC1Kn8y/4bNmsSacNaAAZmjGUrhjR4m8b348fO6cFV8p26dIsrYd9ssVyI
dvLeGtLrOwRK0KGFtiGivAbtMo0j1YD5Nfcgpb1AHoRif6K+CDG6yu4urZJDRFKz
4SIxSbVbpY+W8MwI3GTMoV4tnswtqpikwtV8W8D0CBC6q6cNdCS8bZKgJLuFhL4X
6HjhRJiQz4n+xbPGCdV2ale99iqQBktC5bih3TJ6uuU4ovXG/x29lTt5txt0MbwP
FKZbyPJHemsAg/ohpmH3qJJNRTzknHgQg/cjfxhQ3ZdvcX5PsRAn19L+qAU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:06 2026 by rpki-client