Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwbY4WpbN1dUqrn7kNfR-7Zx-Jo.roa
File:                     bwbY4WpbN1dUqrn7kNfR-7Zx-Jo.roa (raw, json)
Hash identifier:          3EY42oRKtbZpZ8yeNrK4BxeeFCtgJ+MtnpZrHV4o9pU=
Subject key identifier:   6F:06:D8:E1:6A:5B:37:57:54:AA:B9:FB:90:D7:D1:FB:B6:71:F8:9A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1123
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwbY4WpbN1dUqrn7kNfR-7Zx-Jo.roa
Signing time:             Sun 01 Mar 2026 02:07:35 +0000
ROA not before:           Sun 01 Mar 2026 02:07:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4387 (0x1123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:07:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6F06D8E16A5B375754AAB9FB90D7D1FBB671F89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:a6:a6:44:9a:1c:a4:1f:5c:f1:97:4b:31:
                    2f:ea:5d:87:4d:b2:fb:f7:29:81:2e:4b:66:9b:7f:
                    5f:37:10:ea:56:31:b2:a6:4c:17:43:06:8e:0d:60:
                    8f:40:28:1a:03:f3:33:b5:17:67:f6:c0:bb:98:69:
                    63:f2:4a:d2:71:f7:ed:62:fb:5e:44:ef:dd:71:c5:
                    21:91:91:90:4d:df:a9:2d:88:89:a9:4f:a4:6a:a5:
                    2f:7d:45:20:2d:8b:cc:43:48:21:11:d2:73:6f:10:
                    b4:48:31:80:b9:52:75:72:ee:d2:62:cd:4a:fb:95:
                    9f:8d:fa:5a:d0:8c:51:d5:34:6d:c4:90:9a:d6:99:
                    57:7f:05:12:fe:73:8a:64:ba:fd:6f:19:fb:5a:47:
                    56:b3:a5:f9:e1:f0:8e:1f:7c:76:a3:e9:8d:6c:de:
                    aa:17:e5:a5:34:0a:ba:77:7e:ae:d5:36:25:54:7a:
                    67:30:5d:66:37:dd:3a:02:61:4f:37:0b:18:5f:d1:
                    dc:31:f4:09:1a:76:50:69:bc:57:6f:2c:68:0e:d5:
                    c2:20:c4:3b:9f:69:d3:17:07:17:ee:09:7f:f5:ef:
                    6a:fb:99:aa:3e:0a:f0:0a:c3:12:18:33:57:be:b0:
                    50:2f:13:82:5d:c3:39:1c:0b:d6:87:35:c9:80:1d:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:06:D8:E1:6A:5B:37:57:54:AA:B9:FB:90:D7:D1:FB:B6:71:F8:9A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bwbY4WpbN1dUqrn7kNfR-7Zx-Jo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:73:9f:e4:0f:e0:6d:33:47:cc:10:23:45:7c:16:66:c2:
         32:da:7d:80:a4:5e:bc:2c:70:bc:5c:2c:7a:dd:74:f1:7a:a9:
         e1:46:0d:0e:b9:a3:b2:a2:a9:fc:5f:3a:da:82:8c:2a:06:b0:
         57:a8:7c:91:e2:1c:54:8c:31:97:ee:de:23:fc:9b:2f:1d:ab:
         6e:d5:7f:55:9a:47:0e:5e:31:63:f6:57:b0:57:ee:6c:b6:c5:
         a1:6d:25:f1:4e:ae:af:21:13:f2:ac:88:f2:f1:c2:6d:db:0e:
         52:de:7c:1c:e2:38:1d:c7:17:84:a1:e7:cf:6e:83:0e:6f:11:
         bd:7c:88:1e:43:9d:08:7a:4d:a8:69:37:83:c6:01:57:db:b2:
         29:a6:8d:d5:48:da:93:f9:b8:da:56:ac:38:09:c8:a7:da:17:
         23:61:e7:21:ed:e2:52:7d:d9:ea:09:7c:ce:9f:ba:c8:41:38:
         2d:0a:99:90:14:89:ae:36:0d:e8:da:44:46:94:6b:05:15:f5:
         10:40:27:51:91:30:01:e0:cc:24:8e:1d:10:3d:d7:c6:cf:8a:
         f0:a1:80:81:6a:ea:a4:9e:31:ef:c6:95:26:43:f9:95:f4:8f:
         bf:49:76:2f:10:86:ce:1e:cb:6f:95:b4:45:22:aa:cd:76:95:
         58:08:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:48 2026 by rpki-client