Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uihyrpyYZsFqMmDEILeJ4rEn6yg.roa
File:                     uihyrpyYZsFqMmDEILeJ4rEn6yg.roa (raw, json)
Hash identifier:          sdWmSmC152fdNED7QE8QNoh3S0WdmQO6CKkHRS6qLTo=
Subject key identifier:   BA:28:72:AE:9C:98:66:C1:6A:32:60:C4:20:B7:89:E2:B1:27:EB:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uihyrpyYZsFqMmDEILeJ4rEn6yg.roa
Signing time:             Sun 01 Mar 2026 03:12:28 +0000
ROA not before:           Sun 01 Mar 2026 03:12:28 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4771 (0x12a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:12:28 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BA2872AE9C9866C16A3260C420B789E2B127EB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:33:92:5f:6c:8a:34:17:7b:0b:3d:ed:c0:
                    d1:22:98:df:86:67:0d:52:94:30:9b:c2:eb:cf:4f:
                    ae:46:96:84:8d:8d:0c:86:9a:5a:9f:ca:0d:22:1c:
                    68:a4:2c:a9:cd:a8:75:21:f2:0d:02:6e:e1:f2:d8:
                    14:f0:ba:73:01:48:85:29:04:cd:29:30:76:78:0e:
                    ba:01:06:6a:17:58:aa:66:68:69:a9:91:03:88:3f:
                    f6:07:98:c6:1c:37:7c:62:48:85:f8:f8:3b:36:12:
                    c9:f0:ff:a5:a1:15:d7:71:33:9d:48:04:36:72:fb:
                    4d:7a:5e:88:a6:74:92:d8:e7:e5:40:c4:83:51:4c:
                    d1:48:7c:29:28:81:cc:b9:e2:98:4d:44:07:62:64:
                    f0:0a:3f:87:95:d6:37:f4:2d:82:a1:d2:0f:b9:1e:
                    15:05:56:25:19:22:a2:74:6f:6c:f0:54:06:f3:3c:
                    a6:39:55:35:94:9c:b1:24:b2:f3:41:a6:a1:c5:53:
                    76:66:22:02:af:ad:a1:15:86:2c:8c:76:ca:47:8e:
                    d9:33:5a:ac:1f:8d:c8:b1:93:d2:fa:c7:17:75:96:
                    95:f3:ad:a4:53:0d:ae:d1:99:2c:ed:31:42:51:d7:
                    b0:da:9c:2a:e8:ed:67:8d:0c:04:a7:98:eb:b5:a2:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:72:AE:9C:98:66:C1:6A:32:60:C4:20:B7:89:E2:B1:27:EB:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uihyrpyYZsFqMmDEILeJ4rEn6yg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:e8:9b:4c:5c:a9:8c:ff:cb:61:9f:be:ea:30:cd:93:36:
         9f:f2:3e:41:4d:70:29:59:b5:5d:b1:de:b1:dd:ba:9e:13:cb:
         fa:c0:55:1a:cd:05:70:36:af:06:d2:c6:c0:a8:d8:6f:48:ea:
         d9:b6:97:61:61:26:f0:39:fd:39:c5:ef:6a:58:e8:5d:b0:02:
         64:10:e8:bd:8d:a9:fa:5a:a4:77:45:18:a1:cd:db:a5:a3:ec:
         16:c2:68:b4:e8:e0:2c:01:2a:a7:ef:82:22:4c:91:66:76:85:
         3a:83:a2:c6:6a:09:6b:64:d7:5a:2c:3e:cd:6c:78:62:95:b2:
         ec:a6:54:c8:83:da:89:fa:a9:ef:17:b6:8b:2b:ef:06:b0:2f:
         9c:a4:04:b4:70:e1:69:41:b0:db:02:dc:22:22:17:26:67:24:
         10:57:ea:86:3b:f7:03:82:06:71:8f:76:1f:01:0d:1a:80:35:
         6e:b1:3b:8c:7d:1d:5e:4b:ac:48:f9:40:f8:cf:6a:15:1a:77:
         43:48:43:35:8d:af:0a:d9:4c:b5:e2:42:a0:8b:13:7c:45:2e:
         80:a6:c1:04:80:8f:55:24:c0:cf:7b:00:76:61:a0:a3:2e:2b:
         85:b8:63:e3:ec:2e:cb:f3:c4:f9:34:ce:19:97:92:d7:b4:6e:
         f8:a1:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:31 2026 by rpki-client