Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wHxYBddvfvNY1917ZrVOMS0isTY.roa
File:                     wHxYBddvfvNY1917ZrVOMS0isTY.roa (raw, json)
Hash identifier:          4eqQMzt8+0x60oAYb1CTKreB/CZaQO58MnV0cWEpqBw=
Subject key identifier:   C0:7C:58:05:D7:6F:7E:F3:58:D7:DD:7B:66:B5:4E:31:2D:22:B1:36
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       109F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wHxYBddvfvNY1917ZrVOMS0isTY.roa
Signing time:             Sun 01 Mar 2026 01:44:48 +0000
ROA not before:           Sun 01 Mar 2026 01:44:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4255 (0x109f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:44:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C07C5805D76F7EF358D7DD7B66B54E312D22B136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:66:a8:36:bf:bc:55:fb:1a:54:a0:57:89:
                    0d:68:5f:cf:db:cf:dc:cf:d9:cd:71:9d:03:96:3f:
                    0a:aa:38:6e:63:4e:65:54:da:b8:62:c7:66:4c:69:
                    22:ac:8d:0b:24:87:26:ba:f6:f1:66:47:b1:6d:d6:
                    b7:1e:b7:c5:5c:0a:df:06:6c:0b:53:08:4a:a2:93:
                    37:d0:27:21:dd:76:2a:01:ae:80:52:7c:c7:11:68:
                    ac:7a:33:51:f4:28:05:87:c8:2d:fd:0d:e1:7e:a0:
                    a4:e8:33:11:e4:d9:ca:b3:bb:78:15:5b:aa:e1:49:
                    b0:65:23:f3:d4:82:36:fa:63:34:83:dd:b5:1b:b4:
                    98:4a:49:ad:9f:af:85:5d:31:67:bc:8e:02:f2:a8:
                    f8:4f:36:e6:c4:d0:f5:49:d3:29:46:22:52:ee:50:
                    0f:c6:7a:ca:9c:66:0c:fb:94:05:a5:fd:e6:6a:30:
                    f0:f6:05:57:9e:bc:34:44:6b:65:0d:bd:91:0f:0a:
                    e6:0e:35:f9:1d:6b:b9:6b:98:2f:61:eb:58:3a:17:
                    23:df:15:8d:82:70:43:b7:e1:7f:cd:97:29:db:3f:
                    18:d7:06:7a:49:b0:7b:c2:a4:26:c8:37:d1:08:da:
                    21:3b:c6:f8:0c:46:4b:36:38:7f:5c:e1:2e:2d:07:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:58:05:D7:6F:7E:F3:58:D7:DD:7B:66:B5:4E:31:2D:22:B1:36
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wHxYBddvfvNY1917ZrVOMS0isTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:27:bc:0b:00:ba:1c:46:99:5f:59:bf:48:f5:f5:34:66:ce:
         4b:ea:be:fa:2a:03:87:63:92:96:62:d6:30:bb:49:9f:2f:1f:
         96:17:54:35:12:f7:04:2e:f2:dd:6a:81:f5:2c:68:b5:aa:d8:
         50:60:ae:3a:bd:13:d2:87:2b:f5:d8:29:9c:2d:a8:c8:cf:af:
         56:4d:a7:c3:7d:41:fc:b2:b3:a7:92:cc:ea:eb:ff:07:bd:ce:
         b1:49:9c:73:fc:d8:52:7d:bb:35:60:94:c1:e6:0f:01:72:b2:
         58:c9:bd:7c:4b:c0:65:87:99:b1:06:45:8a:e4:dd:4a:f0:4f:
         b8:cf:a8:06:dc:95:e8:0b:72:9d:bc:da:94:cf:3c:d4:aa:13:
         df:ed:5c:6a:03:7e:8d:63:17:bf:01:7c:9d:c5:fe:76:32:d8:
         06:08:d2:0a:7d:89:d3:ec:e6:d4:c2:09:19:6f:ee:e8:7e:38:
         ac:a0:c0:54:cd:09:97:11:ce:42:a8:94:00:98:95:97:6b:49:
         6d:fa:9b:ea:ba:e7:b6:2a:ed:d2:48:4d:54:d9:9c:2c:05:36:
         ad:33:e6:c3:be:09:f5:e2:b1:ee:e5:d0:da:d1:55:86:44:b7:
         8b:28:e2:73:06:a5:4f:23:5b:bd:4f:4e:5f:d0:f2:43:ab:dd:
         c6:2e:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:12 2026 by rpki-client