Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wnE7jqYisUNG4RB9S8TF7Dd_PYc.roa
File:                     wnE7jqYisUNG4RB9S8TF7Dd_PYc.roa (raw, json)
Hash identifier:          42x+uUMnleCfetA/zR2SMi1KS0PyhjLWM5TEedyr17Y=
Subject key identifier:   C2:71:3B:8E:A6:22:B1:43:46:E1:10:7D:4B:C4:C5:EC:37:7F:3D:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       12A7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wnE7jqYisUNG4RB9S8TF7Dd_PYc.roa
Signing time:             Sun 01 Mar 2026 03:12:29 +0000
ROA not before:           Sun 01 Mar 2026 03:12:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4775 (0x12a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:12:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C2713B8EA622B14346E1107D4BC4C5EC377F3D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:85:82:5c:3d:84:4a:0f:86:8c:f5:9a:57:
                    ac:33:44:06:5d:d0:08:a6:62:0b:65:05:bc:f5:57:
                    3a:61:a8:6c:e5:4b:8b:21:cf:ba:8a:ef:7a:8b:90:
                    eb:d2:b6:69:6a:04:aa:b2:96:bd:9e:7b:37:36:c8:
                    fb:4d:d8:87:6d:93:2f:82:67:c6:62:5e:c6:9a:fb:
                    9c:45:4d:49:f0:af:ec:31:d4:f7:c9:03:72:fb:67:
                    82:de:04:e4:0e:7e:8f:6c:65:8c:97:2f:35:b7:ed:
                    b1:98:71:25:a1:93:e8:a1:5b:00:62:24:4b:d5:24:
                    df:f3:bd:5d:37:00:5c:8f:89:ad:a2:26:84:5e:46:
                    b4:d3:4e:b9:88:1b:b0:57:40:00:2a:8d:46:ac:58:
                    6d:86:0e:1e:80:48:58:2a:da:68:6b:f6:aa:a2:8f:
                    2d:de:e4:3e:99:a9:8f:03:00:69:ff:71:b6:ea:86:
                    b2:d7:76:6d:b3:54:03:a8:b2:e9:9a:15:a8:9a:be:
                    1c:89:d9:4b:02:28:29:86:ac:84:e0:bd:0f:34:3f:
                    93:24:68:4d:af:be:62:91:4d:12:89:ab:d7:47:c4:
                    10:65:8c:d4:8d:3f:f5:51:3c:ac:e2:db:9d:35:13:
                    1c:50:55:ca:8c:83:2b:15:62:47:bb:1c:ef:68:1e:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:3B:8E:A6:22:B1:43:46:E1:10:7D:4B:C4:C5:EC:37:7F:3D:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wnE7jqYisUNG4RB9S8TF7Dd_PYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:15:3f:a6:59:66:67:83:72:e4:e1:54:e9:bb:9c:b4:c8:
         e8:ea:54:f6:c5:30:0b:c4:6b:8c:37:25:40:5e:13:00:33:a6:
         ca:58:e6:4e:28:68:bd:33:81:92:e0:85:a1:c9:72:39:c6:5f:
         e3:c8:bc:56:5c:a6:fc:db:30:63:21:81:aa:a6:41:1a:f3:cb:
         ff:e5:4c:83:1c:34:8f:52:96:17:c0:12:cd:74:4a:e1:74:d6:
         72:2b:58:6a:87:c4:f8:5f:51:d7:b9:da:3d:31:35:a0:a3:6f:
         46:63:b6:c5:f9:fd:8a:ca:f9:3a:d4:ac:2b:ed:c5:e1:98:0d:
         8d:65:44:d1:1c:03:87:01:24:dd:2d:2f:59:3e:14:92:2b:49:
         e0:bd:ad:ce:95:e3:ff:e7:6a:2e:0a:6a:95:5f:5d:c4:ea:a3:
         d8:2a:f7:4d:1a:84:ae:91:96:a7:8d:01:72:39:19:e3:92:29:
         59:53:07:b0:f1:84:6f:81:24:22:01:c4:9f:e9:bb:2d:cb:29:
         4a:6e:48:2a:93:a4:5e:e7:44:9a:ce:aa:6e:1f:61:0b:06:ef:
         97:8c:79:32:8a:ba:42:ba:fc:0d:49:fa:fc:80:33:21:3c:1c:
         d9:34:97:c9:93:35:01:fa:2f:8c:bf:71:5b:df:ea:1a:6a:fe:
         67:eb:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:49 2026 by rpki-client