Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z9JsG8xDb93k4rPtmyh3ZruK20w.roa
File:                     z9JsG8xDb93k4rPtmyh3ZruK20w.roa (raw, json)
Hash identifier:          8CHlIYc3rwIl6yJ9b24uMJ4eBEiWE6QHl9pjccHBp5E=
Subject key identifier:   CF:D2:6C:1B:CC:43:6F:DD:E4:E2:B3:ED:9B:28:77:66:BB:8A:DB:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1257
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z9JsG8xDb93k4rPtmyh3ZruK20w.roa
Signing time:             Sun 01 Mar 2026 03:00:23 +0000
ROA not before:           Sun 01 Mar 2026 03:00:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4695 (0x1257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 03:00:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CFD26C1BCC436FDDE4E2B3ED9B287766BB8ADB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:41:90:3d:0a:e7:fe:9e:0d:59:40:89:37:
                    ef:8b:54:2f:4b:22:b8:0b:1d:81:e1:2c:33:d6:fc:
                    4f:e3:a4:a3:84:56:e5:06:d6:f5:a7:4d:d7:ae:40:
                    75:06:d5:ad:74:1a:ac:54:a0:b0:9f:88:62:12:61:
                    be:f0:d3:17:76:e5:a1:c8:af:2b:48:d6:60:64:4f:
                    ba:59:30:3e:a8:85:f4:eb:57:20:7c:78:53:26:58:
                    0d:58:4a:6f:9a:cb:1a:b4:50:cf:3f:a8:2f:bc:d7:
                    07:42:1d:4f:7a:10:43:6f:33:50:68:c8:51:95:f2:
                    b9:a4:9f:df:f0:04:44:57:3c:8e:18:cb:99:05:5d:
                    4c:fc:ac:9c:53:6b:ee:e1:6a:15:2e:6c:bf:ff:21:
                    8b:d0:ee:9e:7b:5d:ff:57:20:f9:df:12:c8:a9:45:
                    40:f8:e2:eb:70:50:40:e9:2a:32:1d:f7:e0:e2:70:
                    27:2d:e8:ba:f6:48:46:71:87:68:ea:99:c4:64:c4:
                    4b:93:c3:37:9d:b9:5e:12:91:e2:4f:30:4f:c9:1a:
                    2b:42:64:34:e3:d1:02:07:da:5c:20:d2:e8:af:77:
                    69:8f:c2:b0:5b:83:3e:87:bb:ac:50:cf:da:f8:e4:
                    ec:f4:5a:e4:5f:cb:d3:e6:91:b1:92:c0:93:6a:2a:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D2:6C:1B:CC:43:6F:DD:E4:E2:B3:ED:9B:28:77:66:BB:8A:DB:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z9JsG8xDb93k4rPtmyh3ZruK20w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:97:ed:58:91:bf:e4:2b:c4:97:c3:ad:8b:89:ca:2f:a0:6e:
         a1:47:92:8e:a2:26:cc:c2:04:ab:c3:ae:e9:d3:6f:d7:38:27:
         fb:f9:af:68:e0:c3:d0:d3:e4:0b:04:7a:b8:1d:bc:e0:e8:a1:
         ce:4d:ab:11:07:73:d0:b9:60:cb:c9:bd:bf:9a:0c:ae:f8:eb:
         e4:7c:71:e8:90:11:f3:10:c0:ee:89:af:38:4f:b4:cd:ff:51:
         40:87:e5:b7:46:d5:ec:41:17:be:76:c7:68:2b:87:70:28:92:
         e7:5e:1e:e8:57:68:dd:8d:0b:8f:93:7c:8c:91:46:b9:46:94:
         e5:78:d7:83:25:52:17:ea:db:81:3f:0f:b9:9f:28:bc:43:a1:
         98:2f:d5:26:f8:3f:1d:ba:16:61:81:ba:d9:a2:8d:49:d2:42:
         46:e5:de:09:ad:d3:0b:f5:85:5d:08:a3:de:b6:25:c3:14:0e:
         d4:26:38:fd:43:7c:52:92:63:89:16:10:ce:2d:84:3b:0a:4e:
         e4:9e:9e:8d:d8:9b:47:9f:2b:85:ef:10:6d:eb:f9:63:fe:02:
         00:90:4b:99:c2:5d:17:3e:0a:0f:94:b6:89:a8:3d:28:10:98:
         0d:e6:43:df:92:2a:ce:c9:8b:db:57:f5:3c:8f:c8:b7:cf:1a:
         3e:68:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:43 2026 by rpki-client