Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
File:                     3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa (raw, json)
Hash identifier:          2z3DDTejfkMZMxlCaai8jNOqf3jE1ETZmwr0hqlsaOM=
Subject key identifier:   DD:4E:95:FD:D3:8D:DE:1B:C9:B3:CC:07:E3:38:EF:44:FD:59:2F:4A
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       2B
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
Signing time:             Sun 01 Mar 2026 01:36:24 +0000
ROA not before:           Sun 01 Mar 2026 01:36:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131931
IP address blocks:        110.4.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Mar  1 01:36:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=DD4E95FDD38DDE1BC9B3CC07E338EF44FD592F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:59:0f:6a:4f:37:3d:9d:5f:c7:32:63:60:
                    4c:a8:bf:86:0a:2a:45:74:36:57:80:47:26:b7:e1:
                    08:0f:83:2c:23:5c:be:d2:cd:c0:f9:b4:1c:a7:6e:
                    2a:66:a6:95:cb:1e:4f:9d:70:98:99:0d:0b:ba:97:
                    d4:1b:ea:cd:5b:0f:1e:bc:74:d5:75:c7:26:c8:be:
                    6e:0e:6b:22:76:e8:88:ab:06:b6:3c:52:db:34:c8:
                    81:7b:75:f1:bc:03:6b:2a:41:d6:84:40:84:b6:2b:
                    2e:a8:8a:4f:f7:38:da:72:6b:88:32:af:36:3d:bd:
                    e2:ca:97:4e:79:13:b7:5f:2d:ca:ce:f4:72:28:da:
                    4c:30:66:3a:54:6e:1e:f9:19:bd:58:63:3f:3f:3f:
                    66:32:06:4e:e9:90:e6:07:03:b0:70:c7:aa:4e:c0:
                    97:c6:06:cb:0c:16:8f:a4:98:a9:31:46:06:cb:6d:
                    1a:15:86:36:f8:60:d4:17:57:74:89:7f:53:69:70:
                    d4:4b:4e:15:2b:98:61:7b:c5:2c:ee:e2:68:9b:11:
                    36:37:b6:eb:ed:3f:06:db:55:75:41:32:34:4b:1b:
                    c9:b7:0b:54:97:49:6e:db:1b:39:7d:33:f4:bd:57:
                    8f:95:ce:67:aa:f3:b8:93:36:93:7b:06:77:c3:af:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:95:FD:D3:8D:DE:1B:C9:B3:CC:07:E3:38:EF:44:FD:59:2F:4A
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:1e:92:06:81:ac:31:a8:81:2e:13:d1:c1:d7:f4:d7:79:
         e2:8e:30:c4:68:da:f8:ff:31:fd:b0:38:1f:87:c5:28:d5:41:
         14:7f:2e:14:50:39:bb:48:7c:1b:0c:33:64:09:98:1c:07:4b:
         3f:56:6a:10:d2:fa:f2:b7:0c:f2:33:09:06:ab:05:8e:01:0f:
         8f:4a:7a:ef:ff:2f:5a:ea:ec:58:9f:a9:91:f1:a2:6b:09:59:
         45:5c:ab:43:b5:84:82:fc:87:e3:e4:dc:ce:e1:80:f9:97:c4:
         a9:76:97:62:01:62:ed:db:f6:97:9c:50:c9:a3:bc:56:b4:5b:
         75:6a:21:e6:21:ed:fa:67:50:02:57:3c:b5:a9:12:af:40:d9:
         0a:44:4d:90:31:03:25:cb:74:97:df:77:64:57:e3:8c:3e:6f:
         a6:ff:3e:cf:1c:59:33:39:0e:b6:2a:15:fa:0a:9e:e5:30:f9:
         e7:15:00:87:25:9b:ce:d6:28:89:0d:1a:6c:0f:81:3c:02:6a:
         b4:77:a5:60:3a:ea:8d:52:64:36:5e:b9:f7:b7:b6:25:8e:1a:
         3a:a6:6b:38:12:e4:47:94:a2:16:0a:10:ef:30:3c:f7:e9:20:
         89:b1:3c:97:d1:82:03:78:22:2d:d8:ed:0d:95:e5:c4:1e:73:
         a7:04:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:45 2026 by rpki-client