Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ge6a4P7qYuQl0wHC4dHPmJRcKcw.roa
File:                     Ge6a4P7qYuQl0wHC4dHPmJRcKcw.roa (raw, json)
Hash identifier:          P+yWPr1JmU68BtHxJ2FycGS6IQgbYiS5zhioN2Lx0yU=
Subject key identifier:   19:EE:9A:E0:FE:EA:62:E4:25:D3:01:C2:E1:D1:CF:98:94:5C:29:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1532
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ge6a4P7qYuQl0wHC4dHPmJRcKcw.roa
Signing time:             Tue 31 Mar 2026 07:59:10 +0000
ROA not before:           Tue 31 Mar 2026 07:59:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5426 (0x1532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=19EE9AE0FEEA62E425D301C2E1D1CF98945C29CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:d2:a9:f4:a1:ec:6b:d8:f0:ba:b4:77:fb:
                    01:9b:fd:7f:28:83:3b:60:ae:04:ac:91:b6:fe:3f:
                    10:3d:01:26:14:57:b3:b2:1f:3f:82:31:1d:c7:dd:
                    e7:0a:6b:48:28:87:a9:70:8f:61:9a:13:d9:bc:3a:
                    e5:1b:e3:8b:35:cb:18:99:03:22:aa:6b:71:72:7d:
                    8e:3b:6b:18:6b:7a:c2:ea:50:ed:7a:68:4e:9b:f1:
                    00:c5:5e:72:5f:4d:e1:41:05:2b:03:45:b2:c7:52:
                    49:54:6e:94:87:04:f3:8f:3a:ca:12:a6:5d:4c:1f:
                    44:a8:ba:55:f1:2b:11:fa:f9:16:2c:c7:5f:23:9a:
                    05:e6:54:7e:0f:f1:db:bc:f0:7e:7f:19:e2:f5:32:
                    8f:8d:ed:7a:50:03:b4:e0:36:8f:31:a2:60:cf:5a:
                    33:d8:2f:11:ac:fa:1a:e8:d4:da:02:93:15:bc:cf:
                    f8:96:50:c8:29:3f:c9:8f:1e:c8:ea:56:3e:ad:04:
                    0b:71:1d:e5:39:3d:4c:cd:79:d5:81:56:0e:78:d1:
                    9a:d3:65:ec:8d:08:ef:01:5f:9e:01:41:b4:4d:31:
                    b8:56:cc:91:7c:9d:0c:eb:03:4d:58:93:76:14:2d:
                    90:d8:00:f7:e8:8c:3d:ff:fa:77:e9:4f:0f:a2:ee:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:9A:E0:FE:EA:62:E4:25:D3:01:C2:E1:D1:CF:98:94:5C:29:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ge6a4P7qYuQl0wHC4dHPmJRcKcw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:de:fe:2b:1f:3f:67:df:de:5b:c3:00:50:66:b4:6c:b6:70:
         ed:2f:df:41:c0:0b:96:d4:71:85:25:a6:e2:5c:76:cc:cd:b7:
         fe:67:5a:62:4f:f5:1b:04:1e:47:d0:14:5f:58:1b:11:36:2f:
         28:c1:a6:52:7d:78:fb:46:f3:fc:ae:51:9c:3a:65:39:e9:b9:
         b7:17:f4:c8:0c:99:80:c8:6c:32:71:93:ae:24:96:43:53:02:
         43:c0:07:73:0f:d6:e9:0c:39:66:a6:c5:83:77:49:f4:d6:99:
         41:75:02:60:c5:a2:b9:13:4b:bf:d0:a2:69:6f:47:c0:ec:ea:
         7d:29:e9:61:a1:25:9d:d1:33:c0:0b:e8:ab:30:a2:b1:90:3e:
         1c:66:b3:62:5f:7a:cd:89:c5:d1:7f:7e:1f:33:63:b8:88:95:
         37:09:09:49:06:93:e2:e4:d6:50:b2:d5:9b:c1:48:c1:6a:15:
         c6:27:96:5f:4c:2a:9a:47:de:19:2a:80:38:59:4d:6b:a8:b0:
         79:78:66:10:a7:59:78:b3:65:17:54:3c:4b:ef:95:1d:d7:30:
         77:a1:72:b8:f0:4a:a1:7a:e8:ef:8d:33:17:ef:57:54:fd:19:
         ea:be:25:94:ff:76:39:71:d0:06:d7:9b:2d:18:ca:f4:ff:d0:
         9d:ff:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:35 2026 by rpki-client