Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa
File:                     Q285TkDeJscTKoGDvNIour2Ltp4.roa (raw, json)
Hash identifier:          WHNcIdM37vkZHcV7OhiHvAx2qVFEwxqxRkbu7W4yDX4=
Subject key identifier:   43:6F:39:4E:40:DE:26:C7:13:2A:81:83:BC:D2:28:BA:BD:8B:B6:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1717
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa
Signing time:             Tue 31 Mar 2026 08:03:08 +0000
ROA not before:           Tue 31 Mar 2026 08:03:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5911 (0x1717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=436F394E40DE26C7132A8183BCD228BABD8BB69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:f8:9e:73:55:1f:11:94:3b:e4:88:f8:9d:
                    dc:79:7b:17:49:33:db:9e:f6:f4:56:0d:bc:92:f8:
                    07:28:ad:a6:20:f8:35:41:b8:8d:13:3a:78:3a:e8:
                    a2:45:80:3d:58:1b:f6:52:48:0a:3e:06:df:a6:28:
                    37:21:35:45:bb:78:01:38:06:59:90:3f:3a:1e:fc:
                    57:bb:cd:43:c4:3e:47:4a:c0:67:0c:54:db:b7:14:
                    ef:eb:6e:b2:bd:54:b5:9a:bb:1b:cd:53:e5:c7:86:
                    01:d3:35:c3:3b:98:ad:4b:ff:39:7a:0d:4c:05:42:
                    ea:46:26:10:58:72:dd:2f:04:87:7d:b1:9a:bd:0b:
                    31:8a:0e:f3:4b:cc:3b:0e:c5:98:00:3d:20:32:1e:
                    4e:61:2e:59:98:cd:b3:a0:13:1a:53:2c:24:be:b8:
                    b1:91:02:82:cd:ae:36:4d:78:33:2d:f2:e5:e5:29:
                    1e:dd:e5:f3:90:e7:e0:7b:3a:b6:c5:43:4f:04:2d:
                    37:0f:fd:9e:c6:2c:6a:42:e4:c1:c3:e1:a7:8a:6f:
                    82:48:c5:f6:09:f4:c2:ef:c8:51:e4:12:1e:9c:67:
                    46:b5:de:8b:17:8f:4b:88:6c:59:bc:8e:d8:c4:82:
                    7c:cc:f8:a6:82:c5:dd:e0:73:02:ec:a7:e2:1c:45:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:39:4E:40:DE:26:C7:13:2A:81:83:BC:D2:28:BA:BD:8B:B6:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q285TkDeJscTKoGDvNIour2Ltp4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         de:c5:45:12:60:50:56:c3:88:5c:35:8a:3f:68:09:fe:81:f3:
         e9:bd:4c:f6:31:7c:6d:a6:10:37:ed:ab:5b:fc:5a:58:00:8e:
         a0:8d:79:cb:ce:b3:d7:5d:66:9f:06:20:31:a4:24:3e:b8:c1:
         c9:51:83:2f:d0:6f:98:b7:ff:1a:b7:15:d3:61:54:69:33:ec:
         4a:e0:0b:05:31:66:f3:f3:99:b7:6d:44:d6:ec:3e:66:d2:e2:
         36:d3:7d:5c:39:f5:16:ee:e0:29:7c:7c:34:5a:cf:f1:23:db:
         e2:6e:40:a1:8d:56:ff:65:4d:a6:7e:5a:78:9f:2d:08:74:24:
         87:b9:98:5b:50:a7:cf:38:17:06:08:ed:3f:8b:6f:e4:6a:ba:
         cb:df:97:98:0c:6a:df:b5:6f:51:df:f1:02:4e:70:75:4b:b7:
         44:95:0f:ca:9e:ac:09:b4:56:6c:76:0c:b6:41:69:12:40:33:
         ad:b3:df:c2:ad:14:9e:6a:d7:60:1a:0d:f2:cc:18:14:77:2d:
         34:40:4b:f5:07:d5:11:b1:8b:ca:cb:02:b4:aa:c6:22:dc:3f:
         a0:6a:c5:3a:a9:0f:cb:c9:a9:cc:00:47:63:30:ea:a6:b7:db:
         70:5c:f6:8d:db:f0:ed:71:bd:2e:cc:6d:74:28:6b:d0:fc:5b:
         14:be:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client