Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TECd-eF7SmANT2hjHu11b3S2f7M.roa
File:                     TECd-eF7SmANT2hjHu11b3S2f7M.roa (raw, json)
Hash identifier:          a6E1ktbwesDwp1HTW29eltJUcevfvQ8VvXbVcu9p1Ek=
Subject key identifier:   4C:40:9D:F9:E1:7B:4A:60:0D:4F:68:63:1E:ED:75:6F:74:B6:7F:B3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1481
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TECd-eF7SmANT2hjHu11b3S2f7M.roa
Signing time:             Tue 31 Mar 2026 07:57:40 +0000
ROA not before:           Tue 31 Mar 2026 07:57:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5249 (0x1481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C409DF9E17B4A600D4F68631EED756F74B67FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:76:4a:b6:76:38:11:a1:08:e3:e3:54:2a:
                    b1:20:19:4d:3e:ed:5b:00:89:1a:aa:1c:77:09:c3:
                    5c:9f:22:3e:bf:48:f0:05:7c:fe:b1:8f:6d:01:b6:
                    dc:e4:40:84:f2:84:c0:53:10:38:34:12:e0:86:a5:
                    39:28:71:17:cf:21:ad:71:af:ae:2f:4e:9e:19:8c:
                    4f:db:cb:e4:8b:81:1a:41:56:96:9b:af:62:9e:24:
                    9b:ca:f5:72:73:d5:3f:02:e9:10:c3:65:b7:b8:04:
                    98:a3:77:c1:39:36:45:78:bc:0a:e8:28:aa:db:c8:
                    e2:77:b5:82:20:72:f0:cf:ff:f8:dc:db:e6:0e:5c:
                    48:df:b5:86:1e:fa:b7:ef:1a:d2:c3:7c:f2:a0:65:
                    b2:99:08:c8:f1:14:00:3f:27:88:3b:0e:47:c8:ee:
                    5e:8b:c9:b1:a9:7b:aa:a3:7a:09:d4:fd:6a:7f:68:
                    69:81:e3:18:18:7b:ed:07:7f:bb:79:b4:fb:32:c3:
                    17:9d:a8:36:18:c3:e8:67:7c:7e:d0:6d:3a:b3:9d:
                    cb:88:5f:26:74:6e:9d:62:48:df:21:75:18:32:36:
                    0d:b9:cf:fb:48:0d:95:4c:d0:d3:cc:84:d3:dc:28:
                    f9:ca:b0:ee:02:f9:18:84:29:5d:6c:6a:f0:97:9b:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:9D:F9:E1:7B:4A:60:0D:4F:68:63:1E:ED:75:6F:74:B6:7F:B3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TECd-eF7SmANT2hjHu11b3S2f7M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:5a:7b:91:99:92:c2:1d:c2:a7:59:9a:52:d2:e4:d7:96:
         58:e6:f0:16:5d:2e:4f:3a:6a:8b:eb:67:9c:18:c1:27:30:2c:
         56:0c:ff:f3:81:e3:f5:bb:cf:34:86:f0:66:0a:3c:95:5c:f8:
         bc:71:9d:77:07:c1:6f:7f:ca:83:8b:87:1c:55:2c:46:51:96:
         0a:79:2c:34:36:a6:19:3d:3c:2f:40:b8:e2:40:bd:a6:e1:fd:
         34:80:69:fd:0f:04:cb:27:76:93:2b:ec:13:7e:c3:17:1a:34:
         37:8e:74:00:c8:05:24:85:d8:8e:b9:25:d0:6f:2d:93:bb:ba:
         73:b0:14:80:50:d7:d6:83:9d:87:04:43:56:f9:ba:bc:fa:b7:
         cd:7c:9c:8f:bf:fd:d4:7c:3b:0c:56:ad:dc:26:41:63:30:13:
         cd:34:03:3e:a5:7e:40:d6:ed:d1:0b:c4:85:ff:9e:ed:db:17:
         03:e7:9b:e8:41:aa:c0:91:3b:2b:99:1f:12:00:8e:2f:a4:19:
         07:18:51:d4:bd:5d:c1:dc:34:89:0e:64:1b:ec:7e:b6:eb:f8:
         98:6d:0e:9b:75:10:4f:f2:e2:8e:dc:1b:1c:9e:a9:58:f6:13:
         ea:b3:a4:e6:8f:ff:9d:ed:a9:2d:ed:37:62:25:f0:ac:50:8e:
         50:73:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:59 2026 by rpki-client