Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_isGPOZPBaqKU5ME0T1Zty3OGLY.roa
File:                     _isGPOZPBaqKU5ME0T1Zty3OGLY.roa (raw, json)
Hash identifier:          InoNs4k/Uh6ppEDRRFoAvdpmcTwF8oGhIH42UMjE5Xg=
Subject key identifier:   FE:2B:06:3C:E6:4F:05:AA:8A:53:93:04:D1:3D:59:B7:2D:CE:18:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_isGPOZPBaqKU5ME0T1Zty3OGLY.roa
Signing time:             Tue 31 Mar 2026 08:04:22 +0000
ROA not before:           Tue 31 Mar 2026 08:04:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6069 (0x17b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FE2B063CE64F05AA8A539304D13D59B72DCE18B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:89:6e:fe:f7:a8:a5:13:4f:cd:a5:3f:9b:
                    7a:c3:12:34:50:2b:e1:9d:f6:54:d4:3a:a4:af:0f:
                    04:70:16:0f:c1:8a:de:ce:5c:e5:a1:fc:f2:c3:a2:
                    e8:33:5b:86:16:f7:09:e7:ef:59:89:c6:e0:49:86:
                    aa:49:ff:96:dd:a5:b2:6a:9b:80:56:d2:5f:91:f3:
                    c5:bd:9e:50:bf:69:cb:89:8e:65:b1:f3:c4:22:65:
                    8e:aa:ed:19:35:cc:99:78:ab:21:c9:bc:5e:08:39:
                    55:ee:dd:e2:5a:3f:b2:25:97:fd:41:7b:e9:c1:d0:
                    83:8e:c3:06:77:93:b6:c2:95:4f:d6:8a:8a:3d:08:
                    6c:46:3d:28:3c:29:6e:f2:3c:aa:ff:57:31:ec:4d:
                    79:16:2a:ff:36:18:d9:43:fb:ef:ef:10:44:eb:35:
                    db:c4:64:0a:40:7b:3c:91:e7:6d:09:5d:13:18:ad:
                    53:e7:7a:33:e2:b9:49:ab:54:c9:46:46:b9:f2:21:
                    39:09:6b:8f:3c:07:f1:0b:b0:12:bd:38:e0:4a:00:
                    52:db:2b:e1:eb:2c:f4:b5:d2:8c:61:39:44:47:df:
                    d5:fa:8c:1d:bb:f1:9b:76:d7:e5:a1:49:ce:2e:36:
                    6b:5e:e1:f5:4d:5a:52:f1:f6:f4:c3:2e:9a:3d:93:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:06:3C:E6:4F:05:AA:8A:53:93:04:D1:3D:59:B7:2D:CE:18:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_isGPOZPBaqKU5ME0T1Zty3OGLY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:ab:99:89:35:45:d3:df:b3:f0:e2:fa:93:16:5f:59:91:
         8c:cc:d1:fd:dc:a8:83:c4:50:a2:ea:24:ef:8b:26:30:bb:a4:
         b9:34:d9:c4:f2:56:e6:bb:1c:9a:92:18:40:c1:41:20:29:65:
         78:83:31:b0:d2:02:a8:bd:92:27:07:da:66:6d:15:0d:06:04:
         0c:f3:b4:ce:16:18:ef:8b:5b:83:b1:2a:7f:e1:f5:36:29:79:
         a0:49:bd:da:0d:70:fd:5f:56:39:e2:24:3c:28:de:3c:4f:0a:
         4b:3a:cb:a6:aa:b9:c4:21:07:0f:f7:c2:2f:af:0b:57:15:ad:
         54:f7:bb:27:14:0e:9d:33:02:b2:3d:ca:c9:5e:52:2d:6c:51:
         ce:11:43:65:b1:4a:6a:c0:ac:62:04:45:ec:c0:e6:4d:eb:5b:
         77:ed:38:a9:2e:5a:24:df:65:d8:c0:ae:4e:5c:82:3b:16:ce:
         95:a9:5f:53:26:55:8e:af:0e:d2:09:28:f4:62:65:a2:e9:2c:
         fe:28:b1:15:01:d0:3f:62:43:38:2b:87:2e:67:fa:c3:3f:16:
         fa:3b:82:94:13:9b:e4:10:c8:8c:c2:9b:26:ac:99:2c:c2:e2:
         f6:8d:03:15:fd:58:3b:6c:e7:58:70:c2:ef:b7:e5:e9:fa:6d:
         1a:be:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:49 2026 by rpki-client