Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a57s8Su8jHfCqukUwaMll0rwSvk.roa
File:                     a57s8Su8jHfCqukUwaMll0rwSvk.roa (raw, json)
Hash identifier:          zVkepNuLfGjEFULR4X94buy8H5B+1jvI/UlbLyor43w=
Subject key identifier:   6B:9E:EC:F1:2B:BC:8C:77:C2:AA:E9:14:C1:A3:25:97:4A:F0:4A:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1813
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a57s8Su8jHfCqukUwaMll0rwSvk.roa
Signing time:             Tue 31 Mar 2026 08:05:14 +0000
ROA not before:           Tue 31 Mar 2026 08:05:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6163 (0x1813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6B9EECF12BBC8C77C2AAE914C1A325974AF04AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:fd:89:75:f2:cc:24:5e:aa:99:cc:41:24:
                    ce:89:49:30:47:32:7d:bc:8f:5a:87:36:dc:41:8d:
                    c2:55:8d:14:22:0e:e0:d3:5f:94:90:1c:08:46:51:
                    43:25:05:ce:ef:f7:0b:60:69:1e:16:99:26:bd:11:
                    5f:25:a3:5d:0b:86:aa:e3:8a:dc:60:0f:d5:23:43:
                    01:9b:d0:49:2a:d1:36:97:7e:a8:a3:e4:e3:72:4a:
                    eb:29:93:88:b8:7d:66:d1:79:48:b2:72:eb:ad:59:
                    5d:75:68:5c:6f:9f:a9:4f:ed:a0:08:76:cb:fe:a4:
                    42:99:3d:3d:c3:d0:e1:1f:32:89:2c:a4:e1:55:4f:
                    02:2f:65:bd:9a:0c:f3:68:48:51:bc:0d:b4:37:be:
                    e5:f0:02:82:b1:d2:85:6b:2e:6a:81:eb:78:5e:f2:
                    81:d9:0f:1b:37:52:01:9b:3f:b7:83:ee:42:c2:79:
                    1c:b1:44:ef:e6:36:30:c1:8b:9d:74:de:ca:f9:63:
                    47:a7:7f:a3:36:2f:03:e6:87:f4:79:61:aa:a5:3f:
                    88:98:09:e6:35:d2:d5:a7:4d:81:1f:a6:a2:9c:c9:
                    bb:06:d7:1f:8b:6e:e6:4d:cc:b2:1d:ed:a0:d6:13:
                    5d:de:1d:3c:85:0a:29:f2:eb:4c:02:b2:d1:71:98:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:EC:F1:2B:BC:8C:77:C2:AA:E9:14:C1:A3:25:97:4A:F0:4A:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a57s8Su8jHfCqukUwaMll0rwSvk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:b9:48:8a:9c:04:b1:97:42:69:8f:13:13:de:07:2f:41:
         78:95:7c:5d:5b:2a:30:e3:76:25:56:1b:bb:59:5e:1d:f7:c6:
         f0:5a:5e:4e:74:85:f9:52:55:84:85:0a:3f:74:2a:3d:56:24:
         e9:c3:bc:de:1c:aa:45:ce:8e:22:c8:d6:7b:7e:a1:7d:d5:b5:
         f4:37:6a:37:31:74:15:b8:8e:f9:af:cc:ee:16:1d:35:f4:cc:
         6c:a2:95:35:d5:b6:e9:63:95:18:7c:cd:89:d0:b8:47:ca:c1:
         28:ab:7f:41:48:62:73:44:90:12:8d:1d:bf:2a:d8:91:d0:d2:
         12:18:47:04:f4:3a:b9:df:d6:36:18:7d:9e:c8:68:9f:cf:12:
         57:07:44:e1:03:52:93:4a:8a:3e:05:c1:06:c4:28:94:be:8b:
         90:4e:c3:03:0a:61:79:9e:06:92:e7:d4:7b:8e:9f:5e:27:b8:
         29:a0:92:69:87:2c:d1:72:48:f9:16:f5:9a:ac:00:16:d8:47:
         99:ed:92:30:e3:18:fb:b5:9e:55:42:fe:b6:17:0d:f9:99:51:
         93:fa:43:d3:9e:36:ad:0c:28:60:16:17:b7:93:fc:48:37:c2:
         39:83:5e:7a:29:e6:15:36:8d:c5:24:55:25:02:5d:d1:e0:f5:
         42:90:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:25:17 2026 by rpki-client