Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cgisJ5pzCg4mlhC909-8yn4QdkE.roa
File:                     cgisJ5pzCg4mlhC909-8yn4QdkE.roa (raw, json)
Hash identifier:          uqDpDWkAuvIMKB6aUz8AEh4z/coLyPaG4oTraKvwFgg=
Subject key identifier:   72:08:AC:27:9A:73:0A:0E:26:96:10:BD:D3:DF:BC:CA:7E:10:76:41
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1818
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cgisJ5pzCg4mlhC909-8yn4QdkE.roa
Signing time:             Tue 31 Mar 2026 08:05:16 +0000
ROA not before:           Tue 31 Mar 2026 08:05:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6168 (0x1818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7208AC279A730A0E269610BDD3DFBCCA7E107641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:a1:81:bd:db:4c:13:0e:04:25:85:a2:93:
                    a4:38:34:da:83:74:3e:a7:7c:9a:a1:3f:2a:b5:20:
                    67:67:ba:8c:44:90:ab:93:af:33:60:2a:3c:dc:80:
                    93:08:59:14:10:9e:18:d2:92:25:77:ca:40:a1:2a:
                    ee:44:6a:06:97:ec:54:a5:cc:52:df:90:05:ba:a3:
                    a2:4c:54:78:c4:c7:fd:cc:ad:b6:e6:ce:14:e4:75:
                    14:35:14:e2:ee:a9:df:4a:27:25:d5:03:d9:ab:ef:
                    8c:9e:c6:f8:6f:d7:69:dd:48:b7:b1:5c:37:84:2c:
                    c9:f3:75:9b:10:33:55:fa:c3:03:7e:7b:78:f8:7f:
                    8f:d3:c9:2d:08:f2:f2:86:c8:58:43:bf:9d:09:9a:
                    a5:d0:ac:64:0d:dd:0a:48:4d:4d:6e:ab:43:01:96:
                    7c:a3:7c:19:e7:f6:8a:80:ce:26:bc:a5:d9:fe:ba:
                    ec:ed:0e:b7:e5:ab:cc:b7:52:62:af:7a:b1:cb:00:
                    79:8f:76:85:8a:c6:6e:09:9b:22:27:5f:d3:5e:cd:
                    63:20:ae:1e:f8:d5:da:36:e0:9f:71:fc:65:13:a8:
                    14:46:45:49:da:0d:62:69:3b:db:c2:34:45:ee:af:
                    cb:ff:80:a7:41:b4:97:b6:fd:36:b8:d7:3c:52:86:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:08:AC:27:9A:73:0A:0E:26:96:10:BD:D3:DF:BC:CA:7E:10:76:41
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cgisJ5pzCg4mlhC909-8yn4QdkE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:b1:a2:1e:6f:c8:2f:ef:ab:62:85:77:cf:81:8b:cd:b1:58:
         1d:e9:91:63:53:4e:69:38:5b:b8:31:cb:ba:ab:19:dd:bc:b0:
         bc:2b:c5:79:9e:4b:ca:7f:58:35:e7:fd:e4:a2:70:6b:1e:6d:
         f6:e8:dd:6a:fe:9a:3a:9e:e1:0e:0a:fc:d3:2f:16:a3:fa:ae:
         6b:b0:14:5e:e1:cd:82:20:19:80:af:da:62:96:3b:ea:f6:7f:
         37:53:80:91:ee:d5:75:ca:1c:35:ba:ca:d0:62:c4:56:d7:30:
         13:19:3e:d2:94:c7:b5:08:df:dd:e7:be:9c:40:b4:37:fc:27:
         7b:f2:b2:a9:37:af:4d:c9:eb:0e:6e:2d:5c:7b:21:40:e6:8d:
         ae:f9:5d:72:36:75:3d:f2:b9:f2:11:ec:3a:c2:d3:e6:4e:0b:
         6a:72:5a:81:ea:02:ae:f1:e0:cc:74:0d:48:5d:42:a0:93:c3:
         65:ed:00:67:4e:17:70:b4:78:bf:26:e8:47:57:eb:e4:b7:54:
         3c:40:56:71:a0:2f:4c:46:69:b9:d8:3f:2a:ff:6e:ab:33:73:
         cf:8d:bb:c6:49:fc:70:d1:9c:88:2a:47:1f:2e:01:bf:4e:c6:
         1d:fd:25:27:f9:b2:10:a1:03:10:a4:95:da:1f:03:bd:53:7e:
         5e:45:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:15 2026 by rpki-client