Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tAd-MI9aLjIQVXS0XWkT2SgF0wI.roa
File:                     tAd-MI9aLjIQVXS0XWkT2SgF0wI.roa (raw, json)
Hash identifier:          EkbhIZU2lzzDFZbrST0Q3bOhVSATBeDzMQDPEZ8+7ug=
Subject key identifier:   B4:07:7E:30:8F:5A:2E:32:10:55:74:B4:5D:69:13:D9:28:05:D3:02
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       143E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tAd-MI9aLjIQVXS0XWkT2SgF0wI.roa
Signing time:             Tue 31 Mar 2026 07:57:09 +0000
ROA not before:           Tue 31 Mar 2026 07:57:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5182 (0x143e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B4077E308F5A2E32105574B45D6913D92805D302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:76:90:d3:85:62:61:9a:01:3f:a0:b4:9f:
                    36:bc:5a:a6:94:c3:3c:31:9a:9a:05:ab:6c:b6:94:
                    63:58:ba:2d:08:14:ed:3a:29:64:29:be:ce:ca:47:
                    7b:dc:f0:27:95:e3:ca:01:f1:79:ee:58:0e:b1:6f:
                    25:ea:c8:6d:4b:86:dc:16:ad:f2:cb:cf:70:cb:e0:
                    ac:fe:c5:b5:98:e8:50:97:21:9b:2b:b7:23:df:25:
                    08:39:f8:c2:64:65:c2:99:c0:3e:3c:87:bd:93:d5:
                    59:00:6e:f8:ec:28:d3:11:55:f1:4b:4b:ac:5e:50:
                    af:90:e5:76:b3:b6:ce:78:16:db:c7:40:0d:62:33:
                    08:f4:fe:07:e2:74:f5:79:fb:3c:99:fc:74:ef:8f:
                    92:70:76:ef:28:37:f9:a5:80:4a:e7:d2:6d:b4:19:
                    ff:e9:23:ca:31:b0:ba:d6:f3:6a:75:c8:02:f3:75:
                    00:3a:05:55:fa:79:ed:22:f8:1f:bd:aa:0f:41:46:
                    22:f5:07:73:b3:30:bd:cc:df:10:ca:68:44:f1:97:
                    5c:cc:7e:91:9e:71:ad:44:84:6c:47:a9:66:4e:c1:
                    1d:5c:57:b4:78:3e:c9:03:a4:d7:7f:b3:76:9c:23:
                    29:54:bd:aa:95:7c:62:24:16:07:15:ed:6d:96:40:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:7E:30:8F:5A:2E:32:10:55:74:B4:5D:69:13:D9:28:05:D3:02
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tAd-MI9aLjIQVXS0XWkT2SgF0wI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:08:54:47:ff:ab:14:fd:e8:73:bd:ba:1e:0c:cc:28:8d:
         56:6b:67:02:c7:05:c0:dd:5d:d4:32:57:1f:d9:6d:12:ef:e3:
         eb:72:2f:30:e1:e1:81:ca:f3:71:fb:d0:9a:8f:5e:93:c0:62:
         83:7d:23:83:ca:a3:08:7c:f8:5b:c7:7e:47:9a:eb:35:20:cf:
         f6:38:20:b0:63:cd:e1:53:97:27:d0:e2:f6:41:fe:17:0d:04:
         f6:d9:cc:59:ad:e7:77:11:78:64:db:76:12:18:a9:02:7a:ee:
         3c:8a:cd:51:bf:9d:cd:5a:46:0d:df:c3:29:60:bb:4c:59:ea:
         04:35:e7:a9:92:8b:1d:3b:f0:dd:31:04:0b:d2:78:f1:5e:a4:
         0d:ad:af:89:27:a3:93:4d:ee:96:48:80:b9:52:6a:52:7f:45:
         db:c9:3a:6b:26:35:d6:a4:3e:84:54:73:67:be:bb:e5:5b:9c:
         8e:2e:be:74:ed:71:bb:1b:b5:94:95:d4:74:6e:03:9a:81:9a:
         2f:1d:07:a5:31:95:30:b3:d5:3b:e6:87:8a:4d:4e:5d:9e:5b:
         97:22:a2:06:c0:41:b7:21:fc:41:0e:3f:d7:d0:cd:93:fb:fa:
         0f:b5:0b:ed:04:7a:da:78:cc:16:0d:9b:48:68:9b:d8:00:32:
         53:40:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:55 2026 by rpki-client