Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uIbt1BEtICw9v0hnPyPZaV9WwHU.roa
File:                     uIbt1BEtICw9v0hnPyPZaV9WwHU.roa (raw, json)
Hash identifier:          P60C+oW7MEsz0Ck09dn+GDXPtyYkkMzXUWJdxthCNXo=
Subject key identifier:   B8:86:ED:D4:11:2D:20:2C:3D:BF:48:67:3F:23:D9:69:5F:56:C0:75
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16EB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uIbt1BEtICw9v0hnPyPZaV9WwHU.roa
Signing time:             Tue 31 Mar 2026 08:02:45 +0000
ROA not before:           Tue 31 Mar 2026 08:02:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5867 (0x16eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B886EDD4112D202C3DBF48673F23D9695F56C075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:9c:1d:63:94:8d:1b:57:d2:9a:c8:6e:32:
                    2a:9b:6d:a4:d2:96:19:e6:03:18:04:96:56:bf:ad:
                    25:18:e4:1c:db:67:c0:f7:f6:15:72:3f:61:b2:eb:
                    0f:6f:c2:2b:6a:65:38:5e:97:57:4f:3d:33:1b:06:
                    8d:48:a4:50:4a:e3:65:77:7f:29:99:0a:df:c9:a6:
                    d6:63:ee:57:49:fc:dc:4c:d6:80:ea:b3:b2:af:2d:
                    5f:7b:9d:f4:b6:aa:c5:93:02:b2:75:3e:bf:6b:7d:
                    0c:8b:90:7c:7b:72:e2:26:22:0c:f2:26:54:c6:63:
                    54:f5:c2:1c:f8:b5:f7:e8:2e:21:0d:0b:1f:b0:04:
                    74:31:71:a0:21:b1:8f:e1:ad:5b:75:43:4c:0d:3c:
                    ee:56:0a:2b:6b:b8:14:b4:73:00:48:90:d3:26:b0:
                    b3:ea:28:65:36:86:69:d9:81:7e:58:f2:70:22:7a:
                    ae:55:4c:b5:5e:3d:d4:b5:0e:0c:35:95:86:e0:bf:
                    dc:0d:49:87:4d:e1:b1:1b:81:b8:2c:ad:b2:1e:ea:
                    82:7e:56:04:05:2b:83:88:02:f6:f5:a2:85:1a:65:
                    23:cd:bc:f3:7e:f7:ed:5e:a6:f4:dc:3b:12:7f:00:
                    7f:c5:75:6c:55:5b:68:7c:23:32:e8:ac:7a:ba:25:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:ED:D4:11:2D:20:2C:3D:BF:48:67:3F:23:D9:69:5F:56:C0:75
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uIbt1BEtICw9v0hnPyPZaV9WwHU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:e3:c5:bc:2c:23:ca:38:a0:9d:90:40:c2:b7:c1:19:d9:12:
         ed:8b:8c:c8:de:49:d6:5a:76:ea:82:62:9b:1f:00:df:e0:f9:
         19:16:48:70:52:51:88:27:4f:d3:df:03:ee:99:23:51:e2:79:
         b2:c3:d9:8f:2a:98:46:59:55:81:29:5e:c7:d6:b1:53:8f:8a:
         7c:86:ea:26:3f:8d:8b:20:2a:44:28:d3:ce:76:db:b4:ef:d4:
         87:55:2c:2f:b2:ae:60:26:73:0d:63:2c:dc:d2:8c:af:9d:a7:
         66:b2:d0:07:d3:5c:bc:a8:41:1f:c6:75:59:8d:b3:94:b4:d8:
         25:92:92:09:6d:15:1a:a5:8b:b6:67:51:72:f5:5a:40:29:ef:
         6d:ab:fd:a2:3f:e1:44:50:77:b4:3f:86:de:03:5c:be:9d:e7:
         9c:8d:b0:94:01:8b:2c:09:dd:b8:6f:d9:c7:c3:58:e1:c1:f7:
         5e:70:70:fb:67:65:09:99:5d:b2:5b:26:b7:79:e7:80:a2:56:
         20:cf:14:86:19:59:65:77:e6:da:2a:4f:24:7b:33:35:5b:48:
         8f:bb:f0:5f:e3:a3:bb:98:84:58:45:d0:76:87:0c:3d:a8:9a:
         57:41:6f:a8:80:8e:b3:b9:21:bf:ee:93:ce:d1:55:c2:20:9c:
         27:73:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:09 2026 by rpki-client