Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa
File:                     vrX1HrnmAfklYHolHDYZUBTbSQs.roa (raw, json)
Hash identifier:          T0CtvUeu5E1pzYGswJLK13cVUrUn0+fZMrBiNwOfKuU=
Subject key identifier:   BE:B5:F5:1E:B9:E6:01:F9:25:60:7A:25:1C:36:19:50:14:DB:49:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1458
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa
Signing time:             Tue 31 Mar 2026 07:57:22 +0000
ROA not before:           Tue 31 Mar 2026 07:57:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5208 (0x1458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BEB5F51EB9E601F925607A251C36195014DB490B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:a8:32:29:46:51:4a:56:19:64:07:56:75:
                    40:5f:9b:37:32:0c:6e:68:2a:e3:25:ff:90:18:b9:
                    e5:be:34:99:38:9e:a9:80:59:f1:39:b0:52:bb:e6:
                    80:51:8f:20:ed:ff:7c:03:da:da:16:18:ce:67:3f:
                    4c:d7:ab:f6:e8:7b:69:a6:ee:3b:ec:7e:a1:67:a4:
                    08:cf:7d:d1:b9:fa:90:39:31:74:1a:55:d9:dd:d2:
                    d7:43:26:e4:19:7e:21:60:e1:80:33:c8:d1:97:c9:
                    f4:58:b3:de:b0:86:8d:32:e3:f8:12:40:72:66:a1:
                    ae:7c:00:b6:72:f7:fd:a8:4a:7a:0a:f7:13:f0:c3:
                    34:40:7f:6f:c2:87:2f:a1:44:c4:8d:3e:ec:3b:d0:
                    7a:00:7d:c8:28:24:63:36:09:a5:5f:54:03:58:99:
                    bf:92:6f:87:02:9a:e2:ba:16:34:6c:7a:e2:5c:b1:
                    18:cd:7d:50:8e:95:b0:e9:31:54:75:c7:8f:7b:65:
                    63:fa:68:f7:5a:dc:28:5c:fc:bd:3c:37:c7:a8:68:
                    cc:7b:9e:27:9c:81:3c:ac:f4:ba:9d:b1:41:c0:8c:
                    6a:fc:38:c7:50:9d:a7:b3:e7:8c:36:60:5d:df:8f:
                    76:04:02:38:1e:c4:90:83:ce:a3:c4:9a:fd:9f:9f:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:F5:1E:B9:E6:01:F9:25:60:7A:25:1C:36:19:50:14:DB:49:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrX1HrnmAfklYHolHDYZUBTbSQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:87:45:c9:7a:a6:f7:59:53:b6:d4:97:ad:a3:2f:72:9e:e2:
         9c:85:48:04:96:4d:9c:20:59:18:0b:61:4d:ac:7e:09:7c:66:
         fe:8b:0b:d8:ac:4c:d2:38:62:61:3a:93:4e:92:b1:7c:8d:f8:
         f4:e0:e7:8d:57:33:c0:ab:c1:18:c5:7a:ab:19:5b:b1:5b:29:
         24:63:d1:51:e2:d5:95:7b:3b:05:39:e7:76:ae:37:01:06:fa:
         62:4e:48:39:e4:40:18:9a:11:2b:48:9a:f6:02:86:58:d2:bc:
         d9:2c:11:79:19:35:24:8b:ea:f8:37:b9:8d:01:d4:2c:77:20:
         23:c6:d4:e1:b7:ef:1f:79:8d:40:fa:47:95:b1:b9:aa:85:d5:
         54:63:80:5d:05:c9:42:ef:ef:3d:35:6f:a1:b7:6a:b2:8f:5c:
         7d:d1:49:2b:b7:5e:04:6d:8e:60:12:97:cc:8a:1f:eb:51:7b:
         04:e9:bd:76:09:eb:34:48:c9:87:1c:c2:39:c2:58:7b:4b:36:
         9f:2a:bd:27:c2:68:1a:65:30:e1:db:a2:a3:e9:ac:ab:1e:cb:
         97:9f:fa:e3:4e:f4:5a:10:ab:5c:23:e3:9c:5e:a6:14:f8:33:
         c2:e4:07:43:52:67:75:1a:44:04:69:98:5f:64:3a:68:13:00:
         21:0a:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client