Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrXJYkHW3UIE3-FW3_BuocFQF84.roa
File:                     wrXJYkHW3UIE3-FW3_BuocFQF84.roa (raw, json)
Hash identifier:          tj6m8QGzo5bfJTqCqE8Sk820QyDeY/IRV9vDyZabyj0=
Subject key identifier:   C2:B5:C9:62:41:D6:DD:42:04:DF:E1:56:DF:F0:6E:A1:C1:50:17:CE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       186C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrXJYkHW3UIE3-FW3_BuocFQF84.roa
Signing time:             Tue 31 Mar 2026 08:05:57 +0000
ROA not before:           Tue 31 Mar 2026 08:05:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6252 (0x186c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2B5C96241D6DD4204DFE156DFF06EA1C15017CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:4d:d9:03:9a:94:cf:08:00:20:9f:65:59:
                    86:2f:61:63:d9:5e:70:b4:b4:c6:29:9b:05:7e:3a:
                    74:cd:6d:4a:2e:10:2d:76:49:8a:60:7c:6d:4d:ba:
                    f4:d9:b3:bb:cb:e4:d3:f1:d0:7a:a0:39:0a:d9:aa:
                    27:f8:a5:bf:90:c6:36:30:bb:a3:9d:08:7a:9c:70:
                    8d:c6:aa:4f:13:cd:f0:5e:d8:64:20:6e:86:11:25:
                    99:9c:a8:0f:14:0e:f9:4d:96:e4:a3:75:f1:d1:67:
                    c7:29:11:19:19:56:d9:73:5c:bf:c6:13:15:0e:90:
                    f8:e8:10:2f:c2:51:d0:bd:5b:d6:41:bb:06:b7:93:
                    62:81:a4:0d:d6:e9:46:71:34:bf:01:9f:18:f1:4e:
                    4d:a6:8b:37:a8:9f:53:f8:13:62:0e:03:4f:e6:6e:
                    45:08:06:fe:b2:84:15:4f:a2:9d:ad:ac:d1:d9:e1:
                    ad:44:4f:5a:9c:e7:8e:b2:c3:a1:12:47:62:94:58:
                    0a:fc:04:9f:5f:5d:d0:5e:c0:42:77:15:6c:03:ae:
                    44:e4:39:a8:7f:db:d8:85:4e:a0:48:dc:ba:bb:63:
                    92:9a:28:a7:c8:63:bd:4d:7d:6b:8b:e6:d1:86:d5:
                    16:5c:d4:9c:19:d5:be:e1:38:6a:23:bd:00:b6:41:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:C9:62:41:D6:DD:42:04:DF:E1:56:DF:F0:6E:A1:C1:50:17:CE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrXJYkHW3UIE3-FW3_BuocFQF84.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:42:54:bd:ee:b2:61:e5:6d:6c:63:2d:c3:f6:8e:98:b5:
         6b:79:a6:05:f6:02:37:13:c7:50:8e:b1:7d:bd:0a:9c:a0:c8:
         eb:e6:ce:81:ba:8e:59:46:f6:2b:e9:53:23:21:c8:83:88:0f:
         fe:01:34:86:68:41:6f:ff:d5:91:82:42:7b:4b:21:c1:ea:ef:
         54:20:db:4b:40:58:f7:18:98:36:92:fe:9a:56:d3:17:49:9f:
         63:a0:75:8d:f9:11:b1:cb:92:af:87:be:56:65:12:1a:24:60:
         b9:99:35:85:c2:ce:d2:bd:a3:c2:1d:15:cd:45:5d:b2:2b:6c:
         a1:ce:af:88:d8:c9:f7:3f:e1:61:a4:b2:33:5c:c1:b6:e9:57:
         b2:cd:f9:7c:b3:6b:f7:4d:5c:ff:7e:44:bd:5c:7d:d2:ce:18:
         30:39:7b:2a:4d:17:71:1e:c9:1f:e6:23:1c:21:0f:e4:4a:e3:
         92:cd:4a:fb:4d:be:5f:42:0a:60:46:b0:8b:2f:6c:a8:3a:0b:
         30:58:24:9b:0d:15:de:2e:14:31:5a:35:0f:a1:96:8d:10:b3:
         8f:ea:38:7f:14:23:c6:52:97:d4:8b:c9:65:1f:94:d0:40:1c:
         59:72:d0:4f:f8:ab:8c:47:39:9a:a5:3d:a8:f5:e6:e8:69:0d:
         bf:21:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:44 2026 by rpki-client