Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SErEb13QLv1f_5yrhXfMq7qglQw.roa
File:                     SErEb13QLv1f_5yrhXfMq7qglQw.roa (raw, json)
Hash identifier:          bj8ddSo9QHJH6rO2EVgVgZy6JW8lGEyS/cNFxSbvFaA=
Subject key identifier:   48:4A:C4:6F:5D:D0:2E:FD:5F:FF:9C:AB:85:77:CC:AB:BA:A0:95:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1354
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SErEb13QLv1f_5yrhXfMq7qglQw.roa
Signing time:             Wed 25 Mar 2026 08:48:48 +0000
ROA not before:           Wed 25 Mar 2026 08:48:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4948 (0x1354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 25 08:48:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=484AC46F5DD02EFD5FFF9CAB8577CCABBAA0950C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:e6:c7:f9:fc:30:1c:fd:4c:a0:f0:78:8d:
                    0e:71:06:b6:8b:a7:5c:b0:53:27:ef:07:52:db:8a:
                    8c:f7:d9:e6:6d:59:a8:44:45:5f:61:e0:2e:1b:44:
                    b6:d6:58:41:83:18:b1:b9:6f:40:f0:ef:3a:92:c1:
                    40:58:36:54:3d:68:72:40:c4:41:6e:ac:ac:26:f7:
                    5f:fd:7a:38:b3:d9:e3:e2:ca:58:8f:5b:06:f2:d2:
                    f2:ed:97:1c:cc:d1:0d:d5:b2:41:ff:6f:c8:e7:24:
                    ea:56:c8:4f:ee:55:c3:da:d7:5c:fb:81:09:ff:d7:
                    2f:37:20:62:a4:2b:14:d8:59:b3:7f:20:e6:4f:63:
                    06:1f:21:03:8d:70:a6:92:7b:6a:ff:ea:2f:0f:03:
                    3a:cc:3a:fd:39:4f:96:8b:d0:3c:66:da:7f:11:e6:
                    e9:1d:f1:2b:48:f6:03:32:f3:35:17:b9:42:f0:25:
                    44:e8:0a:bb:af:95:d5:33:ea:b0:73:12:68:27:d6:
                    36:10:2d:61:ba:9e:6b:ee:d9:eb:af:db:6e:7a:bf:
                    9c:70:ea:73:ef:e1:f5:b7:df:f3:6c:41:90:88:c4:
                    c9:ed:23:97:ff:8a:f3:d2:7f:92:ec:b5:fd:a6:06:
                    28:7a:4a:21:0e:e4:a6:a6:db:a6:c0:b9:ff:c7:7f:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:C4:6F:5D:D0:2E:FD:5F:FF:9C:AB:85:77:CC:AB:BA:A0:95:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SErEb13QLv1f_5yrhXfMq7qglQw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:75:b5:87:1b:be:6f:94:ba:41:77:e2:2a:09:9c:95:2b:7d:
         4d:7d:f8:71:62:b6:e3:c4:b0:87:07:38:0f:81:85:79:3f:28:
         3d:e0:67:53:d4:d4:05:2b:c7:41:58:c0:ed:61:67:71:2c:46:
         87:77:80:46:d2:3a:f6:3e:25:dc:81:b0:c7:f5:de:7e:d4:c1:
         ed:4f:63:44:98:53:9f:87:b7:71:b2:88:14:7c:91:de:8c:a9:
         15:2a:62:e7:1d:f6:57:cd:20:55:18:ec:f0:c0:75:88:df:90:
         81:d0:41:ff:d1:d6:78:e1:c8:ff:82:ca:e0:fd:49:72:eb:65:
         4b:e0:e6:bc:38:ad:c8:a2:75:71:08:d6:d1:38:0b:aa:4d:41:
         c1:d6:bf:29:1a:65:88:cf:f0:ae:80:0c:0a:24:78:1b:b5:25:
         b4:98:a9:52:a6:e8:3e:b6:f1:9c:27:07:55:5b:e9:fa:8f:bb:
         e8:40:01:0d:3a:89:1c:5b:4d:75:be:c5:42:2e:82:05:0d:52:
         52:cc:9f:2a:51:db:8c:2b:e3:7a:31:4f:3a:d5:48:8d:0d:ed:
         80:68:4c:e8:14:48:ba:2f:9e:19:c9:c3:45:36:be:30:81:d9:
         da:5f:77:93:c9:1c:22:32:1e:82:cc:9b:0e:14:27:2e:30:7d:
         41:bf:52:64
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICE1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMjUw
ODQ4NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4NEFDNDZGNUREMDJF
RkQ1RkZGOUNBQjg1NzdDQ0FCQkFBMDk1MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH9+bH+fwwHP1MoPB4jQ5xBraLp1ywUyfvB1Lbioz32eZtWahE
RV9h4C4bRLbWWEGDGLG5b0Dw7zqSwUBYNlQ9aHJAxEFurKwm91/9ejiz2ePiyliP
Wwby0vLtlxzM0Q3VskH/b8jnJOpWyE/uVcPa11z7gQn/1y83IGKkKxTYWbN/IOZP
YwYfIQONcKaSe2r/6i8PAzrMOv05T5aL0Dxm2n8R5ukd8StI9gMy8zUXuULwJUTo
CruvldUz6rBzEmgn1jYQLWG6nmvu2euv2256v5xw6nPv4fW33/NsQZCIxMntI5f/
ivPSf5Lstf2mBih6SiEO5Kam26bAuf/Hf2r1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUSErEb13QLv1f/5yrhXfMq7qglQwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1NFckViMTNRTHYxZl81eXJoWGZNcTdxZ2xRdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuo4AwDQYJKoZIhvcNAQELBQADggEBAMd1tYcbvm+UukF34ioJnJUrfU19
+HFituPEsIcHOA+BhXk/KD3gZ1PU1AUrx0FYwO1hZ3EsRod3gEbSOvY+JdyBsMf1
3n7Uwe1PY0SYU5+Ht3GyiBR8kd6MqRUqYucd9lfNIFUY7PDAdYjfkIHQQf/R1njh
yP+CyuD9SXLrZUvg5rw4rciidXEI1tE4C6pNQcHWvykaZYjP8K6ADAokeBu1JbSY
qVKm6D628ZwnB1Vb6fqPu+hAAQ06iRxbTXW+xUIuggUNUlLMnypR24wr43oxTzrV
SI0N7YBoTOgUSLovnhnJw0U2vjCB2dpfd5PJHCIyHoLMmw4UJy4wfUG/UmQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:53 2026 by rpki-client