Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/GqT_eTSsno_CY-gvw6MEStt-2TA.roa
File:                     GqT_eTSsno_CY-gvw6MEStt-2TA.roa (raw, json)
Hash identifier:          QMU2DEfHlhUceiUrhU3M9UYBohGJ04x+1ch0qjmg+4s=
Subject key identifier:   1A:A4:FF:79:34:AC:9E:8F:C2:63:E8:2F:C3:A3:04:4A:DB:7E:D9:30
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       48
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/GqT_eTSsno_CY-gvw6MEStt-2TA.roa
Signing time:             Wed 13 May 2026 04:36:22 +0000
ROA not before:           Wed 13 May 2026 04:36:22 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        210.229.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 03:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: May 13 04:36:22 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=1AA4FF7934AC9E8FC263E82FC3A3044ADB7ED930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:5b:8e:08:fe:4f:13:8c:00:83:13:9a:25:
                    50:41:d1:2a:6d:05:6a:ce:47:45:41:00:4a:78:6f:
                    b3:b6:5d:3a:33:38:83:ad:49:cc:dc:6d:01:f2:bd:
                    ae:9d:e6:3a:eb:98:5c:27:8c:51:7f:f6:08:69:2c:
                    f3:7e:8d:3e:58:65:aa:a4:d2:7c:06:ba:f3:12:62:
                    65:ee:44:5b:a1:47:0a:c8:42:b0:8d:61:1b:64:53:
                    82:81:c5:a6:75:6e:55:88:34:37:79:fc:b0:b3:e7:
                    cd:f2:b7:26:98:01:89:53:52:51:e1:d5:e1:f7:91:
                    f8:15:f5:e2:18:c8:68:88:d6:52:40:66:f9:e9:c5:
                    9b:d6:dc:89:2f:6c:cb:25:0d:ee:ad:f4:52:a1:5c:
                    38:d8:bf:9c:e7:45:61:c8:a3:2c:27:6f:70:98:48:
                    22:cc:63:18:cb:44:e9:32:01:5c:dd:08:45:b7:f3:
                    56:66:35:e3:1c:18:cd:54:73:0d:12:26:c9:18:5f:
                    9c:ce:60:6f:b4:36:a2:77:4f:4a:17:02:e2:7b:56:
                    15:24:ee:c7:7b:0b:b7:80:30:41:35:1e:fe:63:97:
                    94:b1:43:b2:e2:99:8e:91:18:2f:f8:ac:f8:30:27:
                    28:f7:5a:65:c1:55:a0:2e:6a:38:c8:24:95:33:0c:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:FF:79:34:AC:9E:8F:C2:63:E8:2F:C3:A3:04:4A:DB:7E:D9:30
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/GqT_eTSsno_CY-gvw6MEStt-2TA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:46:9c:66:24:db:c1:f1:ac:9c:ba:36:68:4f:67:3d:78:40:
         3b:10:7d:ad:b8:fe:02:b2:39:1f:5c:80:f0:a9:56:ad:95:18:
         b3:01:de:61:b1:c5:14:92:0e:6b:19:a8:14:46:a9:8f:60:fb:
         46:81:bc:45:92:b8:69:93:86:b8:71:a0:07:67:a0:ec:d3:8e:
         55:dc:f5:35:d3:25:cf:3a:41:ae:5e:23:52:bf:bd:a4:9e:8b:
         6c:e4:ac:09:9a:2f:31:0a:0f:1f:14:d8:de:85:2c:08:63:c9:
         0d:78:45:1a:90:60:e6:9d:67:d3:5e:46:03:c9:df:6e:c2:66:
         fc:a8:84:0f:f2:c5:39:0c:a5:b2:03:eb:40:e0:a6:11:fc:51:
         cb:24:3b:ab:42:5b:0b:8f:4b:02:dc:f7:db:19:43:a4:08:6f:
         b4:c6:3a:f4:93:32:d2:6e:85:2f:94:ed:38:b1:23:4b:65:6c:
         c7:94:bb:30:be:74:2b:4c:ce:33:0f:01:40:0c:b3:f4:a6:2d:
         a6:bb:b6:76:5d:14:83:9d:7f:32:08:bb:9b:7e:52:ed:87:32:
         e3:51:84:95:96:29:ed:9d:7e:3d:68:be:d9:75:bf:c5:d5:43:
         da:0c:ab:36:73:1f:e4:ca:73:12:69:63:05:e0:76:7b:39:96:
         fb:7d:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:02:44 2026 by rpki-client