Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/gMlLDHcU0tQReU-L26M3QwLm5BE.roa
File:                     gMlLDHcU0tQReU-L26M3QwLm5BE.roa (raw, json)
Hash identifier:          AYtRTGQu3aCHXpILJ4QsvmX9b4pjYkqXMLf7gi3Iicg=
Subject key identifier:   80:C9:4B:0C:77:14:D2:D4:11:79:4F:8B:DB:A3:37:43:02:E6:E4:11
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       99
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/gMlLDHcU0tQReU-L26M3QwLm5BE.roa
Signing time:             Tue 31 Mar 2026 08:37:09 +0000
ROA not before:           Tue 31 Mar 2026 08:37:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        124.150.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=80C94B0C7714D2D411794F8BDBA3374302E6E411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:ac:2b:d6:64:41:8e:9a:46:94:e2:11:4c:
                    13:8c:77:30:6d:a1:8b:5a:6c:50:41:d0:68:31:33:
                    f4:c4:6f:4f:69:42:a4:7f:47:0a:8a:39:92:74:6d:
                    9c:2d:96:59:80:6b:3b:f6:15:fe:56:10:ec:88:72:
                    ed:69:96:5d:a0:3c:d0:ab:5c:e4:24:49:5e:a1:85:
                    57:52:b0:be:fe:d6:d4:37:db:b7:4d:2d:4b:4d:f8:
                    e3:75:98:8e:c9:32:b6:db:99:c3:ef:5b:fc:32:f2:
                    4c:b3:03:7a:7c:58:45:e9:67:80:59:24:51:bd:78:
                    a1:10:e5:e2:0c:b9:26:08:e5:01:77:3a:03:3b:a9:
                    34:7a:b5:e2:8d:e0:89:92:17:41:26:7c:00:ae:2b:
                    79:23:2c:a1:50:c6:a0:a9:cf:9a:48:e3:e3:d3:d8:
                    90:fc:66:e8:fe:a0:f4:0d:7c:b8:c4:7d:63:b8:02:
                    ed:e0:a3:4d:08:9c:3e:76:d6:6c:5c:b7:09:fd:82:
                    c2:52:b9:01:ba:5a:cf:ed:4e:29:e6:dd:4b:79:19:
                    b9:41:24:60:13:cf:c3:fd:8b:e3:8e:d4:4c:ea:ef:
                    35:8b:ec:07:6a:14:91:54:d2:67:1a:41:d4:9f:24:
                    bd:9c:15:64:73:44:3d:4c:9e:ba:77:0f:cf:9e:b0:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:4B:0C:77:14:D2:D4:11:79:4F:8B:DB:A3:37:43:02:E6:E4:11
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/gMlLDHcU0tQReU-L26M3QwLm5BE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:13:e0:82:d7:3f:99:27:45:11:d9:d0:b4:17:5e:48:60:60:
         2a:37:e2:84:67:07:17:8e:cf:76:86:b8:61:27:6b:c3:4c:38:
         6f:0a:1e:b0:1e:91:e6:63:91:de:fd:37:0c:dc:d8:e9:52:b5:
         0a:96:52:41:c1:d6:3f:41:74:3c:16:0e:71:bf:b5:cd:62:ce:
         0b:43:66:24:cc:32:25:5f:ed:70:9b:73:6e:91:6a:d8:e0:45:
         7d:5a:b2:38:e9:23:a0:51:5d:17:47:9f:90:3e:83:de:b0:e0:
         cd:f4:27:06:b6:e0:93:44:87:c9:41:8d:bb:0b:62:b5:6e:8e:
         7a:ac:ef:a4:16:cc:2d:2c:86:26:0f:72:7a:0d:f9:f8:af:2f:
         87:7e:d1:fd:af:a5:0c:4f:80:dd:f0:a6:a4:57:d1:bb:ba:e3:
         28:dd:10:19:06:99:07:6d:17:3c:cc:00:a2:29:07:52:f7:ca:
         28:b2:35:b7:25:53:ae:48:5f:54:f3:44:10:14:03:19:38:9d:
         87:1c:97:e3:a5:b9:3b:10:8c:53:be:aa:bb:f1:4a:07:4c:a7:
         32:72:7b:5b:40:a3:a5:0d:8b:7c:6a:dd:38:b7:e5:c3:df:ea:
         fc:c6:5c:10:35:b6:c3:04:a7:aa:71:d7:30:4f:cc:0c:d1:36:
         5a:b5:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:06 2026 by rpki-client