Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa
File:                     GWvCJzXquHO8FG1dzFvquUAGz0k.roa (raw, json)
Hash identifier:          Qazte6Oy320PthAVBGvO0YXpilw3BwGm9HjEWkF3mVU=
Subject key identifier:   19:6B:C2:27:35:EA:B8:73:BC:14:6D:5D:CC:5B:EA:B9:40:06:CF:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1817
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa
Signing time:             Tue 31 Mar 2026 08:05:16 +0000
ROA not before:           Tue 31 Mar 2026 08:05:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6167 (0x1817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=196BC22735EAB873BC146D5DCC5BEAB94006CF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:c1:5a:3e:02:1c:8d:68:91:22:60:de:c6:
                    1c:2e:9a:47:dc:e1:d8:98:94:e3:c0:cc:48:03:f2:
                    df:b9:a4:b3:01:8a:5e:e0:2d:95:2a:fe:ff:8a:9b:
                    c0:bf:08:93:47:22:ec:e3:cb:25:3c:f0:62:b1:f4:
                    92:3e:23:3f:c6:0c:55:d8:0f:67:61:05:72:75:df:
                    9d:ba:65:e8:37:b0:6d:9c:6f:7f:39:42:9d:d1:48:
                    b4:5c:bb:27:f0:21:93:b9:11:f0:33:9f:d9:c3:59:
                    7e:e0:d8:64:f9:90:68:38:32:82:07:d7:47:fb:3b:
                    3c:55:e8:cc:b5:29:15:36:bb:e7:c0:2a:55:24:2d:
                    eb:cf:56:e4:aa:86:ce:7d:a3:de:e5:ca:4b:f5:14:
                    cb:f3:75:f5:87:cf:f5:31:76:8f:f1:6c:2e:39:f7:
                    4d:f9:f6:35:9b:9f:86:b7:8b:82:44:8f:e2:ab:ff:
                    ac:06:8a:ea:f8:41:cd:13:34:57:85:3e:28:54:64:
                    69:cd:b1:46:dd:0b:dd:57:26:ce:74:84:9b:e1:98:
                    80:aa:24:7f:8b:85:43:c5:e0:51:7e:95:53:d4:ef:
                    72:86:a4:f2:56:96:48:8a:df:5c:ec:50:7d:84:ab:
                    d9:46:30:47:94:bc:ff:eb:ae:b3:23:92:4f:73:03:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:C2:27:35:EA:B8:73:BC:14:6D:5D:CC:5B:EA:B9:40:06:CF:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GWvCJzXquHO8FG1dzFvquUAGz0k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:2b:f2:52:01:af:a4:06:d0:f2:59:a1:c3:f2:04:41:40:
         6f:15:36:06:d2:d9:32:0f:d3:43:2c:b8:e8:41:1a:ac:98:11:
         67:22:c7:3b:00:58:5f:ad:b2:b6:79:eb:9c:ee:cc:f2:cd:d4:
         a3:eb:20:c7:35:5a:5a:f7:e2:a7:4c:b6:71:2b:e6:29:07:30:
         8a:70:79:6c:4f:1c:42:4f:c2:a2:4f:b3:a5:fd:be:bd:d8:b3:
         aa:2f:28:37:12:0e:80:04:31:7a:7e:f0:4d:69:63:60:76:1e:
         32:6a:0f:a7:b5:1e:a1:b3:a8:1b:12:4a:2c:7c:b7:d0:98:2e:
         09:75:59:5a:df:ee:eb:ba:6a:47:fb:a1:08:1d:5f:b8:1e:8e:
         56:40:7d:5f:8d:bd:8e:54:b6:e5:e2:01:c4:b8:91:83:52:bb:
         32:31:e1:e7:7d:f9:77:62:ed:b2:59:ab:1e:15:33:49:81:73:
         b1:ed:69:3a:1c:05:e3:84:93:fc:39:0f:58:a8:bf:0e:dd:dd:
         42:62:3e:45:a9:af:02:e3:48:93:d3:3c:78:26:6f:7d:94:e3:
         f5:6e:61:85:67:2c:70:17:da:8d:01:79:7b:24:6a:32:20:33:
         93:aa:62:0a:df:bb:f6:db:75:05:61:87:7f:91:17:34:7b:77:
         72:bb:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client