Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbmCue2rSFcgZJuWHDEBlODvkpE.roa
File:                     GbmCue2rSFcgZJuWHDEBlODvkpE.roa (raw, json)
Hash identifier:          sGmYvLz5sjKCAXGUZfORxzm3Xu4R6QT3np2IoShM4RM=
Subject key identifier:   19:B9:82:B9:ED:AB:48:57:20:64:9B:96:1C:31:01:94:E0:EF:92:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbmCue2rSFcgZJuWHDEBlODvkpE.roa
Signing time:             Tue 31 Mar 2026 08:04:51 +0000
ROA not before:           Tue 31 Mar 2026 08:04:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6129 (0x17f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=19B982B9EDAB485720649B961C310194E0EF9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:99:16:e6:9a:8c:91:1f:c2:14:51:3a:a6:
                    2e:73:ee:db:c5:59:e9:10:2c:e0:18:22:31:5b:99:
                    57:9d:89:3c:0b:d8:5f:e9:01:98:92:4f:e4:ef:de:
                    99:ae:01:5e:16:c9:16:8c:06:c2:7b:44:4b:b2:d9:
                    c7:cc:9f:d3:fd:a2:9a:d6:98:41:98:c6:c6:95:15:
                    bd:e3:9c:bf:08:91:11:80:51:9a:e1:1a:1d:68:57:
                    bd:a8:aa:ff:e3:ff:20:17:0a:24:32:bd:0d:fb:c8:
                    c2:fd:d5:7a:b5:d8:7a:97:04:61:d9:32:51:e6:16:
                    7a:50:32:f9:3b:a5:d7:60:cb:8d:a4:c3:e1:cd:9b:
                    90:47:dd:16:97:f4:29:66:dc:3e:17:a3:e0:3d:74:
                    77:40:2d:61:13:83:01:b2:d5:d9:87:fa:29:00:ee:
                    1e:3a:5e:8c:cb:dc:f2:6a:fc:94:f5:04:bd:08:92:
                    fd:6b:d5:41:bc:35:f2:0a:e0:a4:96:8c:e9:e6:59:
                    51:ea:a5:d0:68:04:86:a2:c2:77:5a:19:a6:ce:c1:
                    e8:0e:6c:c0:6e:cf:09:d4:5b:58:f2:f7:c4:6b:a0:
                    5f:92:82:5b:f7:ff:02:39:e1:0b:fc:6b:cf:30:ac:
                    c4:46:5a:10:40:cf:8d:de:d8:00:14:05:63:18:3b:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:82:B9:ED:AB:48:57:20:64:9B:96:1C:31:01:94:E0:EF:92:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GbmCue2rSFcgZJuWHDEBlODvkpE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:f4:04:1c:dc:7a:e9:1c:43:8a:da:27:48:a2:ff:9f:c4:4f:
         49:9b:22:74:0b:41:73:67:d7:bb:18:ea:8f:23:56:11:b6:a6:
         ef:3c:dc:eb:1f:9a:f8:30:79:d9:27:39:7f:1b:31:ea:08:3c:
         3e:59:90:34:e0:69:1c:6e:79:81:7d:69:2a:c2:66:f9:c0:2f:
         92:62:5c:e4:d4:99:26:8a:ad:6e:4f:2b:60:2d:00:b5:ad:5e:
         13:77:14:09:8b:ad:f0:d8:7b:d4:ed:b3:d5:aa:90:12:74:96:
         e4:5f:31:31:7e:09:f0:88:6c:7a:f2:00:9d:f1:a8:03:33:bd:
         11:26:c8:31:73:8b:16:6e:6c:c9:2c:c0:0e:9d:3a:68:92:9c:
         be:ee:7e:0d:ca:c5:d5:31:39:7d:7d:e0:31:ac:25:1a:3b:13:
         ee:12:13:a8:47:60:20:df:ab:f3:be:bb:f3:de:db:66:54:27:
         82:c6:71:69:8d:7c:a8:9a:68:8f:e3:61:57:8a:77:7f:f1:43:
         3a:a0:ff:ef:1f:2c:7e:34:20:52:d0:db:5d:80:68:58:b4:b1:
         cf:e4:5f:a4:ed:a9:f8:d5:23:0f:cd:92:23:32:db:f8:47:51:
         65:c2:39:66:20:c1:45:42:ad:2f:ae:57:cd:e1:9e:af:79:30:
         39:4a:ed:37
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5Qjk4MkI5RURBQjQ4
NTcyMDY0OUI5NjFDMzEwMTk0RTBFRjkyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGwpkW5pqMkR/CFFE6pi5z7tvFWekQLOAYIjFbmVediTwL2F/p
AZiST+Tv3pmuAV4WyRaMBsJ7REuy2cfMn9P9oprWmEGYxsaVFb3jnL8IkRGAUZrh
Gh1oV72oqv/j/yAXCiQyvQ37yML91Xq12HqXBGHZMlHmFnpQMvk7pddgy42kw+HN
m5BH3RaX9Clm3D4Xo+A9dHdALWETgwGy1dmH+ikA7h46XozL3PJq/JT1BL0Ikv1r
1UG8NfIK4KSWjOnmWVHqpdBoBIaiwndaGabOwegObMBuzwnUW1jy98RroF+Sglv3
/wI54Qv8a88wrMRGWhBAz43e2AAUBWMYO855AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGbmCue2rSFcgZJuWHDEBlODvkpEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0dibUN1ZTJyU0ZjZ1pKdVdIREVCbE9EdmtwRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxZxwwDQYJKoZIhvcNAQELBQADggEB
ALX0BBzceukcQ4raJ0ii/5/ET0mbInQLQXNn17sY6o8jVhG2pu883Osfmvgwedkn
OX8bMeoIPD5ZkDTgaRxueYF9aSrCZvnAL5JiXOTUmSaKrW5PK2AtALWtXhN3FAmL
rfDYe9Tts9WqkBJ0luRfMTF+CfCIbHryAJ3xqAMzvREmyDFzixZubMkswA6dOmiS
nL7ufg3KxdUxOX194DGsJRo7E+4SE6hHYCDfq/O+u/Pe22ZUJ4LGcWmNfKiaaI/j
YVeKd3/xQzqg/+8fLH40IFLQ212AaFi0sc/kX6TtqfjVIw/NkiMy2/hHUWXCOWYg
wUVCrS+uV83hnq95MDlK7Tc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:19 2026 by rpki-client