Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gcb_JC5T1hF5Njce7uGS0gjdfPs.roa
File:                     Gcb_JC5T1hF5Njce7uGS0gjdfPs.roa (raw, json)
Hash identifier:          DT+eR5MfZDtHq+X5LrpbxAKzgt37PGgyc2+3QrgCqew=
Subject key identifier:   19:C6:FF:24:2E:53:D6:11:79:36:37:1E:EE:E1:92:D2:08:DD:7C:FB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1836
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gcb_JC5T1hF5Njce7uGS0gjdfPs.roa
Signing time:             Tue 31 Mar 2026 08:05:30 +0000
ROA not before:           Tue 31 Mar 2026 08:05:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6198 (0x1836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=19C6FF242E53D6117936371EEEE192D208DD7CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:c6:49:f5:58:57:93:46:30:92:ae:c1:73:
                    85:fe:56:37:ee:19:1f:2a:6d:65:47:0d:4e:d0:6f:
                    45:c8:26:63:d6:a0:84:bc:ef:24:53:d7:59:10:65:
                    c7:6f:4a:45:10:cd:66:5a:5d:58:6d:80:94:d9:17:
                    7b:14:b2:7a:2f:69:3b:da:81:ba:36:62:80:2e:74:
                    67:38:c6:04:7a:c3:3f:fa:ad:f5:0e:07:79:bc:40:
                    ea:90:c4:43:99:27:c9:59:18:cb:ca:c6:7f:d7:8e:
                    26:0e:24:1b:7c:bc:20:12:4c:46:d9:e6:65:1c:0f:
                    0e:3f:3b:51:fe:ac:dc:11:82:c9:b7:8a:03:ee:47:
                    ee:08:9a:e4:7a:45:b3:43:03:2a:d2:d5:4c:4c:63:
                    ad:46:51:94:36:97:c9:7f:1e:d8:fe:5d:12:b5:ec:
                    48:22:45:1b:4c:64:75:0a:b6:d6:7b:b7:af:6e:45:
                    64:3b:71:57:8b:cd:6d:b4:ff:17:42:74:e9:85:14:
                    65:33:da:cb:6a:a0:9e:e6:b4:ea:4c:0a:cb:75:d8:
                    91:e2:f5:33:0f:a8:1d:90:66:7c:37:b1:10:4a:b7:
                    e6:1d:88:2a:8c:7b:bf:14:9f:2d:30:24:52:b0:bb:
                    04:25:4f:20:74:aa:47:bb:69:5b:95:97:01:29:64:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:FF:24:2E:53:D6:11:79:36:37:1E:EE:E1:92:D2:08:DD:7C:FB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Gcb_JC5T1hF5Njce7uGS0gjdfPs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a9:82:aa:4f:c0:f9:e6:79:6c:28:91:22:46:5c:e7:f1:ed:
         ed:a7:37:d3:d6:1d:ec:d9:cb:4e:fa:5f:83:f8:33:2f:d3:dc:
         f1:ac:98:dc:13:77:08:f0:b0:c4:96:b6:ba:be:c1:85:09:92:
         e7:d8:44:bd:d6:c6:b3:b6:8e:97:f5:cc:62:70:2c:a7:23:24:
         84:67:cb:83:00:6d:a1:14:65:cf:a6:35:2a:4c:83:2b:d8:98:
         12:31:b6:5c:b2:0a:7a:c3:51:2e:07:e7:12:d4:3c:00:6a:ff:
         6e:4e:0b:54:05:e1:1b:3e:88:a7:8f:44:15:a1:d9:d6:f4:0f:
         4d:6c:8e:a7:99:0b:af:a5:93:96:93:22:a8:17:9c:2b:3c:28:
         63:ca:a9:9b:e0:22:0f:46:2f:7c:4d:57:62:09:c3:36:4b:8d:
         83:82:a5:c4:4f:c8:7b:3d:fc:56:cd:3a:1c:eb:61:bc:74:41:
         11:d6:2c:7e:c3:1d:5f:ca:7e:38:18:88:4a:08:f1:69:2c:39:
         67:96:67:91:80:f3:f3:94:31:49:b9:66:5b:f1:76:79:ba:0c:
         1d:03:99:ec:d2:10:9c:f2:4e:f0:06:b1:96:bd:d1:e7:9b:b6:
         26:40:95:df:1c:f4:9b:e9:64:2f:bb:58:11:70:22:bd:d7:f1:
         58:5e:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:10 2026 by rpki-client