Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa
File:                     GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa (raw, json)
Hash identifier:          ACWcGaMcprXbQbNFx3EX34ONO0dfsKMNiouaEs82zMU=
Subject key identifier:   19:D4:1C:E2:3A:79:3E:AB:CA:33:0D:C3:A7:6B:E1:9E:6F:9E:FC:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa
Signing time:             Tue 31 Mar 2026 07:56:40 +0000
ROA not before:           Tue 31 Mar 2026 07:56:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5116 (0x13fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=19D41CE23A793EABCA330DC3A76BE19E6F9EFC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:b9:d6:9b:bd:85:ae:4c:f7:01:3d:64:1e:
                    08:1f:98:c8:5b:d2:0a:bd:ca:87:47:56:a0:de:94:
                    f7:68:38:bf:cb:ac:d9:95:43:34:64:e3:e9:05:5e:
                    d9:0b:bd:0b:81:ea:2d:2f:15:e8:01:fa:4f:e6:d1:
                    c6:00:96:e4:71:3c:ee:92:3d:a3:cd:f9:c2:5b:0c:
                    69:1a:1e:41:d2:c7:f5:45:68:40:3a:ec:a6:76:b8:
                    95:fa:03:ee:fd:ce:31:cb:a7:3b:f3:60:eb:9c:c1:
                    e9:d4:e8:91:3b:d6:45:c4:ec:71:1b:2e:67:95:1e:
                    ad:41:26:39:fd:84:28:fb:5a:89:89:12:58:c0:55:
                    e9:cd:43:2d:92:7b:86:b5:e4:ab:59:25:bf:0a:06:
                    68:23:53:12:cb:da:c9:45:ff:3f:ab:70:57:12:b7:
                    30:d5:4d:e2:30:bd:98:f3:69:0b:f7:99:57:55:ba:
                    27:71:2f:7c:ad:00:60:7c:40:14:3a:83:ad:e8:47:
                    36:37:73:0b:fe:44:44:b1:ae:44:36:17:76:58:ea:
                    31:15:c8:7e:12:28:83:c4:de:d7:65:c5:6d:56:05:
                    6a:48:26:57:9c:e1:e3:9e:4c:16:34:a2:22:c4:04:
                    0b:66:a0:f3:70:0f:ae:40:d6:93:ef:c2:5d:de:d6:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D4:1C:E2:3A:79:3E:AB:CA:33:0D:C3:A7:6B:E1:9E:6F:9E:FC:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GdQc4jp5PqvKMw3Dp2vhnm-e_FM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:89:d5:b1:3a:c4:7a:e5:15:5b:38:64:a8:7e:52:89:30:31:
         28:72:00:c4:f0:0d:33:87:64:22:1a:9c:d8:8f:44:63:1c:35:
         9a:16:36:a0:be:bd:5d:65:bb:ce:f2:35:d5:17:41:26:0d:ae:
         b0:a9:da:2d:ef:bb:fb:e6:5f:b3:7a:60:a4:f5:49:7a:c5:f5:
         40:41:1b:49:95:c3:fd:b8:95:fe:4d:6f:b6:70:0f:8e:53:8b:
         f0:0d:c5:95:06:8c:8e:28:d9:6d:7d:61:a5:3d:c9:38:47:97:
         44:5d:96:18:60:70:86:9e:2b:72:0e:be:36:ce:75:7a:d2:2e:
         5b:9d:34:b5:19:f7:14:0d:1a:38:8b:a1:e8:95:84:6a:25:5f:
         69:94:f5:f7:76:92:f3:f9:5f:c8:af:33:4e:ed:cf:60:14:70:
         e1:27:36:ee:f7:25:98:78:b0:6d:b1:06:10:ba:13:ad:d5:36:
         57:e6:6d:6c:39:e4:a3:29:c3:d7:c3:d4:57:e3:d4:1f:73:72:
         f5:c5:f4:5e:44:1d:09:57:4c:3c:48:dc:15:04:98:0d:b5:3e:
         2c:1f:15:e4:12:c3:1e:63:47:04:a1:d3:95:98:bc:16:eb:0c:
         82:04:5e:e2:cf:29:ab:da:7e:05:31:29:45:75:52:92:c2:bb:
         01:80:9b:90
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU2NDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5RDQxQ0UyM0E3OTNF
QUJDQTMzMERDM0E3NkJFMTlFNkY5RUZDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAm7nWm72Frkz3AT1kHggfmMhb0gq9yodHVqDelPdoOL/LrNmV
QzRk4+kFXtkLvQuB6i0vFegB+k/m0cYAluRxPO6SPaPN+cJbDGkaHkHSx/VFaEA6
7KZ2uJX6A+79zjHLpzvzYOucwenU6JE71kXE7HEbLmeVHq1BJjn9hCj7WomJEljA
VenNQy2Se4a15KtZJb8KBmgjUxLL2slF/z+rcFcStzDVTeIwvZjzaQv3mVdVuidx
L3ytAGB8QBQ6g63oRzY3cwv+RESxrkQ2F3ZY6jEVyH4SKIPE3tdlxW1WBWpIJlec
4eOeTBY0oiLEBAtmoPNwD65A1pPvwl3e1k+/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGdQc4jp5PqvKMw3Dp2vhnm+e/FMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0dkUWM0anA1UHF2S013M0RwMnZobm0tZV9GTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIxYqgwDQYJKoZIhvcNAQELBQADggEB
AMyJ1bE6xHrlFVs4ZKh+UokwMShyAMTwDTOHZCIanNiPRGMcNZoWNqC+vV1lu87y
NdUXQSYNrrCp2i3vu/vmX7N6YKT1SXrF9UBBG0mVw/24lf5Nb7ZwD45Ti/ANxZUG
jI4o2W19YaU9yThHl0RdlhhgcIaeK3IOvjbOdXrSLludNLUZ9xQNGjiLoeiVhGol
X2mU9fd2kvP5X8ivM07tz2AUcOEnNu73JZh4sG2xBhC6E63VNlfmbWw55KMpw9fD
1Ffj1B9zcvXF9F5EHQlXTDxI3BUEmA21PiwfFeQSwx5jRwSh05WYvBbrDIIEXuLP
KavafgUxKUV1UpLCuwGAm5A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:04 2026 by rpki-client