Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa
File:                     GxfMD8bFJX_W397DEJIzx1Aw__w.roa (raw, json)
Hash identifier:          Q173NQ2aEcAqqkchhTd3IMMZd7pdTlw7wLFombG8ZwI=
Subject key identifier:   1B:17:CC:0F:C6:C5:25:7F:D6:DF:DE:C3:10:92:33:C7:50:30:FF:FC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1688
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa
Signing time:             Tue 31 Mar 2026 08:01:58 +0000
ROA not before:           Tue 31 Mar 2026 08:01:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5768 (0x1688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B17CC0FC6C5257FD6DFDEC3109233C75030FFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:35:f7:7c:3e:22:45:8d:e9:e4:64:a9:c9:
                    c9:9b:cb:26:df:70:a9:5e:50:47:af:73:fe:11:a2:
                    8b:41:6a:ab:38:7d:17:d8:e6:df:ca:f5:d5:69:0c:
                    f0:8f:82:cd:db:54:e2:2d:ad:5c:45:57:e3:3e:bf:
                    90:76:b9:74:7b:88:7c:08:2b:30:8c:f5:c0:e7:f0:
                    25:3a:ce:07:56:d6:76:64:2d:ea:27:f2:ef:ef:b0:
                    94:41:b0:19:57:2b:d0:f9:8d:7a:e5:97:9a:be:12:
                    12:ee:5a:c0:9c:fc:10:ab:34:d4:fc:ea:60:81:28:
                    c7:2a:fd:67:03:f2:46:30:1c:0d:84:ea:b1:f8:fd:
                    be:4b:c3:2e:c8:1f:4a:de:13:23:a1:07:40:aa:f5:
                    a0:17:94:d4:61:c9:fa:da:2e:b2:2c:88:0a:7f:62:
                    92:bb:3b:14:fc:6f:2c:92:bf:32:3f:19:b0:06:78:
                    38:21:58:05:ab:21:42:cb:d9:49:7a:e8:ae:a0:cc:
                    53:95:ad:3b:d2:cb:96:44:5a:0e:71:00:e1:a4:63:
                    a8:b3:be:02:0d:37:68:2d:ea:9d:ac:99:94:ef:10:
                    a1:ce:a5:e3:1b:9f:2b:a6:2f:41:7d:cc:8f:83:f5:
                    b6:d7:bc:1d:7e:8d:60:66:0c:cc:91:08:30:38:3c:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:CC:0F:C6:C5:25:7F:D6:DF:DE:C3:10:92:33:C7:50:30:FF:FC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GxfMD8bFJX_W397DEJIzx1Aw__w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c8:a4:e6:44:c4:9c:93:29:e2:53:92:49:66:55:6c:65:1d:b1:
         24:34:09:a3:1d:33:e5:fa:1d:88:cd:ba:cf:1a:5d:50:d0:05:
         cc:06:69:1c:c0:d5:3e:84:30:8e:5f:42:ed:96:62:2d:4d:1b:
         75:e6:b9:a0:80:e0:46:41:cd:4f:f4:58:b3:ef:c7:5c:7f:df:
         74:9b:6c:bd:8c:71:a9:98:b7:91:54:79:71:56:7f:fa:38:7a:
         cf:7e:9e:5e:fc:ca:01:cd:1f:8a:8d:a7:82:3f:21:39:25:10:
         62:ff:0a:66:0f:f6:d3:32:ba:9c:ba:4e:b4:84:7d:9a:ad:0f:
         3d:6d:c0:ef:f7:16:93:07:21:59:b6:ef:bc:df:38:a2:62:b3:
         61:64:6a:cf:9d:9a:76:66:b9:82:a1:98:51:63:ac:d1:a9:4f:
         dd:69:af:3c:59:b4:79:be:98:58:f2:54:7e:f2:bf:0d:3d:c1:
         6c:20:71:ec:60:c5:f2:b5:2f:f1:94:df:98:aa:d1:5e:71:4b:
         36:ee:0c:68:f4:84:0a:66:a2:78:87:53:46:56:1e:de:91:36:
         2b:e7:39:2b:e9:cb:9f:dc:11:2f:47:76:76:44:64:de:6b:ed:
         09:97:49:c3:5f:6e:b5:78:fd:aa:5d:06:0b:31:f9:f8:4c:43:
         25:ea:d9:38
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAxNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCMTdDQzBGQzZDNTI1
N0ZENkRGREVDMzEwOTIzM0M3NTAzMEZGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdGzX3fD4iRY3p5GSpycmbyybfcKleUEevc/4RootBaqs4fRfY
5t/K9dVpDPCPgs3bVOItrVxFV+M+v5B2uXR7iHwIKzCM9cDn8CU6zgdW1nZkLeon
8u/vsJRBsBlXK9D5jXrll5q+EhLuWsCc/BCrNNT86mCBKMcq/WcD8kYwHA2E6rH4
/b5Lwy7IH0reEyOhB0Cq9aAXlNRhyfraLrIsiAp/YpK7OxT8byySvzI/GbAGeDgh
WAWrIULL2Ul66K6gzFOVrTvSy5ZEWg5xAOGkY6izvgINN2gt6p2smZTvEKHOpeMb
nyumL0F9zI+D9bbXvB1+jWBmDMyRCDA4PFVdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGxfMD8bFJX/W397DEJIzx1Aw//wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0d4Zk1EOGJGSlhfVzM5N0RFSkl6eDFBd19fdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxaIAwDQYJKoZIhvcNAQELBQADggEB
AMik5kTEnJMp4lOSSWZVbGUdsSQ0CaMdM+X6HYjNus8aXVDQBcwGaRzA1T6EMI5f
Qu2WYi1NG3XmuaCA4EZBzU/0WLPvx1x/33SbbL2McamYt5FUeXFWf/o4es9+nl78
ygHNH4qNp4I/ITklEGL/CmYP9tMyupy6TrSEfZqtDz1twO/3FpMHIVm277zfOKJi
s2Fkas+dmnZmuYKhmFFjrNGpT91przxZtHm+mFjyVH7yvw09wWwgcexgxfK1L/GU
35iq0V5xSzbuDGj0hApmoniHU0ZWHt6RNivnOSvpy5/cES9HdnZEZN5r7QmXScNf
brV4/apdBgsx+fhMQyXq2Tg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:27 2026 by rpki-client