Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWxDS9yBk74hr63mGifADIFbpc.roa
File:                     gIWxDS9yBk74hr63mGifADIFbpc.roa (raw, json)
Hash identifier:          +bng24lAKtsWzMw3756Rm5dJ9UVl/CdA0jCTa/Ewx08=
Subject key identifier:   80:85:B1:0D:2F:72:06:4E:F8:86:BE:B7:98:68:9F:00:32:05:6E:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15A5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWxDS9yBk74hr63mGifADIFbpc.roa
Signing time:             Tue 31 Mar 2026 08:00:02 +0000
ROA not before:           Tue 31 Mar 2026 08:00:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5541 (0x15a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8085B10D2F72064EF886BEB798689F0032056E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:8d:5a:af:7b:5c:6b:ae:71:18:54:72:2b:
                    78:6f:20:c3:24:01:62:b5:56:4f:b7:23:31:47:cc:
                    89:f5:6d:5d:37:72:41:a6:22:2c:de:74:91:e3:5b:
                    47:86:32:f0:0e:51:41:15:86:ac:79:07:98:8d:0e:
                    7c:7d:3c:b5:0c:d2:2f:90:75:42:7b:13:9d:f8:ec:
                    5e:85:b2:3b:1b:60:59:6a:7c:c1:ea:87:82:4a:82:
                    9f:c0:e6:b0:e7:05:dc:4a:4c:73:38:a1:81:1a:4b:
                    d3:dc:66:a4:b9:e5:0c:93:ff:2f:9d:a8:c6:0d:c3:
                    37:fc:67:16:ac:96:6f:18:00:68:02:e3:49:86:9e:
                    01:ca:26:f8:b3:97:7f:1a:6e:30:60:13:cf:08:1a:
                    14:1c:0e:d3:38:73:f0:cc:72:c3:3a:89:bc:71:35:
                    be:9e:da:0e:09:0e:ad:78:22:4b:82:43:33:fe:ed:
                    f7:49:28:48:22:0e:4b:f4:02:83:36:89:84:6d:b3:
                    ac:b5:d1:b0:35:6f:93:61:02:fd:77:83:bd:4d:19:
                    35:48:8e:67:40:87:e4:02:d2:e1:1f:e0:88:af:bc:
                    23:06:b1:eb:6f:97:c3:0d:b8:00:ca:4f:a4:3c:fd:
                    a9:02:ca:59:e7:7d:30:e2:92:4d:97:fe:10:6f:11:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:B1:0D:2F:72:06:4E:F8:86:BE:B7:98:68:9F:00:32:05:6E:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWxDS9yBk74hr63mGifADIFbpc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:49:4d:57:3f:72:a7:ea:0a:4a:47:fe:39:a4:8e:1b:d6:7d:
         b8:e0:5b:99:dc:9e:a9:ea:0a:fe:f2:4e:f4:a3:a0:ed:4f:15:
         9a:22:0a:39:7d:49:24:ab:40:69:58:7e:0b:48:6d:2a:3a:51:
         3c:94:2f:4e:7c:9d:8c:20:05:f1:60:29:f9:42:f2:3c:ab:e6:
         08:d6:c3:da:e9:9d:07:84:b7:e9:44:a5:99:46:9b:51:3d:dc:
         11:63:aa:55:9c:db:b5:23:06:61:64:6c:c8:9f:83:2f:00:c0:
         fd:b5:93:fc:da:4e:9a:55:cd:3d:f3:2d:b6:54:ee:7a:27:2c:
         b1:4b:48:bd:97:91:bd:ed:4c:b2:6a:f1:60:f2:91:d5:fb:92:
         cb:f1:86:2a:eb:d1:91:20:ea:43:a5:7d:81:d2:03:1a:c0:33:
         ef:64:68:b0:eb:ec:4f:a2:af:f4:59:5d:9e:09:79:3a:2b:aa:
         06:52:92:89:4f:87:4f:47:ea:1d:e4:bc:49:58:f0:df:12:44:
         4f:32:d9:19:9d:6a:ad:8a:07:d8:44:71:a6:98:d8:a1:d6:fa:
         94:8e:dc:f0:61:c3:84:19:52:89:62:23:af:2c:c3:0b:3e:78:
         50:32:a7:1f:7b:54:85:d9:09:06:9a:3b:10:27:3a:15:80:a1:
         3a:25:ee:98
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAwMDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwODVCMTBEMkY3MjA2
NEVGODg2QkVCNzk4Njg5RjAwMzIwNTZFOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLyY1ar3tca65xGFRyK3hvIMMkAWK1Vk+3IzFHzIn1bV03ckGm
IizedJHjW0eGMvAOUUEVhqx5B5iNDnx9PLUM0i+QdUJ7E5347F6FsjsbYFlqfMHq
h4JKgp/A5rDnBdxKTHM4oYEaS9PcZqS55QyT/y+dqMYNwzf8Zxaslm8YAGgC40mG
ngHKJvizl38abjBgE88IGhQcDtM4c/DMcsM6ibxxNb6e2g4JDq14IkuCQzP+7fdJ
KEgiDkv0AoM2iYRts6y10bA1b5NhAv13g71NGTVIjmdAh+QC0uEf4IivvCMGsetv
l8MNuADKT6Q8/akCylnnfTDikk2X/hBvEZsxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgIWxDS9yBk74hr63mGifADIFbpcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2dJV3hEUzl5Qms3NGhyNjNtR2lmQURJRmJwYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExaVAwDQYJKoZIhvcNAQELBQADggEB
AK1JTVc/cqfqCkpH/jmkjhvWfbjgW5ncnqnqCv7yTvSjoO1PFZoiCjl9SSSrQGlY
fgtIbSo6UTyUL058nYwgBfFgKflC8jyr5gjWw9rpnQeEt+lEpZlGm1E93BFjqlWc
27UjBmFkbMifgy8AwP21k/zaTppVzT3zLbZU7nonLLFLSL2Xkb3tTLJq8WDykdX7
ksvxhirr0ZEg6kOlfYHSAxrAM+9kaLDr7E+ir/RZXZ4JeTorqgZSkolPh09H6h3k
vElY8N8SRE8y2Rmdaq2KB9hEcaaY2KHW+pSO3PBhw4QZUoliI68swws+eFAypx97
VIXZCQaaOxAnOhWAoTol7pg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:35 2026 by rpki-client