Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa
File:                     gSItXZQnHGLgp0b5B7KKsSa74vo.roa (raw, json)
Hash identifier:          idqib1YaT0X5v5pmfh4nH1mk9fHA4SgPNBXdHWjlPq0=
Subject key identifier:   81:22:2D:5D:94:27:1C:62:E0:A7:46:F9:07:B2:8A:B1:26:BB:E2:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       152D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa
Signing time:             Tue 31 Mar 2026 07:59:06 +0000
ROA not before:           Tue 31 Mar 2026 07:59:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.159.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5421 (0x152d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=81222D5D94271C62E0A746F907B28AB126BBE2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:19:ac:aa:d4:1c:19:f4:30:1e:90:07:5d:
                    1d:3f:05:1f:24:ed:16:97:64:7e:49:1e:a8:80:9f:
                    09:bd:55:8a:9d:8a:18:94:b0:d8:20:fa:e4:d1:51:
                    ef:94:e9:60:4b:c1:e5:59:10:7f:81:3b:36:59:79:
                    d6:b6:41:71:c8:70:b3:12:b0:87:8b:cc:ab:13:61:
                    ee:2a:2e:32:16:f9:17:cc:87:5d:67:3d:e4:c7:d1:
                    ea:f3:6c:67:f3:25:17:84:2e:fa:b6:ec:1a:c3:57:
                    c4:a4:5c:2b:50:5d:1e:11:b7:36:e1:b6:24:bd:50:
                    81:64:30:a8:dc:29:11:85:87:01:f2:33:7f:a9:29:
                    ac:2c:18:7e:6b:bb:fc:af:5a:ed:ce:ea:92:b0:99:
                    8b:94:9d:92:26:58:8f:d4:79:4a:e7:84:40:2c:60:
                    c5:06:96:c0:d0:d5:bc:2a:0e:cc:fb:29:5c:dd:e5:
                    e4:eb:b6:09:70:54:aa:ad:28:96:76:8b:71:13:d2:
                    79:c7:ca:22:f2:68:c3:ea:4d:65:cd:59:48:b5:bb:
                    f6:31:38:92:22:9b:1f:99:c9:6f:e0:f8:1e:8d:af:
                    54:8b:ab:ac:86:85:b2:86:28:1a:25:1f:25:6c:85:
                    5e:77:a1:92:12:8d:37:a2:36:c0:6a:d2:23:ff:90:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:2D:5D:94:27:1C:62:E0:A7:46:F9:07:B2:8A:B1:26:BB:E2:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gSItXZQnHGLgp0b5B7KKsSa74vo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:08:88:6a:9e:28:4b:0b:1d:3d:a8:4e:64:16:94:7a:0b:
         9d:b4:dd:b6:bc:e4:3f:ff:6f:f1:8b:7b:d8:67:25:72:c6:ac:
         56:8a:48:5b:b7:6a:e9:2b:6f:5b:f2:32:b5:8e:f0:3d:34:90:
         3b:ae:24:42:c5:dc:bb:f5:28:8c:23:89:8d:a0:64:18:ec:5b:
         7b:a2:6c:3c:16:7c:36:37:ad:88:cb:bd:8e:5e:68:78:c0:92:
         5f:6a:99:40:7c:f6:cb:6b:1a:26:64:47:2e:9c:41:6e:c2:fd:
         58:91:ea:c4:70:6e:c3:e9:7b:4a:cf:2e:30:82:df:f0:37:6e:
         51:32:ea:8c:8a:7f:02:b3:cd:19:92:b7:23:65:b1:e3:b1:28:
         3c:39:19:6a:04:b4:17:55:f9:c7:82:1a:82:dd:b1:c8:98:8d:
         00:1c:4a:36:92:ca:b5:ca:69:43:7c:fb:67:49:15:b2:c7:64:
         ef:5a:f8:99:ab:f4:2e:27:67:a9:22:1c:0e:58:a2:46:1c:50:
         a0:a4:67:53:ce:d2:40:ab:f0:9d:c0:45:ee:14:60:51:ff:c6:
         7c:a3:0d:70:50:96:b9:6b:f2:f6:91:e8:45:05:34:82:f3:28:
         76:e3:72:9f:c6:9e:ab:af:2f:73:31:de:03:c9:a7:4f:ce:db:
         40:e7:15:13
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU5MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgxMjIyRDVEOTQyNzFD
NjJFMEE3NDZGOTA3QjI4QUIxMjZCQkUyRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvCRmsqtQcGfQwHpAHXR0/BR8k7RaXZH5JHqiAnwm9VYqdihiU
sNgg+uTRUe+U6WBLweVZEH+BOzZZeda2QXHIcLMSsIeLzKsTYe4qLjIW+RfMh11n
PeTH0erzbGfzJReELvq27BrDV8SkXCtQXR4RtzbhtiS9UIFkMKjcKRGFhwHyM3+p
KawsGH5ru/yvWu3O6pKwmYuUnZImWI/UeUrnhEAsYMUGlsDQ1bwqDsz7KVzd5eTr
tglwVKqtKJZ2i3ET0nnHyiLyaMPqTWXNWUi1u/YxOJIimx+ZyW/g+B6Nr1SLq6yG
hbKGKBolHyVshV53oZISjTeiNsBq0iP/kBahAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgSItXZQnHGLgp0b5B7KKsSa74vowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2dTSXRYWlFuSEdMZ3AwYjVCN0tLc1NhNzR2by5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADcnxwwDQYJKoZIhvcNAQELBQADggEB
AKcgCIhqnihLCx09qE5kFpR6C5203ba85D//b/GLe9hnJXLGrFaKSFu3aukrb1vy
MrWO8D00kDuuJELF3Lv1KIwjiY2gZBjsW3uibDwWfDY3rYjLvY5eaHjAkl9qmUB8
9strGiZkRy6cQW7C/ViR6sRwbsPpe0rPLjCC3/A3blEy6oyKfwKzzRmStyNlseOx
KDw5GWoEtBdV+ceCGoLdsciYjQAcSjaSyrXKaUN8+2dJFbLHZO9a+Jmr9C4nZ6ki
HA5YokYcUKCkZ1PO0kCr8J3ARe4UYFH/xnyjDXBQlrlr8vaR6EUFNILzKHbjcp/G
nquvL3Mx3gPJp0/O20DnFRM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:02 2026 by rpki-client