Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqgVMX7BcwMQ5DBWuOBqfc9CYeI.roa
File:                     gqgVMX7BcwMQ5DBWuOBqfc9CYeI.roa (raw, json)
Hash identifier:          /cWtw8eh3X5QY/VT98ZfOkwS91GincSmyaH+EAaYGKI=
Subject key identifier:   82:A8:15:31:7E:C1:73:03:10:E4:30:56:B8:E0:6A:7D:CF:42:61:E2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1420
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqgVMX7BcwMQ5DBWuOBqfc9CYeI.roa
Signing time:             Tue 31 Mar 2026 07:56:54 +0000
ROA not before:           Tue 31 Mar 2026 07:56:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5152 (0x1420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82A815317EC1730310E43056B8E06A7DCF4261E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:7c:f8:3d:5c:61:d0:ab:fb:05:9d:1b:1d:
                    e3:4e:38:2e:24:2e:60:69:e4:7f:b7:2b:8b:17:da:
                    bb:f2:42:37:bf:f8:90:ad:f6:da:91:07:98:73:fa:
                    54:0b:ad:c8:b1:1b:f1:17:1a:80:d5:a6:66:51:11:
                    b4:a8:d1:0b:c7:76:8f:d1:a3:f2:06:81:91:d5:59:
                    5c:a2:58:b8:c0:18:f5:9e:4a:21:12:65:5d:e5:88:
                    c2:d4:62:83:c0:6f:f5:fd:1d:24:1d:cb:68:26:84:
                    46:c3:83:bd:26:f8:b4:d1:8b:61:93:5b:e8:49:10:
                    6b:9b:e1:86:8c:16:d5:87:86:a7:8d:5f:02:e4:ee:
                    e0:ee:63:b7:d2:dc:9c:35:51:d7:c1:9b:e5:46:16:
                    9a:52:98:f1:c2:47:19:c4:71:1b:78:47:7e:04:d4:
                    c0:90:cf:a7:da:f2:18:f4:74:25:15:bb:74:36:c6:
                    29:86:08:88:08:06:49:3d:6b:56:52:a4:2e:d7:18:
                    d8:05:28:c1:96:c8:10:4d:18:57:17:b5:69:62:ca:
                    ca:41:5f:3f:fa:76:33:43:88:00:3b:5c:48:e0:b5:
                    ca:08:b6:97:69:27:35:22:b0:ef:c2:67:e6:65:67:
                    ba:df:d5:95:1b:49:71:a8:41:65:b3:03:2f:94:12:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:15:31:7E:C1:73:03:10:E4:30:56:B8:E0:6A:7D:CF:42:61:E2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gqgVMX7BcwMQ5DBWuOBqfc9CYeI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:58:36:2a:f7:7b:10:0f:57:72:6f:9c:47:1e:24:f2:12:99:
         09:77:53:d9:cc:18:e5:76:6c:f0:17:47:6f:23:13:ff:be:08:
         7f:1a:e3:c3:fc:c3:1a:eb:b6:8d:a3:d1:e4:56:60:9b:f6:2a:
         98:e1:58:58:e2:10:c3:83:9f:79:43:e0:3a:ab:8b:fe:a2:b6:
         ce:96:1c:f9:f9:27:7f:b3:d1:44:35:20:cc:74:6b:17:57:e6:
         50:3a:ea:c8:6b:86:a0:40:90:1c:f8:2e:7b:18:fd:2f:8d:26:
         53:09:d6:d1:b0:dd:f8:c0:ec:11:70:38:04:1a:8e:7c:1b:32:
         08:37:06:85:0e:e4:73:30:df:56:16:0b:04:7f:c7:dc:a2:bd:
         df:16:58:9e:9b:86:7b:af:8b:5d:a3:90:0a:3e:e7:7d:aa:ce:
         c1:14:a5:16:f9:7e:62:58:c6:e5:86:d3:e0:ba:41:ed:f3:5c:
         e4:ae:07:da:ad:26:0b:69:c2:8c:d4:0a:f2:8a:d8:c5:ef:e1:
         e2:c5:37:5b:e7:f9:4a:60:06:6a:a5:03:5a:3e:0d:de:8e:e2:
         1a:e9:59:26:bd:e4:0f:cf:7b:51:f2:aa:13:8e:0e:9b:29:c9:
         57:bd:be:6e:a1:71:6d:e8:71:77:b3:52:c9:e8:19:68:21:cc:
         96:9d:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:33 2026 by rpki-client