Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/GCOAbGJnC1Efezgt2JzfwpE8gL4.roa
File:                     GCOAbGJnC1Efezgt2JzfwpE8gL4.roa (raw, json)
Hash identifier:          z5UtJVrqKIAb8vJBOWfugcHSKZwHCPkPTAvpvSFrz3U=
Subject key identifier:   18:23:80:6C:62:67:0B:51:1F:7B:38:2D:D8:9C:DF:C2:91:3C:80:BE
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       8B
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GCOAbGJnC1Efezgt2JzfwpE8gL4.roa
Signing time:             Tue 31 Mar 2026 07:37:48 +0000
ROA not before:           Tue 31 Mar 2026 07:37:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Mar 31 07:37:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1823806C62670B511F7B382DD89CDFC2913C80BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fd:c7:3f:c0:f5:d0:f3:24:e1:95:32:6f:c3:
                    97:01:ba:1a:15:95:47:44:ca:2d:3e:6e:08:61:ae:
                    cc:70:1f:32:41:f7:08:a1:e7:66:9b:fb:61:16:d9:
                    cc:0b:73:8f:bc:25:44:d8:48:99:26:7a:b2:1f:2f:
                    39:08:fc:dc:1a:2f:cb:fd:42:84:c0:23:4d:71:91:
                    35:23:b8:88:e8:64:3e:31:f5:aa:19:d9:18:79:6c:
                    6d:34:21:db:b4:4f:01:54:3a:d0:98:4e:cd:24:87:
                    cf:2d:3a:e8:0f:c4:c9:c4:dd:40:ef:7a:9b:3b:84:
                    9c:34:7b:33:42:96:11:dd:5c:d6:a8:83:af:1b:75:
                    59:53:0f:b6:78:73:e4:f0:ec:a4:02:ad:72:d7:51:
                    74:ef:18:08:15:3c:42:94:d5:7b:1a:94:03:68:14:
                    3c:3e:fc:80:58:28:25:7b:6c:ad:0d:c6:72:03:18:
                    da:6e:f8:ce:60:69:3b:90:ff:ab:5c:f2:93:eb:f4:
                    9e:5b:ee:88:97:b9:52:a9:3a:39:35:ad:f5:77:59:
                    5d:2f:65:60:ef:12:cd:85:d0:5e:39:7b:33:70:61:
                    69:74:49:06:af:9f:c3:a5:8a:2d:7f:1c:af:a9:d8:
                    39:a0:88:c4:e5:5e:1e:5e:c1:42:ba:b6:b1:35:71:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:80:6C:62:67:0B:51:1F:7B:38:2D:D8:9C:DF:C2:91:3C:80:BE
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GCOAbGJnC1Efezgt2JzfwpE8gL4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:15:bf:99:1f:92:93:0d:bb:7e:58:a8:70:e7:19:50:6b:d1:
         7c:c7:a6:ae:26:dd:91:dc:97:62:ce:d7:de:49:6f:2f:1a:d2:
         8e:40:88:d2:e4:e3:88:eb:93:8f:ef:c2:31:ef:49:34:98:de:
         b9:ee:23:f2:42:ff:ec:c6:38:78:69:36:0d:85:a2:93:01:6d:
         e5:2a:ac:7f:69:e5:ab:20:24:3d:14:fc:ce:f7:09:d1:31:a4:
         e6:ed:c5:09:aa:54:07:7c:3d:62:28:76:d6:c0:78:43:7c:83:
         11:a2:8a:c7:3d:f8:d4:b4:9e:91:29:c5:30:a2:54:15:b1:5d:
         0e:35:8f:86:90:7c:f2:4c:7a:21:b5:6b:4e:48:66:5b:2d:7b:
         85:25:e9:2e:44:df:c4:b4:fe:17:ef:69:e2:00:4e:3a:0a:05:
         0a:9b:05:a5:e0:ff:c9:f6:85:e0:1f:ed:67:58:2e:0a:13:b6:
         15:c6:87:eb:a9:fa:5f:15:f4:a0:d7:01:0a:71:3c:f9:d6:ca:
         dd:b0:69:53:23:b6:c0:6f:9f:fc:19:6b:7a:a7:f7:6e:4e:b4:
         54:3e:29:2b:10:ce:3f:ae:7d:da:58:cc:25:2e:4d:c2:9f:86:
         35:29:3f:ba:bb:84:2c:3d:e3:5b:88:75:d4:e3:1a:52:f5:38:
         59:66:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:04 2026 by rpki-client