Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/GJFXbD5UlPvBVGvBQ62zZ6cmU3c.roa
File:                     GJFXbD5UlPvBVGvBQ62zZ6cmU3c.roa (raw, json)
Hash identifier:          oBP4ukjKd0eBS3tgXXLJIkC9auQZpC2UJ1jxgJ3UpMs=
Subject key identifier:   18:91:57:6C:3E:54:94:FB:C1:54:6B:C1:43:AD:B3:67:A7:26:53:77
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0250
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/GJFXbD5UlPvBVGvBQ62zZ6cmU3c.roa
Signing time:             Sun 01 Feb 2026 01:31:37 +0000
ROA not before:           Sun 01 Feb 2026 01:31:37 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        211.130.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:37 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=1891576C3E5494FBC1546BC143ADB367A7265377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:87:ba:78:c9:fa:8d:d1:d3:51:33:51:a3:
                    98:61:5d:c7:78:43:91:43:de:34:4b:a9:e4:6d:40:
                    81:af:dd:32:4c:84:63:cb:d1:dd:ce:08:b2:6b:11:
                    e6:47:99:14:f2:89:46:37:cb:ea:85:98:7c:32:5f:
                    2b:21:90:f1:b9:3b:a1:fd:30:34:43:c1:25:77:74:
                    55:ea:72:5d:29:57:b3:a8:83:10:da:25:16:a6:25:
                    45:03:32:46:72:22:ad:67:f3:93:49:bd:35:ae:6d:
                    c6:bd:18:f1:a4:fc:3c:44:d7:fa:ee:aa:d7:1f:37:
                    b0:2c:86:3d:ce:6b:65:64:3c:52:85:47:83:2b:96:
                    ef:1c:66:39:6c:73:bd:d7:13:e3:fd:34:b1:ef:30:
                    54:0e:88:00:70:da:b6:0b:82:ad:08:5d:fe:e3:52:
                    3f:47:8c:02:b7:74:2b:50:26:25:13:ad:a9:e5:e5:
                    bc:d7:34:97:5e:02:75:ed:58:41:46:0a:02:05:6e:
                    22:a1:46:ad:bc:99:33:04:f3:c5:74:2f:54:13:1a:
                    56:75:cf:c8:44:c8:25:24:c0:3e:71:e6:b8:a9:a4:
                    2c:9f:cb:34:52:ec:09:3b:a7:30:3c:db:33:6e:c2:
                    08:90:dc:d1:34:55:16:e5:40:d1:4b:eb:3b:02:51:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:57:6C:3E:54:94:FB:C1:54:6B:C1:43:AD:B3:67:A7:26:53:77
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/GJFXbD5UlPvBVGvBQ62zZ6cmU3c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:3e:c4:44:36:c0:38:21:03:23:01:69:24:ed:8a:cc:97:
         63:6c:7c:13:13:cf:05:d0:1f:1b:23:4f:18:3c:52:25:02:fd:
         69:f5:c7:22:02:04:f7:8a:8c:5b:25:2e:86:dd:a5:91:9c:77:
         ac:20:b1:6b:0b:57:f1:66:c6:ca:1b:bd:e6:c7:5c:31:82:25:
         53:23:88:a8:77:dd:f6:67:e3:16:49:8d:15:60:53:96:2b:ec:
         56:47:09:12:69:a6:67:e6:f0:82:82:30:5c:d9:3c:62:b9:11:
         21:d7:cd:4f:de:0c:50:35:2d:2a:e5:a5:af:67:bb:3e:41:33:
         42:ff:2a:81:c4:c2:95:0d:65:a1:79:a1:df:c0:30:09:d7:c1:
         b8:f0:4c:8b:b6:bb:83:65:b1:fe:1e:13:91:91:75:bd:3e:9d:
         a8:0c:ba:24:78:21:24:37:88:76:3d:b0:fd:e4:8f:03:28:81:
         7f:7d:df:f1:3d:e0:cf:40:0b:ba:fc:a6:32:c7:71:ad:ab:b3:
         52:f6:84:b6:81:5f:bc:54:87:a8:fa:e4:ac:e4:ab:33:78:62:
         79:f3:19:4e:6c:8f:96:a0:75:fa:1b:2a:64:de:5c:7e:5a:4a:
         39:a9:5c:65:0b:cf:f2:56:84:5f:5a:22:8c:c0:63:1a:e5:8f:
         64:26:4a:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAyMDEw
MTMxMzdaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4OTE1NzZDM0U1NDk0
RkJDMTU0NkJDMTQzQURCMzY3QTcyNjUzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLEoe6eMn6jdHTUTNRo5hhXcd4Q5FD3jRLqeRtQIGv3TJMhGPL
0d3OCLJrEeZHmRTyiUY3y+qFmHwyXyshkPG5O6H9MDRDwSV3dFXqcl0pV7OogxDa
JRamJUUDMkZyIq1n85NJvTWubca9GPGk/DxE1/ruqtcfN7Ashj3Oa2VkPFKFR4Mr
lu8cZjlsc73XE+P9NLHvMFQOiABw2rYLgq0IXf7jUj9HjAK3dCtQJiUTranl5bzX
NJdeAnXtWEFGCgIFbiKhRq28mTME88V0L1QTGlZ1z8hEyCUkwD5x5rippCyfyzRS
7Ak7pzA82zNuwgiQ3NE0VRblQNFL6zsCUb2XAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGJFXbD5UlPvBVGvBQ62zZ6cmU3cwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0dKRlhiRDVVbFB2QlZHdkJRNjJ6WjZjbVUzYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXTgkAwDQYJKoZIhvcNAQELBQADggEBAIXtPsRENsA4IQMjAWkk7YrMl2Ns
fBMTzwXQHxsjTxg8UiUC/Wn1xyICBPeKjFslLobdpZGcd6wgsWsLV/FmxsobvebH
XDGCJVMjiKh33fZn4xZJjRVgU5Yr7FZHCRJppmfm8IKCMFzZPGK5ESHXzU/eDFA1
LSrlpa9nuz5BM0L/KoHEwpUNZaF5od/AMAnXwbjwTIu2u4Nlsf4eE5GRdb0+nagM
uiR4ISQ3iHY9sP3kjwMogX993/E94M9AC7r8pjLHca2rs1L2hLaBX7xUh6j65Kzk
qzN4YnnzGU5sj5agdfobKmTeXH5aSjmpXGULz/JWhF9aIozAYxrlj2QmSnw=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:59 2026 by rpki-client