Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Gic_eLWQCkkf3NykAFmCYIZc0Yk.roa
File:                     Gic_eLWQCkkf3NykAFmCYIZc0Yk.roa (raw, json)
Hash identifier:          ywEksqQzWiC+x7PyBDPPVuyIe4G+Supx558QaEnd+KE=
Subject key identifier:   1A:27:3F:78:B5:90:0A:49:1F:DC:DC:A4:00:59:82:60:86:5C:D1:89
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0261
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Gic_eLWQCkkf3NykAFmCYIZc0Yk.roa
Signing time:             Sun 01 Feb 2026 01:31:48 +0000
ROA not before:           Sun 01 Feb 2026 01:31:48 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        122.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:48 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=1A273F78B5900A491FDCDCA400598260865CD189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d2:f4:22:55:0a:10:27:2b:c6:d8:f1:a6:ae:
                    27:4a:06:27:3b:45:68:5c:b3:27:d9:42:72:cb:3e:
                    e7:66:40:93:f2:2e:e0:8c:6c:74:d7:d8:09:7c:af:
                    f5:c4:44:20:59:5d:9e:cc:0a:ff:58:c2:cf:ee:7f:
                    2b:11:6a:80:0a:c4:24:5d:4f:f7:97:1f:5d:aa:bb:
                    8e:96:73:45:43:b3:7b:d9:c7:1b:0f:65:c0:3d:7c:
                    21:57:49:0e:60:cf:6c:a0:4b:81:d4:95:e8:f3:42:
                    a2:fa:db:ee:4f:f8:c8:14:f1:67:13:1b:ad:17:ad:
                    8e:a1:7e:76:96:eb:4e:b5:45:1a:0c:7c:55:ba:75:
                    3f:c3:2f:af:cc:3e:50:57:fd:97:1a:94:21:61:5d:
                    75:35:a8:e2:91:30:6a:c4:c7:d7:af:32:56:af:6d:
                    ca:8d:4c:60:2b:e6:a9:0d:2d:94:ba:13:d1:06:c3:
                    a1:1b:94:a0:57:60:9c:7f:66:d3:43:53:96:21:0e:
                    48:7e:f3:9c:6b:95:2e:c6:d5:c9:44:69:49:c8:26:
                    d8:44:15:62:e1:ce:57:75:f0:a2:8e:9b:d6:62:ad:
                    54:86:34:0c:f9:d7:f6:c9:c9:ef:f8:f6:a3:4b:0c:
                    19:9c:d4:18:ef:4e:53:65:d9:2e:63:f6:80:b6:0f:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:27:3F:78:B5:90:0A:49:1F:DC:DC:A4:00:59:82:60:86:5C:D1:89
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Gic_eLWQCkkf3NykAFmCYIZc0Yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:65:82:54:d3:bd:06:c7:35:c1:b2:84:8e:f6:81:a8:f8:
         4e:66:d7:c6:10:b7:a9:7d:3f:fe:d3:bc:dc:ab:a0:c9:05:fd:
         9a:1a:04:78:bc:64:8a:81:8a:82:76:e2:2f:d7:5b:47:fa:96:
         40:fa:e4:08:00:42:13:cb:89:ef:87:38:ac:16:e6:49:8c:4c:
         2b:4e:89:fa:d5:1b:d3:b2:02:1a:7a:60:b2:88:b2:9a:71:4a:
         1d:b9:f2:45:50:82:fa:50:66:b3:9f:88:f1:57:18:00:d4:f2:
         28:68:15:af:e3:a7:e9:2f:11:ac:3f:cd:d6:a9:6d:74:f2:e5:
         8d:a8:7d:f3:a5:41:4c:d2:6d:88:f8:73:0d:e7:fe:ad:7a:09:
         fa:35:e6:24:33:a2:dd:6e:a2:14:d0:b1:59:5b:18:cf:68:c7:
         ba:b3:04:79:45:a1:f7:2d:bf:ec:2e:a9:3d:19:4c:61:4c:8d:
         92:e7:07:94:74:8a:ea:6f:5e:81:31:b9:b6:31:3e:a0:1c:79:
         98:39:0a:ba:3a:86:44:be:4d:96:cd:db:a5:fb:7d:8f:82:39:
         c1:76:2f:2a:b9:76:23:06:41:02:d0:79:ae:16:d4:c9:6e:8c:
         b0:9f:ad:56:b6:ae:1c:2b:d0:8d:c6:b4:62:dc:d0:26:d0:09:
         19:12:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:01 2026 by rpki-client