Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/Gzzm5G1j-N8NFKj3AacsDEbicmI.roa
File:                     Gzzm5G1j-N8NFKj3AacsDEbicmI.roa (raw, json)
Hash identifier:          9SmlwwHjc8gbrn0kuuvXhOfDjcKB6NAsUQoj/AUNLLU=
Subject key identifier:   1B:3C:E6:E4:6D:63:F8:DF:0D:14:A8:F7:01:A7:2C:0C:46:E2:72:62
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       94
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/Gzzm5G1j-N8NFKj3AacsDEbicmI.roa
Signing time:             Tue 31 Mar 2026 08:30:40 +0000
ROA not before:           Tue 31 Mar 2026 08:30:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2915
IP address blocks:        218.231.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B3CE6E46D63F8DF0D14A8F701A72C0C46E27262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:9c:05:ae:b1:13:1c:5c:50:f1:fd:09:2c:
                    a4:dc:e3:ab:98:7a:a7:05:99:a2:c9:bb:94:46:fc:
                    cf:b8:04:8e:a0:23:1d:55:3c:45:7f:29:4c:c5:e2:
                    06:1a:4e:9e:df:cb:50:fa:ad:70:96:69:82:f4:23:
                    29:90:c3:43:d1:7c:ec:63:a2:7a:97:6f:71:02:04:
                    c4:48:1f:6a:72:cd:4d:98:6a:27:47:fd:7e:a6:66:
                    1d:09:8f:aa:9d:78:c2:21:27:bb:71:7a:8c:77:2e:
                    d8:92:ed:7a:53:4e:40:35:ce:0b:c6:60:56:8b:3c:
                    06:d5:61:8e:f0:22:d6:20:f1:c5:20:c6:80:0b:12:
                    f9:2e:34:e1:06:6d:40:e8:1d:7d:b4:af:2a:73:30:
                    af:99:52:a3:92:9b:98:62:1e:9e:b1:64:a4:25:7b:
                    80:e4:30:e6:ea:c5:39:0a:58:d0:5a:14:82:14:51:
                    10:2d:c4:6a:64:f2:42:1d:77:bc:ab:95:64:2a:1a:
                    98:28:53:c1:07:bc:ce:2d:29:be:2c:de:08:49:45:
                    d0:48:44:79:fb:fc:00:ff:c0:f1:3f:17:c4:27:f8:
                    bf:07:15:f4:87:79:45:7a:e0:73:c3:8e:27:7b:df:
                    94:8e:32:d7:d7:53:6a:ba:3b:d5:9c:fe:26:14:b5:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:E6:E4:6D:63:F8:DF:0D:14:A8:F7:01:A7:2C:0C:46:E2:72:62
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/Gzzm5G1j-N8NFKj3AacsDEbicmI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:9c:67:30:50:13:d4:cf:4f:fa:9c:6b:60:68:df:84:77:
         5d:95:65:38:5a:8b:f5:65:fe:5f:c6:cc:7b:a7:ed:42:84:d3:
         ce:1c:39:9e:02:53:c7:37:bd:cf:cc:73:f2:95:c7:d0:23:19:
         df:f6:0f:a9:4b:32:57:58:5e:83:65:6e:3a:1f:45:30:10:91:
         69:00:dd:f2:78:c1:3d:31:81:a2:e2:ca:59:6b:b2:87:68:80:
         e4:62:47:64:d8:e8:57:37:9a:97:92:3e:92:b2:d2:d3:c6:d1:
         b3:a0:ed:1e:02:b7:ed:97:4c:85:0c:dc:3f:da:86:3d:43:2f:
         de:3c:63:29:40:78:37:71:d5:52:d1:80:fb:d9:61:e5:2e:45:
         45:66:fa:aa:94:c3:03:f7:f0:b9:1e:c9:4c:a5:30:a2:08:67:
         cc:23:dd:33:29:1a:8b:af:1d:4a:28:ce:61:a3:50:81:1b:8a:
         72:eb:2a:b1:89:0d:a5:ba:fa:a9:a7:70:bf:3b:08:12:84:0a:
         06:1f:c2:1a:26:eb:1f:af:55:50:f2:25:e9:26:e9:94:68:9e:
         a1:d4:2d:d7:ea:55:31:61:7a:9d:71:5a:01:51:19:52:29:81:
         34:cd:36:d7:76:ed:8e:9f:a6:e5:5c:d2:36:7e:fa:eb:3b:30:
         ea:b8:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:24 2026 by rpki-client