Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa
File:                     Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa (raw, json)
Hash identifier:          LSVfhN800/snxob9hro2VojN1CadciJR5MjeEDtuv2g=
Subject key identifier:   19:CF:49:2B:8C:EB:35:D0:6E:C5:DA:FF:7A:DE:E6:4D:B2:E6:F6:6D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07DD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa
Signing time:             Tue 31 Mar 2026 07:42:18 +0000
ROA not before:           Tue 31 Mar 2026 07:42:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.86.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=19CF492B8CEB35D06EC5DAFF7ADEE64DB2E6F66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:e7:27:d7:81:7a:56:ae:f0:10:62:b6:47:
                    b0:fc:ef:87:76:40:a8:ba:80:12:4d:79:e1:e5:9c:
                    b0:85:a0:6a:5f:11:b6:4c:55:13:02:a9:e5:02:40:
                    2b:de:99:ba:09:61:2c:6c:2e:fb:18:76:34:e6:1f:
                    0c:bb:8a:1d:a3:f4:fa:91:ae:25:54:58:8d:c6:cf:
                    69:f5:b1:52:95:df:0e:4d:ed:23:41:64:f2:11:2a:
                    d0:23:68:9b:47:38:c6:5a:23:23:90:82:38:2e:a9:
                    62:f8:bc:08:05:34:b6:bb:63:e1:23:ae:39:61:c7:
                    35:f0:60:d1:05:b2:a8:b3:87:84:b9:75:66:ae:eb:
                    75:ae:dc:8e:44:61:65:3b:99:ac:35:66:4f:12:e5:
                    d3:b8:aa:4e:f1:6e:92:7d:d8:a9:88:dc:16:1f:49:
                    4e:45:0c:d0:e1:94:e2:dc:71:e0:7b:20:02:cb:e3:
                    c7:cb:7f:03:6b:04:97:62:d9:93:1e:37:98:9c:67:
                    de:a8:60:0f:ea:4e:33:5b:be:f1:4d:de:3a:d6:ef:
                    c3:9a:b2:09:36:39:d8:04:0a:65:fc:7c:84:84:51:
                    db:41:77:7d:3b:05:b9:b9:8b:56:d4:66:07:a3:84:
                    7e:56:d3:c5:3a:f6:9e:82:d5:00:36:a6:7e:1f:fa:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:49:2B:8C:EB:35:D0:6E:C5:DA:FF:7A:DE:E6:4D:B2:E6:F6:6D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gc9JK4zrNdBuxdr_et7mTbLm9m0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.86.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:bc:3e:b8:85:14:f2:59:e2:f5:42:dd:b4:2e:35:29:74:
         7f:32:b2:52:8f:9d:18:f0:63:a2:ed:74:71:5f:9e:f1:03:d1:
         2f:d4:b7:a2:4c:06:bb:b6:87:ad:66:1c:7f:32:73:70:de:48:
         c3:27:fa:b2:cc:24:7c:ee:28:fb:2c:89:39:4f:50:6f:8e:63:
         fa:36:b8:9c:91:51:7a:c4:7d:00:1c:8c:e6:1f:ba:b8:b3:63:
         c2:09:c0:db:8a:3d:dc:41:bf:48:fb:8e:08:96:0e:14:e4:6f:
         65:de:a4:f8:a3:be:c6:75:df:76:07:07:27:cd:e1:26:93:26:
         71:45:9a:a0:e1:a4:7b:03:b8:b0:61:67:9e:f3:c1:a5:3e:8d:
         ea:d4:18:33:03:65:df:af:9d:0c:a7:ce:ca:f5:7a:d5:65:de:
         49:df:8f:bb:48:9f:f4:05:cc:cc:2c:1b:9c:cc:15:c1:02:f0:
         df:cb:e4:97:52:b2:37:06:25:08:9c:44:e8:0a:5c:e3:ae:c4:
         d1:43:d1:0a:b0:c9:de:b6:0d:4a:87:3f:3f:d9:62:f4:e7:f3:
         85:18:ba:27:2b:21:9c:ae:68:8a:c6:a5:75:1d:99:ab:de:4f:
         d1:9b:8d:f8:16:2c:c3:10:e0:f8:d8:24:50:01:e5:07:2a:fa:
         f1:e2:3b:d3
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5Q0Y0OTJCOENFQjM1
RDA2RUM1REFGRjdBREVFNjREQjJFNkY2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt5Ocn14F6Vq7wEGK2R7D874d2QKi6gBJNeeHlnLCFoGpfEbZM
VRMCqeUCQCvemboJYSxsLvsYdjTmHwy7ih2j9PqRriVUWI3Gz2n1sVKV3w5N7SNB
ZPIRKtAjaJtHOMZaIyOQgjguqWL4vAgFNLa7Y+EjrjlhxzXwYNEFsqizh4S5dWau
63Wu3I5EYWU7maw1Zk8S5dO4qk7xbpJ92KmI3BYfSU5FDNDhlOLcceB7IALL48fL
fwNrBJdi2ZMeN5icZ96oYA/qTjNbvvFN3jrW78Oasgk2OdgECmX8fISEUdtBd307
Bbm5i1bUZgejhH5W08U69p6C1QA2pn4f+mZVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGc9JK4zrNdBuxdr/et7mTbLm9m0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0djOUpLNHpyTmRCdXhkcl9ldDdtVGJMbTltMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdvVoAwDQYJKoZIhvcNAQELBQADggEB
AJlevD64hRTyWeL1Qt20LjUpdH8yslKPnRjwY6LtdHFfnvED0S/Ut6JMBru2h61m
HH8yc3DeSMMn+rLMJHzuKPssiTlPUG+OY/o2uJyRUXrEfQAcjOYfurizY8IJwNuK
PdxBv0j7jgiWDhTkb2XepPijvsZ133YHByfN4SaTJnFFmqDhpHsDuLBhZ57zwaU+
jerUGDMDZd+vnQynzsr1etVl3knfj7tIn/QFzMwsG5zMFcEC8N/L5JdSsjcGJQic
ROgKXOOuxNFD0Qqwyd62DUqHPz/ZYvTn84UYuicrIZyuaIrGpXUdmaveT9GbjfgW
LMMQ4PjYJFAB5Qcq+vHiO9M=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:00 2026 by rpki-client