Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/GMirerFopbPwlGcpCkxifw6zMbc.roa
File:                     GMirerFopbPwlGcpCkxifw6zMbc.roa (raw, json)
Hash identifier:          eohOVtkDZf1at7ediwUuo/dgDlZ9MCrGCcN3uwq6wl8=
Subject key identifier:   18:C8:AB:7A:B1:68:A5:B3:F0:94:67:29:0A:4C:62:7F:0E:B3:31:B7
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       77
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/GMirerFopbPwlGcpCkxifw6zMbc.roa
Signing time:             Sun 01 Mar 2026 01:31:04 +0000
ROA not before:           Sun 01 Mar 2026 01:31:04 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Mar  1 01:31:04 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=18C8AB7AB168A5B3F09467290A4C627F0EB331B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:d5:0f:69:c3:07:6a:96:81:e7:57:1b:e1:
                    f5:2b:dd:c9:35:c2:1f:20:c9:e7:8c:97:ac:09:a8:
                    ef:de:5a:e5:fd:88:d0:66:8f:71:4e:22:42:e9:d8:
                    80:e7:e5:06:34:34:ea:64:cc:49:5e:13:ce:a6:a5:
                    ff:c2:c5:26:40:6a:28:ce:d2:88:85:2a:57:31:ce:
                    d1:bf:44:2c:bb:e9:0d:91:49:e5:97:82:2e:ae:8b:
                    87:4a:33:5f:8d:62:63:99:c7:d9:c0:21:46:d4:80:
                    89:1d:3b:86:9e:9a:fc:c2:2f:c9:3a:dc:d2:7b:20:
                    10:c2:fe:20:ff:9b:bb:3d:65:65:3b:2e:1f:fe:c5:
                    74:63:4f:9c:f4:5d:08:f4:1b:9e:c8:52:7e:d4:23:
                    64:03:82:32:92:47:e2:7f:bd:3e:ad:e9:2e:27:0c:
                    08:cd:d4:f2:8b:a8:cd:27:23:94:5c:e6:be:1a:50:
                    b7:e6:22:60:7b:02:b3:be:11:83:8c:f2:9b:1d:fa:
                    e2:ba:a8:50:fe:df:9b:53:99:21:d1:f1:fe:55:02:
                    d4:3c:c1:3b:7a:57:d5:59:d5:d5:87:8f:b4:97:dd:
                    28:c5:2f:f6:7a:f2:95:de:14:34:2d:ae:d7:10:1f:
                    7e:01:ad:62:8d:12:fe:63:c9:59:56:a7:29:c9:80:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:AB:7A:B1:68:A5:B3:F0:94:67:29:0A:4C:62:7F:0E:B3:31:B7
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/GMirerFopbPwlGcpCkxifw6zMbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:92:04:c6:4d:9c:a0:b2:66:a0:3d:d4:14:5a:23:78:8f:97:
         ad:84:4b:fb:24:99:a2:97:46:81:80:80:62:78:61:7d:98:2e:
         2d:41:90:d7:ef:16:83:b1:a0:a8:22:ea:65:c4:2c:d1:63:ab:
         75:ca:72:7c:95:ce:63:05:07:0d:8b:1f:cb:c5:d1:d6:f3:77:
         69:41:f6:ea:ae:ec:21:e2:dc:1b:1e:9c:6c:aa:21:ba:7e:9e:
         43:98:c2:d1:83:ed:9e:ed:6f:90:2d:9b:bc:27:51:9b:59:29:
         b7:80:1a:cb:f0:da:ee:a5:e8:55:9f:87:3a:ba:78:e1:27:ab:
         07:78:7c:6e:3c:ef:df:cd:50:32:19:97:87:3d:fe:b4:56:74:
         65:97:38:10:aa:28:56:9b:60:d9:8b:2d:4b:a1:e2:b1:e1:84:
         20:56:ac:82:de:5b:94:e2:6e:5b:b7:8d:11:d7:bc:87:2c:c5:
         28:2e:a8:bb:4b:c1:e7:73:fd:3e:ef:91:f7:51:86:61:aa:23:
         56:8a:df:22:5c:ae:05:ae:94:59:93:b4:8a:b8:47:d9:31:77:
         8a:2e:f9:27:fb:c6:e2:50:5a:17:51:c0:59:37:a4:f6:36:b9:
         6e:af:82:c0:b1:d0:7e:48:29:ee:a0:da:96:51:77:92:88:1b:
         6e:63:90:fa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1
M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI2MDMwMTAx
MzEwNFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMThDOEFCN0FCMTY4QTVC
M0YwOTQ2NzI5MEE0QzYyN0YwRUIzMzFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN1J1Q9pwwdqloHnVxvh9SvdyTXCHyDJ54yXrAmo795a5f2I0GaP
cU4iQunYgOflBjQ06mTMSV4Tzqal/8LFJkBqKM7SiIUqVzHO0b9ELLvpDZFJ5ZeC
Lq6Lh0ozX41iY5nH2cAhRtSAiR07hp6a/MIvyTrc0nsgEML+IP+buz1lZTsuH/7F
dGNPnPRdCPQbnshSftQjZAOCMpJH4n+9Pq3pLicMCM3U8ouozScjlFzmvhpQt+Yi
YHsCs74Rg4zymx364rqoUP7fm1OZIdHx/lUC1DzBO3pX1VnV1YePtJfdKMUv9nry
ld4UNC2u1xAffgGtYo0S/mPJWVanKcmAwpMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQYyKt6sWils/CUZykKTGJ/DrMxtzAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7
r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY
c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ5MC9HTWlyZXJGb3BiUHdsR2NwQ2t4aWZ3NnpNYmMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQGoPbAMA0GCSqGSIb3DQEBCwUAA4IBAQCEkgTGTZygsmagPdQUWiN4j5et
hEv7JJmil0aBgIBieGF9mC4tQZDX7xaDsaCoIuplxCzRY6t1ynJ8lc5jBQcNix/L
xdHW83dpQfbqruwh4twbHpxsqiG6fp5DmMLRg+2e7W+QLZu8J1GbWSm3gBrL8Nru
pehVn4c6unjhJ6sHeHxuPO/fzVAyGZeHPf60VnRllzgQqihWm2DZiy1LoeKx4YQg
VqyC3luU4m5bt40R17yHLMUoLqi7S8Hnc/0+75H3UYZhqiNWit8iXK4FrpRZk7SK
uEfZMXeKLvkn+8biUFoXUcBZN6T2Nrlur4LAsdB+SCnuoNqWUXeSiBtuY5D6
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:31 2026 by rpki-client