Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gmoLn8lc9ZXlBevbkF2VDCWIews.roa
File:                     gmoLn8lc9ZXlBevbkF2VDCWIews.roa (raw, json)
Hash identifier:          A/RK4rRBMxH8HL75JoZnVApX1DYnXpV0Al3NZzhSDAY=
Subject key identifier:   82:6A:0B:9F:C9:5C:F5:95:E5:05:EB:DB:90:5D:95:0C:25:88:7B:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1070
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gmoLn8lc9ZXlBevbkF2VDCWIews.roa
Signing time:             Sun 01 Mar 2026 01:34:23 +0000
ROA not before:           Sun 01 Mar 2026 01:34:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4208 (0x1070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 01:34:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=826A0B9FC95CF595E505EBDB905D950C25887B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:71:2a:8f:c7:c8:a2:76:8c:dd:f3:ec:33:
                    e0:50:1e:ff:0b:80:fb:d0:e0:1c:00:4c:4e:16:8c:
                    02:82:8d:35:0f:35:80:eb:24:04:9d:48:1e:56:43:
                    e6:50:63:27:ec:38:12:6a:40:60:6c:c9:b9:eb:c2:
                    a9:7b:20:be:3c:a2:89:2a:21:b2:11:f4:d5:7b:9f:
                    99:4d:27:c6:98:32:77:bf:bd:94:14:2d:7e:ed:e7:
                    b0:fe:02:de:f2:3d:e9:2c:ce:63:ec:42:64:44:63:
                    66:67:9e:2e:52:88:d6:99:0f:d6:f8:79:ef:b1:5a:
                    ed:39:95:8f:25:ca:7b:ca:a8:a2:2b:3b:98:a3:34:
                    4c:7a:ef:52:1f:21:e0:fc:88:d1:bd:61:e1:e7:cb:
                    d2:45:d2:0b:7d:b0:c5:de:7b:cc:0a:c1:7e:ea:8c:
                    dc:c4:a4:9d:75:f0:42:ab:7f:4d:b0:71:a9:c2:98:
                    46:e8:24:25:b1:50:77:a0:f6:9f:32:85:fe:50:50:
                    a1:a0:19:8d:5d:cc:1a:b0:c1:10:df:29:fd:44:63:
                    46:2d:a2:bd:b2:56:56:ba:89:37:63:04:0c:55:5e:
                    3a:d2:35:15:64:9f:8b:3c:b4:7d:df:39:3d:6a:ad:
                    f1:7e:38:d2:55:f8:31:76:be:74:d5:14:bb:95:07:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:0B:9F:C9:5C:F5:95:E5:05:EB:DB:90:5D:95:0C:25:88:7B:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gmoLn8lc9ZXlBevbkF2VDCWIews.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:22:cd:99:b7:4e:b1:d1:1f:56:de:0e:f7:57:48:d2:e6:
         5a:ab:a3:b4:99:37:07:da:84:c7:d4:d7:39:1b:c9:89:d9:07:
         a9:a1:d3:b1:64:9b:10:2d:53:5e:b2:52:98:96:da:c1:ad:b2:
         70:91:45:46:59:80:14:7b:59:40:7e:ef:cd:7b:32:04:8d:41:
         a4:a4:61:00:90:15:c6:75:74:23:fd:80:72:16:9b:b6:0a:d1:
         e9:2e:51:15:86:0d:58:ac:bb:dc:bf:0c:00:69:3c:29:c1:e1:
         89:d5:2f:6b:3c:43:d7:3f:9f:6f:dd:37:ab:5a:00:be:d0:83:
         4f:07:5d:97:ac:03:77:02:a9:05:3f:64:34:cf:e8:c1:f5:bb:
         a4:37:ee:2b:cb:7a:2b:63:c1:f0:8b:ab:fc:f2:a1:69:dc:6c:
         11:20:1c:fd:4a:3e:08:6e:74:51:49:39:32:b5:bd:c5:5e:b2:
         94:71:19:3f:87:1e:e6:e8:b2:5a:3e:a2:42:95:c3:b2:d8:4a:
         28:a7:bd:b4:12:7c:c4:d1:82:b6:c5:3a:50:6c:4b:06:a3:98:
         c6:ac:56:9e:32:d3:36:03:cd:ab:8a:ee:79:47:45:99:7c:f5:
         c0:5d:fb:dc:04:e5:91:48:14:e7:9b:7c:3b:69:3f:7b:20:9d:
         62:ea:ef:0e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICEHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw
MTM0MjNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyNkEwQjlGQzk1Q0Y1
OTVFNTA1RUJEQjkwNUQ5NTBDMjU4ODdCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVinEqj8fIonaM3fPsM+BQHv8LgPvQ4BwATE4WjAKCjTUPNYDr
JASdSB5WQ+ZQYyfsOBJqQGBsybnrwql7IL48ookqIbIR9NV7n5lNJ8aYMne/vZQU
LX7t57D+At7yPekszmPsQmREY2Znni5SiNaZD9b4ee+xWu05lY8lynvKqKIrO5ij
NEx671IfIeD8iNG9YeHny9JF0gt9sMXee8wKwX7qjNzEpJ118EKrf02wcanCmEbo
JCWxUHeg9p8yhf5QUKGgGY1dzBqwwRDfKf1EY0Ytor2yVla6iTdjBAxVXjrSNRVk
n4s8tH3fOT1qrfF+ONJV+DF2vnTVFLuVB03HAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgmoLn8lc9ZXlBevbkF2VDCWIewswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2dtb0xuOGxjOVpYbEJldmJrRjJWRENXSWV3cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBS7wwDQYJKoZIhvcNAQELBQADggEBAESfIs2Zt06x0R9W3g73V0jS5lqr
o7SZNwfahMfU1zkbyYnZB6mh07FkmxAtU16yUpiW2sGtsnCRRUZZgBR7WUB+7817
MgSNQaSkYQCQFcZ1dCP9gHIWm7YK0ekuURWGDVisu9y/DABpPCnB4YnVL2s8Q9c/
n2/dN6taAL7Qg08HXZesA3cCqQU/ZDTP6MH1u6Q37ivLeitjwfCLq/zyoWncbBEg
HP1KPghudFFJOTK1vcVespRxGT+HHuboslo+okKVw7LYSiinvbQSfMTRgrbFOlBs
SwajmMasVp4y0zYDzauK7nlHRZl89cBd+9wE5ZFIFOebfDtpP3sgnWLq7w4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:07 2026 by rpki-client