Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GGnLzD_RXKPO6cofV9R9KKJac4s.roa
File:                     GGnLzD_RXKPO6cofV9R9KKJac4s.roa (raw, json)
Hash identifier:          7NtrasNxoZB93dA4h7SbZBKo2dXEU7Pssku7TELzL7I=
Subject key identifier:   18:69:CB:CC:3F:D1:5C:A3:CE:E9:CA:1F:57:D4:7D:28:A2:5A:73:8B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05C2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GGnLzD_RXKPO6cofV9R9KKJac4s.roa
Signing time:             Tue 31 Mar 2026 08:20:46 +0000
ROA not before:           Tue 31 Mar 2026 08:20:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1869CBCC3FD15CA3CEE9CA1F57D47D28A25A738B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:56:20:67:90:78:5f:0c:6d:2e:f4:83:c9:
                    bc:b9:a7:52:26:92:a1:f8:5c:a0:61:a5:f5:9c:92:
                    66:ab:9b:e1:60:c6:ad:54:03:c5:a7:93:c4:32:3b:
                    13:96:e1:96:ee:4a:f9:a0:bf:38:2c:c7:d5:f5:44:
                    ac:41:17:74:93:99:09:b4:22:7e:f1:cb:10:9b:3e:
                    4a:0e:84:4d:29:38:33:af:c1:1e:1f:74:cb:6c:93:
                    8d:fa:92:0e:78:63:06:96:60:dc:a7:dc:80:bc:c5:
                    51:9e:f6:ae:6f:2f:9f:24:c1:51:85:27:ab:2f:9e:
                    7c:17:64:23:e6:0e:6a:3d:7b:d1:5d:07:de:90:40:
                    4f:1f:fa:54:2a:70:4f:91:b6:7f:42:1d:01:b3:1b:
                    54:63:c2:39:2d:93:0a:cc:9f:e5:5b:4f:05:92:f3:
                    27:8d:f8:df:27:99:93:fe:2f:12:ab:c5:0a:c1:f2:
                    88:ca:8c:af:74:cb:3c:81:46:60:a9:3c:c1:11:eb:
                    b6:a4:e8:07:ae:25:ae:29:3a:95:38:59:92:07:7c:
                    1e:c5:26:b3:d1:1b:05:b0:c6:5a:f5:4d:6c:98:ed:
                    ca:14:86:ea:b3:07:07:07:36:e6:f3:85:55:c1:69:
                    01:05:64:26:37:a6:41:82:d2:09:d8:1c:4a:fa:a7:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:69:CB:CC:3F:D1:5C:A3:CE:E9:CA:1F:57:D4:7D:28:A2:5A:73:8B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GGnLzD_RXKPO6cofV9R9KKJac4s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:44:25:a4:85:30:9b:dc:00:c2:ca:34:38:18:8d:d2:60:
         57:b9:97:0f:55:35:75:fe:f1:b5:33:a3:8f:d3:4f:7b:de:88:
         2a:1d:a0:57:d2:19:93:d2:0e:7a:89:ba:00:87:89:f8:9e:5d:
         d4:9b:7b:ef:de:83:0f:e8:c8:4f:ec:fc:23:aa:f6:32:19:de:
         e9:97:fe:24:69:ce:c6:83:c5:3c:4e:64:c4:f2:f3:64:31:69:
         66:0b:c5:40:60:1f:45:02:85:97:d2:4d:c0:57:86:b0:46:56:
         0c:e7:9d:ac:36:96:52:5b:73:7a:d2:52:07:d6:c4:e5:bd:22:
         28:3c:f4:0c:d3:c3:f1:02:a0:7a:e8:b0:e1:3f:c6:de:78:0a:
         3e:50:36:cb:de:de:4a:7a:b1:a8:e4:88:77:bd:22:c3:b5:d7:
         4f:bb:5c:8f:a7:62:2a:01:8f:88:33:ea:35:e7:a1:d9:95:af:
         76:50:0f:c5:46:89:fa:c8:b7:8f:ad:58:f9:32:76:92:5f:e7:
         c0:a7:21:15:b4:69:b8:70:ea:4a:6b:d7:72:85:06:0d:03:3e:
         ff:a5:65:ad:66:ae:2b:b1:8a:14:ad:68:6e:ef:80:d4:20:c5:
         e9:e2:b2:d7:70:37:0d:9c:69:55:b8:bc:13:37:ea:1c:ee:f8:
         bc:1b:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:39 2026 by rpki-client