Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/GU8AK38tYsiVr0rni0Xf5Ar_qno.roa
File:                     GU8AK38tYsiVr0rni0Xf5Ar_qno.roa (raw, json)
Hash identifier:          tOZ8N+jdqOkDShrhBPdB5izEz5or/1U9bl4gF1E8LYE=
Subject key identifier:   19:4F:00:2B:7F:2D:62:C8:95:AF:4A:E7:8B:45:DF:E4:0A:FF:AA:7A
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/GU8AK38tYsiVr0rni0Xf5Ar_qno.roa
Signing time:             Tue 31 Mar 2026 07:40:04 +0000
ROA not before:           Tue 31 Mar 2026 07:40:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        218.110.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=194F002B7F2D62C895AF4AE78B45DFE40AFFAA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:de:a2:90:74:33:c8:f4:9f:7a:1f:fd:3f:
                    25:f5:55:cb:aa:de:a6:ff:ee:a1:c4:80:11:30:af:
                    1c:ff:18:4d:b3:89:04:28:62:32:f5:ce:2c:b8:33:
                    ff:73:a2:e5:f3:dc:20:20:d4:26:88:64:88:a0:f2:
                    20:bb:2b:2e:16:66:0b:4f:00:90:3f:5a:37:da:d9:
                    4f:4f:97:3d:46:08:11:28:8e:79:5b:66:b4:8f:17:
                    ad:29:6c:b9:45:f8:9d:76:65:6a:b7:1d:8d:f8:37:
                    13:1e:47:9b:8e:cc:92:a2:b2:99:3d:1e:a9:db:6a:
                    86:10:70:2b:4e:50:5e:c1:9f:cf:c8:ad:1d:8d:49:
                    47:1e:23:f4:e4:36:d6:10:d8:a2:96:57:d7:d4:24:
                    e5:da:8a:09:00:8d:09:52:1d:b3:3f:3a:9c:a3:e2:
                    b4:de:fb:38:fe:c7:ed:18:30:0e:a3:2a:b1:57:b1:
                    94:56:99:46:da:90:78:04:b8:b9:d8:1c:d2:bb:f1:
                    51:f1:44:2c:6c:15:b6:0c:d4:3c:4f:ce:11:24:78:
                    21:53:91:92:cf:09:24:bc:14:1d:5c:9e:37:cc:0f:
                    64:3b:26:fb:5a:6f:29:8a:41:98:95:9f:62:5c:b5:
                    85:5b:9c:8c:f3:d5:76:23:94:9c:8c:27:bf:81:f5:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:00:2B:7F:2D:62:C8:95:AF:4A:E7:8B:45:DF:E4:0A:FF:AA:7A
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/GU8AK38tYsiVr0rni0Xf5Ar_qno.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:60:df:8c:ec:09:a9:74:93:4f:c7:9f:ab:a9:c4:74:8b:20:
         a4:e5:f2:78:79:71:63:38:02:3e:96:fa:09:61:55:3f:54:9b:
         4d:6c:36:25:ed:c8:28:4a:28:ee:b5:7b:eb:8f:ab:30:e4:43:
         28:09:6e:50:86:5f:f3:f6:17:fb:7b:1f:c1:ea:d8:4b:e7:de:
         02:66:f4:b8:88:04:2f:10:25:69:a4:77:6e:ec:c9:5d:a3:7e:
         d0:c9:db:8b:a9:3e:be:f6:82:58:5a:f4:bc:08:e7:ef:4d:a4:
         c1:9e:42:8b:7b:1b:1b:02:79:4b:7b:40:bd:16:cd:75:69:04:
         3d:48:86:da:b9:a0:bd:72:32:42:2d:c0:56:a7:1e:07:ac:4e:
         b3:c3:72:29:1d:66:f8:7b:ed:83:6e:3a:52:32:81:89:63:ef:
         65:39:4b:07:5e:67:5c:92:15:5b:df:69:86:c9:b1:9e:67:00:
         4a:97:1d:d8:35:57:f3:20:49:44:2a:61:e0:0d:18:9f:05:cd:
         c5:e2:d7:5b:e8:df:5a:56:15:57:3c:c5:04:47:2d:e9:36:9f:
         d5:f9:a1:7f:67:28:bf:b5:1a:ea:12:63:96:ec:01:b0:83:ad:
         1f:6e:02:94:87:e4:26:83:f4:91:ce:da:d6:7f:c0:1c:3e:de:
         59:0f:69:2b
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzQwMDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5NEYwMDJCN0YyRDYy
Qzg5NUFGNEFFNzhCNDVERkU0MEFGRkFBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+n96ikHQzyPSfeh/9PyX1Vcuq3qb/7qHEgBEwrxz/GE2ziQQo
YjL1ziy4M/9zouXz3CAg1CaIZIig8iC7Ky4WZgtPAJA/Wjfa2U9Plz1GCBEojnlb
ZrSPF60pbLlF+J12ZWq3HY34NxMeR5uOzJKispk9HqnbaoYQcCtOUF7Bn8/IrR2N
SUceI/TkNtYQ2KKWV9fUJOXaigkAjQlSHbM/Opyj4rTe+zj+x+0YMA6jKrFXsZRW
mUbakHgEuLnYHNK78VHxRCxsFbYM1DxPzhEkeCFTkZLPCSS8FB1cnjfMD2Q7Jvta
bymKQZiVn2JctYVbnIzz1XYjlJyMJ7+B9dQNAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUGU8AK38tYsiVr0rni0Xf5Ar/qnowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9HVThBSzM4dFlzaVZyMHJuaTBYZjVBcl9xbm8ucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2m4wDQYJKoZIhvcNAQELBQADggEBAGJg
34zsCal0k0/Hn6upxHSLIKTl8nh5cWM4Aj6W+glhVT9Um01sNiXtyChKKO61e+uP
qzDkQygJblCGX/P2F/t7H8Hq2Evn3gJm9LiIBC8QJWmkd27syV2jftDJ24upPr72
glha9LwI5+9NpMGeQot7GxsCeUt7QL0WzXVpBD1Ihtq5oL1yMkItwFanHgesTrPD
cikdZvh77YNuOlIygYlj72U5SwdeZ1ySFVvfaYbJsZ5nAEqXHdg1V/MgSUQqYeAN
GJ8FzcXi11vo31pWFVc8xQRHLek2n9X5oX9nKL+1GuoSY5bsAbCDrR9uApSH5CaD
9JHO2tZ/wBw+3lkPaSs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:56 2026 by rpki-client