Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ggaoJKfRV_pT-OZbxwzXZ81whXQ.roa
File:                     ggaoJKfRV_pT-OZbxwzXZ81whXQ.roa (raw, json)
Hash identifier:          eku/IsFKnuy46HnY+wEspnULsL0z4XnzTYYjCazBRLQ=
Subject key identifier:   82:06:A8:24:A7:D1:57:FA:53:F8:E6:5B:C7:0C:D7:67:CD:70:85:74
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       067C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ggaoJKfRV_pT-OZbxwzXZ81whXQ.roa
Signing time:             Tue 31 Mar 2026 07:27:57 +0000
ROA not before:           Tue 31 Mar 2026 07:27:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8206A824A7D157FA53F8E65BC70CD767CD708574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:0e:e8:80:84:61:82:8a:15:7d:f2:02:60:
                    a1:5e:a1:58:d5:a5:32:41:83:25:f6:0b:0f:ce:14:
                    f3:3a:0c:d6:86:e9:09:96:41:eb:90:95:e1:5b:66:
                    5c:fe:7d:4a:20:51:10:38:2d:25:6e:48:9f:5d:7c:
                    46:fd:79:ba:88:79:5f:6a:0d:e8:90:a2:b2:9f:41:
                    40:19:62:10:b5:96:a4:99:da:bf:07:8e:1f:70:3e:
                    d6:c8:87:54:43:0f:97:bd:31:05:3a:1e:2b:9c:4c:
                    ab:17:9a:3d:2e:a0:c6:be:36:ab:14:b4:d0:30:b2:
                    ef:13:78:19:96:e7:22:f5:04:87:d6:2f:8c:d3:fc:
                    ec:b3:46:8d:8e:62:82:34:f5:57:db:37:8c:71:ea:
                    77:e7:ab:1a:7f:5e:e0:8b:09:dd:eb:b1:75:cd:97:
                    26:38:04:7a:27:58:18:86:9e:48:04:6f:f8:04:38:
                    05:fa:41:f8:71:35:09:39:72:ab:c2:16:45:91:63:
                    8d:24:99:1c:22:3b:d0:f1:a6:5f:2f:aa:21:77:f6:
                    3e:b7:0a:60:3a:a4:d3:5e:56:d4:af:11:e5:3c:a3:
                    b3:85:70:86:17:e2:36:f6:ba:fc:ce:d3:57:fc:71:
                    73:8d:a3:3e:77:0d:06:4c:a6:e1:57:9c:b4:b1:2f:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:A8:24:A7:D1:57:FA:53:F8:E6:5B:C7:0C:D7:67:CD:70:85:74
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ggaoJKfRV_pT-OZbxwzXZ81whXQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:cb:6c:44:51:60:35:e7:8a:bc:89:bb:77:48:93:88:da:
         be:97:fb:c5:85:27:dd:6e:9b:5f:06:11:89:2f:37:95:4d:b3:
         da:7a:26:94:9a:d2:24:c8:ab:6f:7e:60:5b:8f:38:e3:b7:ce:
         4d:20:7c:85:81:88:3e:2a:e9:9b:6e:9b:9f:18:1f:79:81:fb:
         3b:69:e4:d2:3c:39:26:e4:ee:94:21:5a:aa:d9:b4:15:37:10:
         37:ef:03:dd:75:a6:28:3d:9f:2e:5f:5f:db:47:01:06:65:d7:
         ff:79:27:bf:a1:2a:4c:e0:94:25:40:35:d6:8e:9a:f0:36:f7:
         b6:f6:3e:08:85:9c:4c:47:9b:a8:d9:d4:98:92:6c:81:d3:9f:
         7c:58:25:eb:31:e4:04:64:f8:09:a6:7f:e0:e7:7f:b6:ae:12:
         dc:ac:02:c3:89:d2:f0:21:ca:7a:07:42:e4:93:89:df:41:08:
         80:81:16:17:18:d7:ef:49:1c:4f:6c:60:15:64:92:01:9f:c4:
         52:58:0c:9e:7b:eb:40:41:9d:fe:01:e5:7e:6d:96:99:da:03:
         ea:8d:60:08:bc:ef:37:12:35:bb:a7:14:74:87:db:58:b4:7c:
         4e:3f:f7:99:6e:04:00:64:b1:9d:69:ab:d1:aa:37:1c:8c:62:
         b5:2a:19:22
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyMDZBODI0QTdEMTU3
RkE1M0Y4RTY1QkM3MENENzY3Q0Q3MDg1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4sw7ogIRhgooVffICYKFeoVjVpTJBgyX2Cw/OFPM6DNaG6QmW
QeuQleFbZlz+fUogURA4LSVuSJ9dfEb9ebqIeV9qDeiQorKfQUAZYhC1lqSZ2r8H
jh9wPtbIh1RDD5e9MQU6HiucTKsXmj0uoMa+NqsUtNAwsu8TeBmW5yL1BIfWL4zT
/OyzRo2OYoI09VfbN4xx6nfnqxp/XuCLCd3rsXXNlyY4BHonWBiGnkgEb/gEOAX6
QfhxNQk5cqvCFkWRY40kmRwiO9Dxpl8vqiF39j63CmA6pNNeVtSvEeU8o7OFcIYX
4jb2uvzO01f8cXONoz53DQZMpuFXnLSxL/h3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUggaoJKfRV/pT+OZbxwzXZ81whXQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L2dnYW9KS2ZSVl9wVC1PWmJ4d3pYWjgxd2hYUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQqffAwDQYJKoZIhvcNAQELBQADggEB
AC6hy2xEUWA154q8ibt3SJOI2r6X+8WFJ91um18GEYkvN5VNs9p6JpSa0iTIq29+
YFuPOOO3zk0gfIWBiD4q6Ztum58YH3mB+ztp5NI8OSbk7pQhWqrZtBU3EDfvA911
pig9ny5fX9tHAQZl1/95J7+hKkzglCVANdaOmvA297b2PgiFnExHm6jZ1JiSbIHT
n3xYJesx5ARk+Ammf+Dnf7auEtysAsOJ0vAhynoHQuSTid9BCICBFhcY1+9JHE9s
YBVkkgGfxFJYDJ5760BBnf4B5X5tlpnaA+qNYAi87zcSNbunFHSH21i0fE4/95lu
BABksZ1pq9GqNxyMYrUqGSI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:35 2026 by rpki-client