Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa
File:                     gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa (raw, json)
Hash identifier:          oOR10e2l2Z9r4/guftFNHHyGmuHVyKHM45tKN1PqWs0=
Subject key identifier:   82:46:87:52:F3:12:07:C7:78:F9:21:F4:44:64:2F:1C:22:C2:83:C9
Certificate issuer:       /CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Certificate serial:       0B
Authority key identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa
Signing time:             Tue 31 Mar 2026 08:46:59 +0000
ROA not before:           Tue 31 Mar 2026 08:46:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152870
IP address blocks:        165.101.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
        Validity
            Not Before: Mar 31 08:46:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82468752F31207C778F921F444642F1C22C283C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:53:2f:77:ad:08:2f:f2:4d:0f:7f:49:e4:
                    d7:6b:34:f7:c8:c5:d0:6a:88:af:e0:b1:4c:29:31:
                    19:20:65:fc:9e:28:97:c3:8d:11:94:d3:df:d7:71:
                    d0:b4:03:22:b3:55:bb:d4:ba:b7:f3:a5:e3:15:b6:
                    82:b9:14:17:b9:eb:d3:89:40:8c:2f:d3:1b:43:40:
                    a1:ec:66:9e:f8:1d:7a:76:cc:83:73:69:41:b7:3c:
                    e7:d5:6f:2e:f4:1e:27:5e:59:f8:68:2b:8c:7e:9b:
                    d5:ec:ac:25:9a:58:9e:8a:36:1a:f6:2b:28:ea:c7:
                    a9:d8:f5:62:46:eb:a1:00:45:6a:23:9e:19:d6:46:
                    66:95:20:b1:05:3c:27:94:37:50:3f:1f:01:19:5e:
                    e1:f6:5a:6e:ea:f7:99:80:66:46:0f:4f:0a:38:c7:
                    55:3b:01:e9:2c:47:9a:9b:99:c9:24:d5:68:01:4f:
                    88:fa:b3:52:d5:ce:fc:e2:96:f4:14:6e:a8:61:62:
                    bc:db:ee:7b:af:30:21:70:38:21:e6:fd:c0:47:50:
                    9a:87:2e:c6:22:3e:6e:bf:0c:ef:3c:41:46:f9:ef:
                    f1:e8:f3:fc:b4:96:a8:35:66:c6:3c:0d:d5:9a:ed:
                    c0:33:fd:a5:3d:5c:eb:9e:0c:b8:34:5f:e2:9a:1e:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:87:52:F3:12:07:C7:78:F9:21:F4:44:64:2F:1C:22:C2:83:C9
            X509v3 Authority Key Identifier:
                keyid:D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:2d:12:0d:f0:23:02:78:a4:6b:26:8d:78:b0:7f:00:df:
         2e:ad:49:f7:11:1c:06:7a:63:6c:9c:72:40:57:a2:a0:30:59:
         a8:8e:34:92:a3:01:4c:f5:6a:c6:fa:66:76:5d:8e:53:cd:99:
         9f:c4:bc:3c:39:0c:70:c8:2b:41:6c:ca:32:19:46:a0:f5:d2:
         a3:6a:da:2c:b3:9a:f3:b8:8e:e5:96:b4:aa:6a:1b:90:40:b3:
         98:d0:87:d2:2d:fa:6e:47:26:3d:02:39:d1:4a:19:2f:94:c1:
         aa:a2:ef:23:63:dd:09:c9:7c:62:cc:60:a4:37:d8:48:7f:3f:
         b3:0f:9c:ba:2c:23:c0:60:f4:73:b8:75:d8:f2:9e:21:bb:78:
         5b:fb:5c:d8:81:66:bb:eb:45:79:d0:9e:fc:0a:2f:d8:72:b7:
         44:61:ed:0c:e9:10:19:d1:6c:ea:43:25:37:8b:b7:3c:55:f9:
         9a:c1:8f:62:3d:4b:bc:c3:a9:6b:b0:9e:f3:48:aa:a6:0f:01:
         e0:f3:25:49:70:62:34:65:43:17:21:08:55:8c:43:49:59:14:
         fd:f4:be:cd:5c:a3:8b:93:e0:fe:74:b8:92:08:d7:91:63:36:
         9f:13:6f:63:68:f0:56:16:67:dc:c3:fb:48:70:93:2e:a5:a7:
         25:8a:79:27
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENTM5
MEEyQzIzMEE1QjYxMkEyOTNGRUZFN0RBOEYwMjBDMjhGNEQzMB4XDTI2MDMzMTA4
NDY1OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODI0Njg3NTJGMzEyMDdD
Nzc4RjkyMUY0NDQ2NDJGMUMyMkMyODNDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALDvUy93rQgv8k0Pf0nk12s098jF0GqIr+CxTCkxGSBl/J4ol8ON
EZTT39dx0LQDIrNVu9S6t/Ol4xW2grkUF7nr04lAjC/TG0NAoexmnvgdenbMg3Np
Qbc859VvLvQeJ15Z+GgrjH6b1eysJZpYnoo2GvYrKOrHqdj1YkbroQBFaiOeGdZG
ZpUgsQU8J5Q3UD8fARle4fZabur3mYBmRg9PCjjHVTsB6SxHmpuZySTVaAFPiPqz
UtXO/OKW9BRuqGFivNvue68wIXA4Ieb9wEdQmocuxiI+br8M7zxBRvnv8ejz/LSW
qDVmxjwN1ZrtwDP9pT1c654MuDRf4poeISECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSCRodS8xIHx3j5IfREZC8cIsKDyTAfBgNVHSMEGDAWgBTVOQosIwpbYSopP+/n
2o8CDCj00zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTczNi8xVGtLTENNS1cyRXFLVF92NTlxUEFnd285Tk0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xVGtLTENNS1cyRXFLVF92NTlxUEFn
d285Tk0uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTczNi9na2FIVXZNU0I4ZDQtU0gwUkdRdkhDTENnOGsucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApWUIMA0GCSqGSIb3DQEBCwUAA4IB
AQB+Li0SDfAjAnikayaNeLB/AN8urUn3ERwGemNsnHJAV6KgMFmojjSSowFM9WrG
+mZ2XY5TzZmfxLw8OQxwyCtBbMoyGUag9dKjatoss5rzuI7llrSqahuQQLOY0IfS
LfpuRyY9AjnRShkvlMGqou8jY90JyXxizGCkN9hIfz+zD5y6LCPAYPRzuHXY8p4h
u3hb+1zYgWa760V50J78Ci/YcrdEYe0M6RAZ0WzqQyU3i7c8VfmawY9iPUu8w6lr
sJ7zSKqmDwHg8yVJcGI0ZUMXIQhVjENJWRT99L7NXKOLk+D+dLiSCNeRYzafE29j
aPBWFmfcw/tIcJMupaclinkn
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:27 2026 by rpki-client