Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/Gr4kgoLWOpXQxSILihGfl5weOX8.roa
File:                     Gr4kgoLWOpXQxSILihGfl5weOX8.roa (raw, json)
Hash identifier:          GGWNDvEUO1iL3wrFIdci+RaHOhGfSg1Ta90RQ4z9+0U=
Subject key identifier:   1A:BE:24:82:82:D6:3A:95:D0:C5:22:0B:8A:11:9F:97:9C:1E:39:7F
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       06
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/Gr4kgoLWOpXQxSILihGfl5weOX8.roa
Signing time:             Thu 17 Sep 2026 09:38:56 +0000
ROA not before:           Thu 17 Sep 2026 09:38:56 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        27.122.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 17 09:38:56 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=1ABE248282D63A95D0C5220B8A119F979C1E397F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:6d:48:15:83:fa:68:99:1c:10:97:1d:54:
                    8a:fa:be:6e:4b:c6:11:5e:06:f6:59:ba:bc:a3:cd:
                    96:2d:5c:75:19:94:e8:98:8f:3c:88:c5:1f:97:c5:
                    84:71:14:c0:fc:41:67:74:cb:cc:59:cd:95:c9:b7:
                    30:7d:6b:4e:48:62:96:65:29:aa:d9:6c:e9:ab:ff:
                    e5:46:a2:88:f5:38:9e:b5:67:5d:2f:3c:a5:bc:11:
                    18:a2:ff:db:12:57:34:10:11:11:7d:18:e1:be:06:
                    c3:13:4a:2f:2c:4b:d2:5f:51:80:b3:71:51:f8:a5:
                    7e:c2:f4:2c:a0:b8:85:26:e8:b7:4b:3d:c1:f3:ee:
                    73:0b:43:8b:8e:a7:81:58:34:26:4b:6f:b2:06:d8:
                    b5:43:3c:78:d8:a6:fc:f7:24:b9:b1:b3:c6:6b:5a:
                    80:0d:ae:41:e4:16:ea:1d:db:9a:bf:7f:9f:eb:c8:
                    a9:a1:87:8e:fb:45:42:68:ad:50:dd:25:6b:e8:af:
                    14:31:aa:9e:c7:5e:4e:8e:e4:37:0c:3e:73:3d:a0:
                    87:d0:55:ce:7d:27:d8:d1:cc:29:14:7f:51:11:a5:
                    04:3c:9f:0b:b1:a5:24:24:db:f3:22:65:7f:e7:ab:
                    36:b1:a8:55:76:8d:64:47:43:db:5a:a9:ab:1f:68:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:24:82:82:D6:3A:95:D0:C5:22:0B:8A:11:9F:97:9C:1E:39:7F
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/Gr4kgoLWOpXQxSILihGfl5weOX8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:62:64:45:fa:7f:9e:1a:60:b0:b8:de:87:ac:6a:2f:54:
         a0:09:f6:e3:ae:46:92:e6:23:a6:a9:42:4f:a3:85:93:e0:76:
         99:cf:37:5d:3f:a6:79:97:b9:7d:d7:1a:16:ae:94:a5:97:f1:
         72:fa:0d:57:ca:5a:76:1f:cb:49:ed:64:64:c8:c8:53:0a:3d:
         0c:dc:36:17:cd:c7:6b:95:82:e0:31:f9:22:b6:35:25:57:c0:
         ef:ab:c8:0c:5a:9d:67:da:3a:da:7f:f4:93:7c:fc:e2:46:35:
         e7:dd:96:90:bb:8d:3f:e1:29:21:a6:3d:1d:e3:73:d1:c8:0f:
         c5:64:ec:52:0b:b1:7c:94:c4:4f:64:e7:75:fc:0c:91:64:6a:
         f7:00:f8:03:6b:93:76:20:9c:f7:fb:de:8f:29:23:38:a6:b2:
         e3:01:ba:66:f1:dc:2e:86:7d:41:3c:0b:cf:59:03:d9:0a:09:
         68:15:a6:75:52:86:12:bd:c8:af:78:c5:b1:ea:fa:64:74:16:
         32:65:c7:8b:29:9e:79:e7:3e:0a:5f:4a:bb:b4:44:ca:3d:0c:
         9d:45:52:2d:1b:36:48:fc:19:f9:3e:0d:60:16:9c:1c:7f:58:
         7b:dd:b6:3d:80:11:82:c9:2e:12:76:1c:6c:10:e6:e1:be:94:
         8d:4b:46:df
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QTdC
MTYyQzExRTc0RUJGOEQ2QjQ5MTRENjcxQ0QyOUJBOTlBOUI5MB4XDTI2MDkxNzA5
Mzg1NloXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMUFCRTI0ODI4MkQ2M0E5
NUQwQzUyMjBCOEExMTlGOTc5QzFFMzk3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANAJbUgVg/pomRwQlx1Uivq+bkvGEV4G9lm6vKPNli1cdRmU6JiP
PIjFH5fFhHEUwPxBZ3TLzFnNlcm3MH1rTkhilmUpqtls6av/5UaiiPU4nrVnXS88
pbwRGKL/2xJXNBAREX0Y4b4GwxNKLyxL0l9RgLNxUfilfsL0LKC4hSbot0s9wfPu
cwtDi46ngVg0JktvsgbYtUM8eNim/PckubGzxmtagA2uQeQW6h3bmr9/n+vIqaGH
jvtFQmitUN0la+ivFDGqnsdeTo7kNww+cz2gh9BVzn0n2NHMKRR/URGlBDyfC7Gl
JCTb8yJlf+erNrGoVXaNZEdD21qpqx9oEe8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQaviSCgtY6ldDFIguKEZ+XnB45fzAfBgNVHSMEGDAWgBR6exYsEedOv41rSRTW
cc0pupmpuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjIwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2JxWnFiay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2Jx
WnFiay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MjAvR3I0a2dvTFdPcFhReFNJTGloR2ZsNXdlT1g4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBt6IDANBgkqhkiG9w0BAQsFAAOCAQEA
yLRiZEX6f54aYLC43oesai9UoAn2465GkuYjpqlCT6OFk+B2mc83XT+meZe5fdca
Fq6UpZfxcvoNV8padh/LSe1kZMjIUwo9DNw2F83Ha5WC4DH5IrY1JVfA76vIDFqd
Z9o62n/0k3z84kY1592WkLuNP+EpIaY9HeNz0cgPxWTsUguxfJTET2TndfwMkWRq
9wD4A2uTdiCc9/vejykjOKay4wG6ZvHcLoZ9QTwLz1kD2QoJaBWmdVKGEr3Ir3jF
ser6ZHQWMmXHiymeeec+Cl9Ku7REyj0MnUVSLRs2SPwZ+T4NYBacHH9Ye922PYAR
gskuEnYcbBDm4b6UjUtG3w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:16 2026 by rpki-client