Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/g0OLzwEpbzeASwEQZEYqMQWXS-w.roa
File:                     g0OLzwEpbzeASwEQZEYqMQWXS-w.roa (raw, json)
Hash identifier:          bhWlblK5+ZgAlprov2GqbWA4eYagzaYvSMx9YVYIsZQ=
Subject key identifier:   83:43:8B:CF:01:29:6F:37:80:4B:01:10:64:46:2A:31:05:97:4B:EC
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       51
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/g0OLzwEpbzeASwEQZEYqMQWXS-w.roa
Signing time:             Sun 01 Mar 2026 01:32:01 +0000
ROA not before:           Sun 01 Mar 2026 01:32:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar  1 01:32:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=83438BCF01296F37804B011064462A3105974BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:15:26:3a:36:95:42:c4:0c:4c:23:9d:8b:
                    9d:06:db:d8:1f:d5:9e:aa:f5:cc:f6:f6:83:71:9c:
                    38:33:02:8f:29:6b:7b:62:41:68:fd:2b:33:5a:98:
                    62:07:da:4e:87:a1:13:b5:bb:e2:88:20:45:8c:35:
                    13:85:ef:55:cd:90:53:a7:79:e3:4a:7a:6e:1a:31:
                    93:a6:1d:40:89:c2:ff:2e:2d:df:79:cd:b2:69:73:
                    51:11:db:1c:1f:e7:b4:1c:e2:b9:f7:e9:13:92:dd:
                    cf:a0:82:5b:59:10:92:2c:0a:f5:64:60:df:f6:c6:
                    76:99:b4:40:bd:9e:1a:e8:3f:cb:05:55:d7:44:cb:
                    0e:a6:4a:52:6e:04:97:04:a2:b6:56:c8:f8:d4:a8:
                    70:4d:bb:10:96:72:c8:8d:f5:d6:0f:ae:d6:28:c4:
                    1e:df:35:c4:b8:84:6b:40:76:af:2b:b1:6c:93:8d:
                    78:c3:39:ff:8f:c7:68:4e:c6:77:98:9a:2e:67:9d:
                    07:ea:c0:2c:4d:29:18:0c:36:be:17:89:41:13:8a:
                    df:b9:1a:69:6b:16:70:15:9a:6f:49:11:aa:4d:fb:
                    41:ac:e1:d2:30:14:98:fa:aa:16:73:c0:7a:b9:7e:
                    34:04:ee:93:65:ae:9c:61:12:ec:df:dd:df:cf:5a:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:8B:CF:01:29:6F:37:80:4B:01:10:64:46:2A:31:05:97:4B:EC
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/g0OLzwEpbzeASwEQZEYqMQWXS-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:46:81:cb:06:14:a4:a0:0e:92:c7:34:7f:0b:9b:e2:ad:
         d5:16:99:4f:50:95:56:83:1c:ea:75:52:97:12:96:96:28:75:
         a8:c0:46:e3:b5:99:f7:b7:17:0b:6f:78:8c:81:34:3e:30:8f:
         38:54:3b:ad:6a:b5:0c:f6:c4:d7:6e:f2:09:dc:80:8f:a4:c1:
         5c:f0:fc:c6:dc:de:cf:a1:8d:9e:40:1f:93:d6:bd:30:bd:d8:
         a5:b0:ba:02:b4:92:c4:b9:e3:82:3f:89:5d:be:ee:58:48:72:
         18:8c:1c:86:6f:84:bc:ef:f6:a5:2e:15:01:a2:ea:14:7a:14:
         d6:15:78:3d:77:c2:17:3f:af:1a:96:54:cc:87:c6:f4:ba:18:
         33:73:84:7d:f1:4a:d6:c9:40:f0:a0:31:11:70:ac:53:be:91:
         58:3b:6b:de:53:3f:3a:3b:05:72:bd:d2:d8:48:bc:de:cb:7a:
         2d:8c:81:56:1b:44:0c:85:b3:8b:09:ec:1d:99:b3:79:b0:3c:
         b7:fa:31:3d:35:f7:ba:3f:4c:34:0d:b6:f8:f0:d9:11:4c:25:
         11:6d:17:e9:bb:b3:d3:d6:7b:84:cd:64:08:c4:6f:bc:22:03:
         61:f6:47:c0:f1:9e:bc:a2:de:ab:38:7a:01:6e:2c:be:c5:b5:
         c4:c6:4c:c8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI2MDMwMTAx
MzIwMVoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoODM0MzhCQ0YwMTI5NkYz
NzgwNEIwMTEwNjQ0NjJBMzEwNTk3NEJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOMMFSY6NpVCxAxMI52LnQbb2B/Vnqr1zPb2g3GcODMCjylre2JB
aP0rM1qYYgfaToehE7W74oggRYw1E4XvVc2QU6d540p6bhoxk6YdQInC/y4t33nN
smlzURHbHB/ntBziuffpE5Ldz6CCW1kQkiwK9WRg3/bGdpm0QL2eGug/ywVV10TL
DqZKUm4ElwSitlbI+NSocE27EJZyyI311g+u1ijEHt81xLiEa0B2ryuxbJONeMM5
/4/HaE7Gd5iaLmedB+rALE0pGAw2vheJQROK37kaaWsWcBWab0kRqk37Qazh0jAU
mPqqFnPAerl+NATuk2WunGES7N/d389aaAcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSDQ4vPASlvN4BLARBkRioxBZdL7DAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvZzBPTHp3RXBiemVBU3dFUVpFWXFNUVdYUy13LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SyUDANBgkqhkiG9w0BAQsFAAOCAQEAKsZGgcsGFKSgDpLHNH8Lm+Kt1RaZ
T1CVVoMc6nVSlxKWlih1qMBG47WZ97cXC294jIE0PjCPOFQ7rWq1DPbE127yCdyA
j6TBXPD8xtzez6GNnkAfk9a9ML3YpbC6ArSSxLnjgj+JXb7uWEhyGIwchm+EvO/2
pS4VAaLqFHoU1hV4PXfCFz+vGpZUzIfG9LoYM3OEffFK1slA8KAxEXCsU76RWDtr
3lM/OjsFcr3S2Ei83st6LYyBVhtEDIWziwnsHZmzebA8t/oxPTX3uj9MNA22+PDZ
EUwlEW0X6buz09Z7hM1kCMRvvCIDYfZHwPGevKLeqzh6AW4svsW1xMZMyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:38 2026 by rpki-client