Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa
File:                     gOaZtcnwo3leL95ZDSjeSoHyisA.roa (raw, json)
Hash identifier:          UcLSrZEPdPJ98tETfVIOEUOjUMUNxiJRonwK3x+4D9k=
Subject key identifier:   80:E6:99:B5:C9:F0:A3:79:5E:2F:DE:59:0D:28:DE:4A:81:F2:8A:C0
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       A8
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa
Signing time:             Tue 31 Mar 2026 07:38:49 +0000
ROA not before:           Tue 31 Mar 2026 07:38:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        203.209.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 31 07:38:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=80E699B5C9F0A3795E2FDE590D28DE4A81F28AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:47:1d:6d:3f:47:17:bd:87:3a:93:7b:79:
                    60:a5:bb:83:e9:9e:37:cc:46:23:d0:fc:15:03:74:
                    36:87:d3:35:a9:7a:05:e4:7c:a3:87:05:49:19:06:
                    a5:9a:1c:bb:e7:0a:34:85:8f:fb:cb:3f:98:bf:46:
                    5b:91:50:06:62:56:00:6a:6d:0c:4d:bf:46:9e:23:
                    69:fd:22:8b:47:e1:38:fd:30:d5:29:01:c7:1d:3e:
                    fa:90:05:d3:70:f5:37:db:35:7c:ff:c3:b8:4a:99:
                    00:cd:39:0b:ff:d0:18:3d:71:19:c8:07:01:70:cd:
                    cd:8f:e4:28:fb:97:f2:07:f0:1e:79:bf:03:5f:53:
                    73:f5:9c:b7:7b:c3:b9:b9:54:86:96:6e:50:72:06:
                    73:83:7f:96:07:6d:03:bc:cc:1a:74:a2:fc:ad:4b:
                    0a:3f:27:ac:8d:97:23:e9:87:09:d1:ee:27:48:ad:
                    b0:e0:ff:73:23:6d:6d:11:e5:6d:06:60:46:15:c9:
                    8e:ac:40:6b:c8:03:d6:7b:23:1f:41:e8:9b:9a:5f:
                    54:67:ae:85:4d:ae:a6:a1:c4:21:80:97:59:76:49:
                    13:ce:df:a0:fa:de:8b:63:c8:97:4d:5d:09:5a:24:
                    7a:95:13:3b:83:38:23:a1:f5:4f:b9:70:cb:56:c3:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E6:99:B5:C9:F0:A3:79:5E:2F:DE:59:0D:28:DE:4A:81:F2:8A:C0
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gOaZtcnwo3leL95ZDSjeSoHyisA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:f3:42:b9:3e:9e:a9:5b:98:08:98:a3:fa:11:f7:cb:12:
         43:5d:0c:4a:46:ab:80:76:53:48:89:07:75:96:39:67:18:82:
         ff:c8:fa:45:ee:5e:34:2d:a1:ef:a5:1b:c9:c6:04:17:05:35:
         b3:db:96:25:d4:ca:cc:ae:89:c2:9e:da:2e:5b:c9:74:eb:73:
         99:3d:73:71:32:22:70:82:3a:3c:96:bb:04:30:02:c7:dc:25:
         91:9d:36:6a:16:6d:60:ab:41:3a:1d:f2:39:9e:bc:d7:e1:26:
         70:dd:43:da:92:74:39:5e:d6:22:a7:e9:f0:0a:5b:05:fe:f7:
         8f:0e:d2:9f:e5:61:c9:d2:51:c5:6e:25:cd:64:7d:90:b5:eb:
         45:46:d8:31:8b:75:9a:7f:6c:92:41:fd:87:2f:05:01:e3:2f:
         40:7d:63:6f:46:f5:d4:62:38:a5:34:49:45:cc:1b:ea:01:4b:
         06:b9:f9:0c:d8:6e:0e:1c:51:43:0a:11:66:92:eb:44:10:4a:
         ed:4d:a8:c9:c7:16:75:a4:40:b7:c2:66:cc:23:fb:08:a3:07:
         4d:cc:a9:81:b9:72:6b:bb:f2:34:c0:70:85:f1:4e:66:79:47:
         44:b8:5b:68:e9:3f:42:a7:d0:39:46:66:20:52:86:7f:2e:44:
         3d:da:65:10
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw
ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNjAzMzEw
NzM4NDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwRTY5OUI1QzlGMEEz
Nzk1RTJGREU1OTBEMjhERTRBODFGMjhBQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYHkcdbT9HF72HOpN7eWClu4PpnjfMRiPQ/BUDdDaH0zWpegXk
fKOHBUkZBqWaHLvnCjSFj/vLP5i/RluRUAZiVgBqbQxNv0aeI2n9IotH4Tj9MNUp
AccdPvqQBdNw9TfbNXz/w7hKmQDNOQv/0Bg9cRnIBwFwzc2P5Cj7l/IH8B55vwNf
U3P1nLd7w7m5VIaWblByBnODf5YHbQO8zBp0ovytSwo/J6yNlyPphwnR7idIrbDg
/3MjbW0R5W0GYEYVyY6sQGvIA9Z7Ix9B6JuaX1RnroVNrqahxCGAl1l2SRPO36D6
3otjyJdNXQlaJHqVEzuDOCOh9U+5cMtWw0LpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgOaZtcnwo3leL95ZDSjeSoHyisAwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk
5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4
UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvODk3L2dPYVp0Y253bzNsZUw5NVpEU2plU29IeWlzQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALL0bgwDQYJKoZIhvcNAQELBQADggEB
AHqM80K5Pp6pW5gImKP6EffLEkNdDEpGq4B2U0iJB3WWOWcYgv/I+kXuXjQtoe+l
G8nGBBcFNbPbliXUysyuicKe2i5byXTrc5k9c3EyInCCOjyWuwQwAsfcJZGdNmoW
bWCrQTod8jmevNfhJnDdQ9qSdDle1iKn6fAKWwX+948O0p/lYcnSUcVuJc1kfZC1
60VG2DGLdZp/bJJB/YcvBQHjL0B9Y29G9dRiOKU0SUXMG+oBSwa5+QzYbg4cUUMK
EWaS60QQSu1NqMnHFnWkQLfCZswj+wijB03MqYG5cmu78jTAcIXxTmZ5R0S4W2jp
P0Kn0DlGZiBShn8uRD3aZRA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:27 2026 by rpki-client