Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/6apOA0c4LIxgiHCVN5jYpER5Zp4.roa
File:                     6apOA0c4LIxgiHCVN5jYpER5Zp4.roa (raw, json)
Hash identifier:          J8ifQP67jnG0UjQlcoOwMVhw1nHy5uw8d8Hg8pd2yDI=
Subject key identifier:   E9:AA:4E:03:47:38:2C:8C:60:88:70:95:37:98:D8:A4:44:79:66:9E
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       59
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/6apOA0c4LIxgiHCVN5jYpER5Zp4.roa
Signing time:             Tue 31 Mar 2026 08:31:05 +0000
ROA not before:           Tue 31 Mar 2026 08:31:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131923
IP address blocks:        133.247.136.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Mar 31 08:31:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E9AA4E0347382C8C608870953798D8A44479669E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:32:5d:87:c8:9c:1a:24:d6:98:4b:f0:21:
                    8c:2a:51:2e:37:04:9d:0b:f3:a9:13:ba:f0:27:d2:
                    69:25:16:bc:18:d8:cd:6f:0b:d5:0d:f1:44:8f:cc:
                    2f:6e:84:ac:34:3a:e1:96:dc:08:f9:43:1b:10:82:
                    9a:da:1e:78:d3:a7:98:a5:b9:65:06:08:7e:e3:8b:
                    40:f2:b4:d5:5f:29:c5:c2:16:f7:7e:83:a7:48:3e:
                    2f:31:31:dd:17:2b:86:5c:07:c7:a8:55:ec:4e:3d:
                    07:0e:ec:9e:a4:36:9b:9f:b0:5f:0f:ed:cd:8d:07:
                    0d:bb:2b:46:81:92:a6:b7:df:fd:77:3a:d3:47:5d:
                    28:de:ba:09:68:33:b8:92:97:0b:7e:40:06:b5:93:
                    76:77:76:45:1d:f0:01:6d:6f:1b:2d:16:b4:d9:5d:
                    ed:d9:14:4e:e4:47:e7:87:04:19:84:35:77:08:03:
                    b3:f4:ea:0a:be:05:2b:10:35:2c:e3:cc:6c:8e:42:
                    c7:cc:c2:3d:ac:68:e2:34:0d:3f:2f:da:5b:f7:e0:
                    d3:d1:b2:b9:3b:4b:d2:37:95:47:28:25:60:d9:69:
                    b6:6e:08:fb:1f:25:41:7b:2c:20:17:db:58:5c:7e:
                    3a:23:00:83:aa:64:26:9b:81:c0:a1:35:a4:f2:6e:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:4E:03:47:38:2C:8C:60:88:70:95:37:98:D8:A4:44:79:66:9E
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/6apOA0c4LIxgiHCVN5jYpER5Zp4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:48:0b:4f:a3:6d:86:28:b0:86:ce:66:5c:c2:de:99:e9:8a:
         a1:12:37:dc:ec:11:16:96:45:38:c0:7e:f9:ac:1b:b0:3d:bb:
         6c:10:cc:0d:23:9a:6c:e7:31:c7:ce:30:aa:fb:6c:06:1f:a9:
         0e:a8:bd:ad:9d:e5:d7:2e:9d:c2:4f:85:83:cb:3c:6e:cb:8b:
         41:00:24:03:33:d8:67:c8:0f:b6:2d:d4:80:a3:ab:37:f3:2d:
         b9:65:5f:88:4b:a5:86:8a:cf:da:b8:b7:be:87:88:b7:4f:4c:
         bb:db:8a:f5:12:cf:38:f9:ae:59:1c:d4:5f:5c:ef:4a:7d:e3:
         8c:c8:e2:1f:f1:fa:a1:23:1f:aa:12:ff:08:52:ef:1f:ff:4a:
         17:e2:e8:17:29:bb:86:59:d5:82:bf:29:c8:ee:35:98:c7:cb:
         0c:de:bb:f5:3b:45:88:05:6c:a2:11:1b:6d:f3:18:91:03:12:
         c3:23:d5:8e:b0:cc:d1:05:6d:af:a8:80:62:c2:ee:ed:29:55:
         7c:dc:bd:f0:f6:38:d4:8a:22:d1:34:fc:8c:86:8f:78:b1:01:
         b0:52:cc:14:dc:6c:33:b7:9f:cc:0f:98:a0:a6:22:d8:be:5d:
         77:9a:6d:96:52:5d:7a:a6:6c:85:5d:bb:70:2c:c7:e1:88:2f:
         64:a0:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:03 2026 by rpki-client