Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa
File:                     Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa (raw, json)
Hash identifier:          AyYVV0sDX6y1bG6KLjTx7stNd/l4iyBfwZOKbNjn0aI=
Subject key identifier:   1B:3E:DA:00:8A:92:89:74:13:C6:F0:E1:D8:3D:44:69:BB:69:14:68
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       021E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa
Signing time:             Tue 31 Mar 2026 07:35:44 +0000
ROA not before:           Tue 31 Mar 2026 07:35:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        58.138.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B3EDA008A92897413C6F0E1D83D4469BB691468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:27:88:5b:6d:6a:19:6b:c9:ce:a4:eb:59:
                    09:b5:60:51:ea:e1:a6:50:20:d4:c3:b5:0d:26:c5:
                    e2:fd:7a:43:75:35:41:14:9f:b4:4a:e4:67:e3:58:
                    dc:eb:4a:d6:4c:79:0e:d4:88:04:a3:7a:ed:6a:8b:
                    14:e5:ea:0c:05:a5:65:ee:44:12:c1:7b:f3:0e:86:
                    fd:68:d9:fb:7e:78:25:dd:e3:8e:a5:f8:7f:2b:29:
                    ba:b6:b4:74:4d:46:fb:77:0c:88:40:85:6f:df:48:
                    ad:63:cf:55:e4:9b:a7:61:62:b0:2b:d1:8c:14:41:
                    bc:ab:0a:9c:58:d5:b4:2d:1c:c1:16:94:92:f2:fa:
                    72:88:98:f0:fb:e2:eb:bf:3d:e1:f5:5b:2f:e6:25:
                    6d:89:59:e6:3d:84:32:c0:06:bb:12:42:a2:d4:26:
                    bd:60:91:24:96:1a:b6:50:be:2f:1b:aa:57:e5:af:
                    fd:ae:fb:d5:67:15:d3:5c:08:e5:98:c6:3c:4a:8d:
                    7d:b0:d1:21:d2:e5:a9:95:22:3e:3e:e5:1c:60:08:
                    4e:df:8b:3f:49:29:3d:a3:0c:c3:f8:df:67:c9:c2:
                    21:9d:7f:3d:82:5c:85:1c:a8:ca:94:67:13:6d:10:
                    ac:41:42:f0:37:66:73:24:9e:01:76:12:fa:50:f1:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:DA:00:8A:92:89:74:13:C6:F0:E1:D8:3D:44:69:BB:69:14:68
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Gz7aAIqSiXQTxvDh2D1EabtpFGg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:62:3b:82:37:e6:77:ab:d9:4a:d9:b3:87:f0:ef:b6:ef:
         20:38:fb:a2:17:48:b3:42:4f:c9:2a:86:2e:1e:eb:f8:95:91:
         94:10:6b:0a:27:00:e6:57:01:7b:87:4f:3f:cc:55:e2:4c:fb:
         94:d5:51:cd:a9:64:e1:99:15:db:54:21:34:f8:c0:d8:83:97:
         f3:89:3d:3a:52:f2:76:82:c1:1f:7e:5e:a6:7e:32:d1:ae:d9:
         40:57:12:5e:0c:42:b4:b1:08:18:64:a1:d5:73:fd:35:d7:c5:
         42:1a:95:5c:e5:e0:48:dc:47:02:ac:aa:fc:9f:4f:27:8c:40:
         86:9b:f4:3b:f0:27:4e:f2:83:8e:4e:81:65:a2:73:de:ce:08:
         2f:32:da:61:3c:1b:46:12:29:a7:a8:9c:99:18:5c:0b:d8:94:
         48:11:91:e4:0b:0d:fb:68:e4:c3:aa:d8:77:c9:f0:b9:af:22:
         8b:c8:a1:9d:7d:bb:5e:7e:a4:40:66:8b:84:e1:4c:d7:a2:ef:
         85:bb:34:d5:fe:e7:be:2e:17:b3:1a:ec:7c:3b:ef:8b:94:0c:
         7f:62:27:83:97:98:d0:01:49:04:b8:0b:51:51:ba:fd:d4:f8:
         47:9e:8e:d6:3c:64:88:a0:09:94:70:e7:ed:cf:f9:aa:df:39:
         cd:2d:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client