Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/IAqH6r-_7w18XdP5fI6M9WEBZQs.roa
File:                     IAqH6r-_7w18XdP5fI6M9WEBZQs.roa (raw, json)
Hash identifier:          r1xQ5SGPiBHjUf2xdAd3gtqWv7ysLK9nIS7+lxJEC1k=
Subject key identifier:   20:0A:87:EA:BF:BF:EF:0D:7C:5D:D3:F9:7C:8E:8C:F5:61:01:65:0B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0259
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/IAqH6r-_7w18XdP5fI6M9WEBZQs.roa
Signing time:             Tue 31 Mar 2026 07:36:14 +0000
ROA not before:           Tue 31 Mar 2026 07:36:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131958
IP address blocks:        133.238.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=200A87EABFBFEF0D7C5DD3F97C8E8CF56101650B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:e0:15:05:62:fc:6c:4a:db:f1:96:98:a3:
                    17:1b:5d:82:cb:99:32:1b:44:ea:00:4c:9b:5b:ed:
                    de:85:c3:dc:d0:0a:9e:f4:3c:a0:bb:48:f9:a8:34:
                    09:7e:3a:b2:6a:94:ec:ff:92:e9:d8:db:ce:83:ba:
                    4a:ec:5c:78:21:e0:a3:95:72:e7:fe:03:57:a4:c7:
                    25:ef:ee:3c:79:86:3e:db:8b:37:bf:7e:95:15:8e:
                    33:3d:fa:c8:8c:54:a5:49:08:04:65:2b:f4:2a:43:
                    72:79:bf:e1:6e:02:ca:a9:e3:52:e8:cc:fa:22:4f:
                    7c:b9:11:af:e9:4e:b6:c8:3b:1a:a3:11:3e:9e:e4:
                    4c:24:89:16:5c:55:75:77:b4:b8:4d:c8:9b:3b:8d:
                    e7:b0:9d:2e:ae:37:6a:3f:9b:18:53:6f:48:bf:d4:
                    f1:81:94:52:97:33:eb:af:98:51:70:fb:0c:79:ad:
                    bb:3b:6b:65:62:8c:66:03:03:75:ed:d3:08:80:1d:
                    7f:1b:13:9c:17:ff:2f:74:04:cf:73:ed:70:71:74:
                    04:88:90:4c:6d:f3:d7:3e:28:f4:20:bd:7e:10:78:
                    58:ef:56:e2:d2:cd:85:31:95:7e:8a:e2:29:0b:e7:
                    00:ca:6e:76:e1:25:f1:6b:14:b9:18:7b:80:cf:7f:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0A:87:EA:BF:BF:EF:0D:7C:5D:D3:F9:7C:8E:8C:F5:61:01:65:0B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/IAqH6r-_7w18XdP5fI6M9WEBZQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:93:6c:d4:46:91:9e:79:e9:5d:d1:46:e4:c1:90:e8:f0:
         0c:fd:ad:4d:d4:9f:98:93:3e:95:3c:65:46:3a:2c:eb:4b:a8:
         08:b0:a4:de:c5:15:bc:47:11:64:25:6d:c4:ac:fb:48:8a:76:
         ae:ef:91:a3:f1:64:03:54:f1:72:37:32:04:99:3d:bb:02:8e:
         42:24:02:7f:3e:dc:b8:5a:df:5b:7c:ff:3e:fa:d7:51:7b:68:
         88:2e:ee:62:e6:ec:b7:69:c0:e0:e4:7b:0a:c3:9e:c2:a2:ab:
         21:2c:53:c2:61:a8:63:81:07:51:20:07:12:3a:a3:f4:09:b7:
         67:b7:2d:8d:53:95:83:72:b3:6b:58:03:9d:a7:4e:4a:fc:9e:
         ae:97:93:30:7c:7f:a4:4c:24:5f:20:28:81:f3:92:4d:c5:ca:
         f4:fe:83:9b:20:16:45:42:c9:9c:75:f0:fa:04:59:bd:6d:61:
         ea:dd:59:b5:81:74:4c:ed:8e:f8:9d:b7:10:20:b3:ea:70:d6:
         21:8c:54:ba:1e:b6:bf:95:f8:ee:25:bf:b4:59:8d:f3:46:c8:
         6f:5d:64:5e:5c:be:39:7b:d4:72:30:62:8a:ed:0e:35:b5:a7:
         c4:2f:5f:d0:3d:7d:8f:4b:62:f2:ec:92:74:69:0a:66:bf:3f:
         89:fa:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:01 2026 by rpki-client