Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa
File:                     gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa (raw, json)
Hash identifier:          aShxywQWerQOavWLiPw737ivhKkaYrOz9iva5QnkhWE=
Subject key identifier:   83:2F:96:7F:56:1B:C2:FB:2D:58:0F:10:B3:B6:19:83:41:3E:8B:B6
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0246
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa
Signing time:             Tue 31 Mar 2026 07:36:04 +0000
ROA not before:           Tue 31 Mar 2026 07:36:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.238.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=832F967F561BC2FB2D580F10B3B61983413E8BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:23:ab:d0:d0:b5:1b:d8:39:d5:be:bf:96:
                    d7:61:92:e0:39:f0:c6:98:93:da:79:af:39:86:f4:
                    3b:28:dc:1c:dc:94:0a:69:84:14:7d:5d:29:db:24:
                    87:53:4f:85:21:63:eb:5b:aa:88:59:d6:c0:6f:15:
                    bd:c1:b8:a3:fb:df:56:40:8d:ba:64:75:5b:58:02:
                    0c:cd:3b:df:0d:25:18:f2:b1:ee:a8:63:35:80:3e:
                    05:7b:36:b7:e1:d9:0e:d0:59:6d:e5:56:4e:6a:c9:
                    1d:62:89:85:ef:cd:cb:e2:04:5e:39:fa:40:d8:ae:
                    fd:72:4a:f9:db:fc:cf:15:af:a9:5b:c2:e0:91:75:
                    a1:2d:84:81:8c:f5:44:d1:bd:24:d4:2a:16:4a:69:
                    de:a1:1f:81:e5:df:76:59:a1:29:9b:ee:cf:e4:4a:
                    68:f0:1b:dc:d2:94:ed:7c:db:77:14:85:8a:56:44:
                    02:24:e5:8d:52:c9:3e:33:34:e4:38:d9:c4:5d:49:
                    fe:ad:0e:78:70:20:a4:e9:97:76:c2:5b:ae:44:97:
                    03:e2:d9:bb:fb:fb:47:24:25:ae:39:44:6d:16:24:
                    f8:50:9f:69:ac:4b:0a:64:a4:8a:8b:31:14:8d:7a:
                    44:dd:2a:2a:08:c9:98:da:a8:f8:b0:60:71:f9:9c:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:96:7F:56:1B:C2:FB:2D:58:0F:10:B3:B6:19:83:41:3E:8B:B6
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:d5:15:a3:25:19:5e:74:f4:8e:5d:53:aa:65:1e:2e:06:
         e8:83:29:00:d5:f4:10:61:d5:aa:bc:33:6d:fb:08:7d:32:b8:
         a9:65:0b:a1:2e:a6:50:c0:76:70:81:72:c2:a8:88:90:26:49:
         e5:21:11:d8:31:1c:2d:5e:d7:82:55:a5:57:8b:9e:e8:ac:9b:
         38:f8:41:47:05:b4:03:9f:f8:4a:f9:52:d4:05:5a:0e:6b:38:
         40:cb:0f:53:f8:1a:d3:91:6e:77:0f:8b:f3:5a:2e:8f:fa:2a:
         b4:f6:e8:a3:a3:0c:b3:51:5f:e5:a8:a5:f6:de:51:51:3f:d6:
         6c:7e:1d:28:23:fa:9d:1f:70:85:5e:64:71:93:e3:66:64:78:
         5a:6b:02:e7:4d:14:cb:4e:08:89:2d:36:d1:23:7c:de:ba:c6:
         e2:5f:e6:e4:ee:05:eb:00:37:01:b6:0e:c7:be:10:88:9e:e2:
         21:86:75:cc:40:2a:09:0f:4a:61:1e:39:c5:f0:aa:8c:1d:95:
         69:75:a8:47:fe:e6:37:2c:17:27:d2:17:10:e4:20:e4:d4:f8:
         ae:b8:c6:e9:3c:af:a4:b8:4c:24:0b:e1:43:a2:85:4f:fa:f0:
         7f:f7:59:cd:d2:f3:95:34:ef:41:d1:7f:52:68:99:36:6e:7e:
         b3:c1:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:12 2026 by rpki-client