Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20072/gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa
File:                     gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa (raw, json)
Hash identifier:          vmByOm0oTcOXSbVbkNMz7t3HMKwfeSznbQ2FDKNNE7o=
Subject key identifier:   81:8D:4C:F5:66:C6:27:6A:87:0F:40:5C:8A:A1:FD:80:FB:32:AF:1A
Certificate issuer:       /CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
Certificate serial:       03
Authority key identifier: C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa
Signing time:             Fri 15 May 2026 02:30:35 +0000
ROA not before:           Fri 15 May 2026 02:30:35 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     131937
IP address blocks:        170.249.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
        Validity
            Not Before: May 15 02:30:35 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=818D4CF566C6276A870F405C8AA1FD80FB32AF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:19:f9:53:80:36:8a:a5:33:8a:f8:b0:74:
                    d9:c6:e9:34:a4:12:83:fe:76:88:ab:73:b0:ff:c9:
                    56:6c:32:36:ce:2f:f5:03:9e:cb:63:6b:17:d1:95:
                    eb:22:ca:27:15:a4:3e:fe:16:6a:17:01:08:af:dc:
                    bf:3e:f7:80:86:3d:82:b5:ef:5f:2e:ec:eb:d6:00:
                    7a:31:16:3f:36:09:d8:a6:e0:39:6f:1e:44:9b:a4:
                    80:37:a4:30:0f:70:86:04:d0:f1:98:24:b9:f0:37:
                    a9:74:ac:cf:84:b1:49:80:20:48:3d:43:5d:21:09:
                    b1:50:8c:c4:7c:fc:50:fe:85:48:e5:71:77:0d:0b:
                    ea:9d:7e:a4:9e:f3:40:8a:d7:9d:21:a4:fb:e0:a6:
                    24:bf:b0:9c:95:f8:41:3b:97:54:8f:e5:e3:34:69:
                    a1:46:9f:d5:23:30:dc:57:a9:fb:4d:6f:67:c3:b8:
                    2a:87:7c:a4:7c:0f:17:18:20:9f:8f:f7:3c:ec:47:
                    73:2b:23:58:e0:3e:fc:be:d7:c5:a2:02:04:aa:fc:
                    76:75:cd:ba:a9:86:1a:dd:26:ca:5b:a3:23:be:b6:
                    8e:5d:c4:50:d9:5b:5b:90:5f:6c:10:20:fa:1e:97:
                    ea:c8:24:20:c9:8a:d9:e3:4d:1f:fb:66:a9:60:8e:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8D:4C:F5:66:C6:27:6A:87:0F:40:5C:8A:A1:FD:80:FB:32:AF:1A
            X509v3 Authority Key Identifier:
                keyid:C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:23:c8:0c:a5:7b:7e:19:7d:e8:dd:b8:d3:f6:08:1b:2d:63:
         be:23:7f:e2:8c:ce:52:dc:e2:bf:db:e6:4b:88:47:e5:fe:b5:
         48:b7:01:34:f8:28:02:25:ea:5f:3e:3a:ea:11:aa:16:ea:b1:
         87:39:9e:50:50:27:25:4f:10:2b:55:a5:af:bf:ba:b4:86:5e:
         c4:b2:f9:cc:9c:ea:d9:31:4c:24:d9:f6:33:1b:46:7e:ef:ed:
         ff:87:cc:7e:34:92:6a:4b:de:6b:2b:cf:45:d4:da:34:e5:83:
         12:17:de:d7:8c:fc:70:3a:0e:83:c4:c4:df:a8:3c:ce:45:90:
         41:d2:b4:1f:58:3d:7d:67:f1:ab:8a:97:fb:78:b0:6d:0d:15:
         22:eb:c0:5d:4c:31:c9:94:c2:7d:6d:96:9f:62:7b:8f:96:28:
         9e:45:17:ec:31:73:0a:9b:48:a0:03:3a:29:2f:49:c7:10:d7:
         3f:c3:0f:54:1f:af:16:0c:64:34:69:90:c3:9c:e2:5a:2d:bb:
         70:04:4e:ff:45:b3:11:26:84:00:b7:c8:a5:a9:a2:00:66:3c:
         41:5f:43:b4:c3:5c:20:4e:7c:97:30:28:06:fb:04:37:95:b7:
         2e:f6:e0:e9:11:ed:ce:6c:b0:1e:fc:50:b1:26:5f:9d:e6:82:
         6f:ef:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:22 2026 by rpki-client