Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/22v-4FqrEWeqjjS8G2dvq0sapOg.roa
File:                     22v-4FqrEWeqjjS8G2dvq0sapOg.roa (raw, json)
Hash identifier:          drjjqp+XCEMuWqmuIs3/IlErh48KwsOXO49MFxPedw8=
Subject key identifier:   DB:6B:FE:E0:5A:AB:11:67:AA:8E:34:BC:1B:67:6F:AB:4B:1A:A4:E8
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       5F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/22v-4FqrEWeqjjS8G2dvq0sapOg.roa
Signing time:             Tue 31 Mar 2026 08:36:42 +0000
ROA not before:           Tue 31 Mar 2026 08:36:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB6BFEE05AAB1167AA8E34BC1B676FAB4B1AA4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:f6:5a:b2:e1:73:a0:fc:54:22:83:9d:65:
                    ea:de:79:85:dc:70:2d:f1:79:40:a7:ff:04:82:9d:
                    f7:d3:9c:62:e1:4b:5c:65:a6:8a:73:f8:24:25:8b:
                    92:61:f1:e9:c2:94:68:a8:5c:96:90:bc:af:bb:f9:
                    b7:c6:a3:f5:c5:aa:b9:87:b4:87:9c:1f:71:0a:35:
                    6f:4e:5d:6c:54:c9:3c:20:d7:cb:ed:5f:c7:56:a1:
                    82:b6:dd:fa:01:b2:81:82:15:69:bb:cb:b1:8c:e1:
                    2f:e8:b8:39:5d:6f:7a:e5:25:11:33:1c:f4:ae:15:
                    02:20:b2:bc:5f:a1:0b:84:77:dc:9d:81:e0:d3:e3:
                    44:2b:e4:cb:04:b8:ee:92:27:55:9e:9f:19:40:d3:
                    b2:62:0e:00:59:cf:c7:e5:80:2d:cf:a1:fd:7e:c6:
                    87:de:77:7e:72:ed:69:5b:6f:25:d3:07:37:8a:ec:
                    22:5d:dd:a5:71:ed:8f:52:47:91:9b:88:69:80:f6:
                    50:d0:43:ee:7a:5f:00:f6:b2:9f:4d:1e:6c:ff:f7:
                    be:ab:56:1e:03:5a:a8:8b:2c:ce:70:49:c3:bc:ba:
                    3b:d3:1d:3b:79:10:74:b2:dd:85:63:6f:b3:79:22:
                    c2:fe:c4:7e:86:40:bb:ce:de:50:b1:4e:6c:77:7e:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:FE:E0:5A:AB:11:67:AA:8E:34:BC:1B:67:6F:AB:4B:1A:A4:E8
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/22v-4FqrEWeqjjS8G2dvq0sapOg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:ed:b8:03:8a:54:1c:cb:83:8c:0e:a0:7c:bf:c7:ed:ef:
         21:c3:5f:f7:55:e6:88:5c:b3:6c:2d:c3:f6:19:4d:7f:7b:28:
         57:b6:2e:74:7b:05:74:03:18:53:d4:ac:bd:96:83:6b:48:58:
         87:9f:2c:42:e3:94:c8:6c:87:8b:40:87:b2:2f:1e:eb:fc:4b:
         bc:68:12:b8:3d:1a:46:cc:b2:6e:92:ac:96:a9:54:63:de:76:
         55:73:a0:2f:3b:48:73:4b:27:58:03:f8:c7:51:95:3c:da:7a:
         f2:2c:79:1b:13:90:c6:cd:71:4f:c7:cf:43:0b:3b:c2:71:47:
         90:f7:17:64:cc:d6:29:94:68:46:74:bd:79:c1:f8:e1:5d:85:
         b5:65:f1:24:91:2e:d8:2f:5f:cc:d3:57:d5:15:13:63:a6:aa:
         08:62:3d:45:ac:d0:af:59:43:5b:25:8a:1b:f5:46:02:0e:7d:
         69:9c:d6:9d:c3:98:86:80:09:b3:2a:41:52:54:75:1a:43:45:
         d6:75:3e:4f:ed:58:da:f8:dd:f7:dd:3a:ea:b6:51:ee:ba:12:
         8d:e9:07:03:f8:b1:5e:73:89:83:fa:b4:db:20:22:7f:09:83:
         77:82:f8:a3:20:f0:dc:d5:46:93:59:29:17:12:25:da:8a:70:
         cc:1d:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:24 2026 by rpki-client