Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/5AgPiCORi4rhXxgxg6PsD5JdhaM.roa
File:                     5AgPiCORi4rhXxgxg6PsD5JdhaM.roa (raw, json)
Hash identifier:          GaKm0SiWqID1BOoCvaQt18kB0uyKwQPTB4XrTg2bO6c=
Subject key identifier:   E4:08:0F:88:23:91:8B:8A:E1:5F:18:31:83:A3:EC:0F:92:5D:85:A3
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       5C
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/5AgPiCORi4rhXxgxg6PsD5JdhaM.roa
Signing time:             Tue 31 Mar 2026 08:36:41 +0000
ROA not before:           Tue 31 Mar 2026 08:36:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E4080F8823918B8AE15F183183A3EC0F925D85A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:88:c8:92:87:e0:47:b7:ef:7b:f4:47:dc:
                    cb:ce:c6:65:fb:90:86:19:84:64:70:4c:02:76:b6:
                    08:e8:69:76:00:54:2e:ce:2b:29:d9:3f:dd:a3:08:
                    d1:43:18:56:86:12:04:b1:db:78:c1:2a:c5:40:0a:
                    b8:49:e6:88:25:36:e4:0d:b8:fe:a8:47:f1:5c:f0:
                    e1:3d:3c:3d:11:5d:a4:34:80:b1:9c:20:0d:8b:a0:
                    85:e1:3e:6a:1a:73:ba:9b:87:7c:0b:8e:90:2f:a9:
                    f9:98:4d:aa:e9:ba:03:8f:cb:37:b7:8b:d2:33:c4:
                    77:81:d4:b4:66:aa:ca:d7:51:9c:3c:64:74:60:c3:
                    09:0f:32:4f:4e:dd:dc:88:5e:1f:40:a0:13:2b:7e:
                    4f:1b:b2:65:b1:c3:ce:f5:63:17:e6:8c:f4:6f:83:
                    ca:c2:4c:d7:9c:24:69:59:cc:06:56:81:ba:af:02:
                    c2:b4:30:ff:28:74:80:00:0b:d7:81:96:10:58:c0:
                    bb:c4:f1:63:d4:9e:9a:a2:5d:fe:66:1c:9d:17:8c:
                    5d:12:8d:c8:1a:9a:0b:94:8a:67:e0:12:e8:a0:f8:
                    12:10:93:ce:e0:e4:4b:5f:0a:93:00:3c:51:4e:b4:
                    ad:fb:34:12:b1:8b:65:b8:05:7e:a6:dd:6b:aa:a5:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:0F:88:23:91:8B:8A:E1:5F:18:31:83:A3:EC:0F:92:5D:85:A3
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/5AgPiCORi4rhXxgxg6PsD5JdhaM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:d6:4a:ff:88:3c:bf:cf:6f:85:b0:c0:f8:c6:6e:e3:8d:
         43:6b:b7:ea:e3:3c:82:2d:ff:9f:bf:a9:e5:bf:a1:9b:36:9c:
         30:8f:3c:85:2b:24:6e:53:df:14:ab:dc:7d:36:58:b9:9c:fb:
         77:b9:e8:f9:4d:af:46:9f:9a:64:73:ad:59:d3:c9:32:50:df:
         04:c1:cb:61:c3:7b:d3:48:f7:cf:19:62:53:7f:8a:ec:29:57:
         13:bd:86:c9:66:6a:4a:0f:32:e5:99:1f:68:ea:7a:d9:48:b3:
         f1:4d:17:c0:4e:80:52:4a:ae:ce:29:f7:51:22:7c:bb:43:4f:
         53:87:b7:29:fc:e1:2a:35:11:fa:81:da:d2:ce:5e:91:76:49:
         3b:68:6e:59:58:65:ad:d0:12:16:e4:7f:94:94:09:80:19:74:
         df:e1:2b:a7:c7:58:60:bd:fd:1b:d9:22:46:2f:c8:8a:4b:33:
         be:da:9d:f8:63:7a:5e:21:99:27:79:08:45:12:b4:5c:92:a5:
         7b:90:ce:72:8f:31:6b:23:25:a1:02:0e:9f:3d:93:52:9a:ef:
         1f:94:d8:3a:aa:cf:5f:10:2e:4f:7b:ae:3c:e6:80:4e:d1:d0:
         d2:30:2d:ed:2f:db:5b:ee:a0:05:a1:b9:a6:88:55:fa:f2:1b:
         76:45:07:08
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDMzMTA4
MzY0MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTQwODBGODgyMzkxOEI4
QUUxNUYxODMxODNBM0VDMEY5MjVEODVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM+IiMiSh+BHt+979Efcy87GZfuQhhmEZHBMAna2COhpdgBULs4r
Kdk/3aMI0UMYVoYSBLHbeMEqxUAKuEnmiCU25A24/qhH8Vzw4T08PRFdpDSAsZwg
DYugheE+ahpzupuHfAuOkC+p+ZhNqum6A4/LN7eL0jPEd4HUtGaqytdRnDxkdGDD
CQ8yT07d3IheH0CgEyt+TxuyZbHDzvVjF+aM9G+DysJM15wkaVnMBlaBuq8CwrQw
/yh0gAAL14GWEFjAu8TxY9SemqJd/mYcnReMXRKNyBqaC5SKZ+AS6KD4EhCTzuDk
S18KkwA8UU60rfs0ErGLZbgFfqbda6qlIr0CAwEAAaOCAdowggHWMB0GA1UdDgQW
BBTkCA+II5GLiuFfGDGDo+wPkl2FozAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy81QWdQaUNPUmk0cmhYeGd4ZzZQc0Q1SmRoYU0ucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhbgwDQYJKoZIhvcNAQELBQADggEB
AAnW1kr/iDy/z2+FsMD4xm7jjUNrt+rjPIIt/5+/qeW/oZs2nDCPPIUrJG5T3xSr
3H02WLmc+3e56PlNr0afmmRzrVnTyTJQ3wTBy2HDe9NI988ZYlN/iuwpVxO9hslm
akoPMuWZH2jqetlIs/FNF8BOgFJKrs4p91EifLtDT1OHtyn84So1EfqB2tLOXpF2
STtobllYZa3QEhbkf5SUCYAZdN/hK6fHWGC9/RvZIkYvyIpLM77anfhjel4hmSd5
CEUStFySpXuQznKPMWsjJaECDp89k1Ka7x+U2Dqqz18QLk97rjzmgE7R0NIwLe0v
21vuoAWhuaaIVfryG3ZFBwg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:46 2026 by rpki-client