Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/K864yYe8HEvfvjImy7D17QoYYKY.roa
File:                     K864yYe8HEvfvjImy7D17QoYYKY.roa (raw, json)
Hash identifier:          v+Iy2hnvaDbYalDaNYv5kSCn2P+z0aTCXxhl4jXxQjE=
Subject key identifier:   2B:CE:B8:C9:87:BC:1C:4B:DF:BE:32:26:CB:B0:F5:ED:0A:18:60:A6
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       57
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/K864yYe8HEvfvjImy7D17QoYYKY.roa
Signing time:             Tue 31 Mar 2026 08:36:38 +0000
ROA not before:           Tue 31 Mar 2026 08:36:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2BCEB8C987BC1C4BDFBE3226CBB0F5ED0A1860A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:d8:df:c6:eb:cd:5f:c0:cd:04:a7:1b:d3:
                    b8:3c:29:71:f0:2e:ba:bc:32:29:cd:7b:0b:5a:42:
                    30:82:66:e8:2f:81:e1:7e:30:3d:2a:9d:2e:26:bb:
                    71:fa:74:6c:e5:42:e8:13:a3:0a:45:84:ff:20:88:
                    19:e8:3c:52:2e:65:8c:e1:2a:23:32:55:50:c8:89:
                    8c:c3:b7:09:e1:01:43:27:24:02:56:6e:8c:36:49:
                    0e:ea:4c:0f:8c:9c:60:8c:56:6a:fe:40:89:81:5d:
                    f6:e1:81:e0:ca:4a:14:c9:99:8b:39:32:d3:19:ae:
                    90:75:3b:93:02:f4:2b:8c:82:12:38:76:94:4a:08:
                    53:31:a1:60:7e:11:f7:73:b2:ff:72:7f:a7:09:82:
                    cb:b7:de:46:4e:df:01:0f:f0:ec:64:18:53:8b:a1:
                    66:90:a7:af:65:a6:f2:0b:61:10:54:97:c3:a6:d9:
                    f2:f6:55:61:3f:f5:99:ef:77:be:f6:b7:c9:a3:a9:
                    11:ca:16:df:b7:c1:fa:96:3b:86:84:91:6c:fc:0b:
                    14:66:ec:bd:05:72:6a:9e:4f:97:74:2c:b8:01:82:
                    4d:33:16:d9:de:d4:1b:99:16:1f:af:ea:3f:51:81:
                    29:93:ed:e4:9d:fa:ad:9c:0a:cc:3a:04:4c:4b:af:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CE:B8:C9:87:BC:1C:4B:DF:BE:32:26:CB:B0:F5:ED:0A:18:60:A6
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/K864yYe8HEvfvjImy7D17QoYYKY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:82:f9:c6:07:24:dd:d5:26:42:ae:ca:90:d3:1e:ab:eb:8a:
         a3:57:0f:25:20:84:2c:3f:c3:40:06:0c:6b:49:6f:e2:2e:7d:
         f2:e7:cc:40:13:b1:58:ea:4f:e0:7b:dd:3e:5c:e6:7a:94:fb:
         cd:eb:3a:f2:e7:b8:47:bc:16:2f:6b:15:04:4a:7c:6f:2a:3b:
         f7:6f:36:a3:45:98:3b:d2:a7:72:d8:21:a4:41:4b:01:a5:33:
         af:db:d1:6a:fe:92:a2:3e:89:06:54:fd:f8:80:91:ba:52:a0:
         3a:21:88:77:c1:e3:80:c0:c2:ae:28:ed:c2:c1:3d:ce:b0:33:
         74:1c:80:b0:15:98:63:03:3a:70:dd:09:9b:71:ad:99:e6:e8:
         cb:d8:6b:61:1f:ad:b8:58:71:b5:e4:cf:d6:22:ba:f7:86:a6:
         40:ab:dd:2d:1b:7c:9d:30:0c:a3:2f:12:bb:02:25:6e:37:0f:
         52:98:3d:e1:52:14:ff:9a:ea:f1:32:06:51:13:1d:92:7f:c7:
         05:7b:18:f9:fb:9d:97:a9:53:ac:b1:74:d2:45:43:69:27:70:
         30:91:0f:2b:74:76:a0:41:b1:f5:03:fa:a1:8e:d7:91:66:7a:
         f4:dd:4d:5a:f4:38:59:1f:ad:d9:d4:24:68:b4:9f:5a:6c:ae:
         4a:82:3b:6a
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDMzMTA4
MzYzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkJDRUI4Qzk4N0JDMUM0
QkRGQkUzMjI2Q0JCMEY1RUQwQTE4NjBBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMSN2N/G681fwM0EpxvTuDwpcfAuurwyKc17C1pCMIJm6C+B4X4w
PSqdLia7cfp0bOVC6BOjCkWE/yCIGeg8Ui5ljOEqIzJVUMiJjMO3CeEBQyckAlZu
jDZJDupMD4ycYIxWav5AiYFd9uGB4MpKFMmZizky0xmukHU7kwL0K4yCEjh2lEoI
UzGhYH4R93Oy/3J/pwmCy7feRk7fAQ/w7GQYU4uhZpCnr2Wm8gthEFSXw6bZ8vZV
YT/1me93vva3yaOpEcoW37fB+pY7hoSRbPwLFGbsvQVyap5Pl3QsuAGCTTMW2d7U
G5kWH6/qP1GBKZPt5J36rZwKzDoETEuv8NUCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQrzrjJh7wcS9++MibLsPXtChhgpjAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9LODY0eVllOEhFdmZ2aklteTdEMTdRb1lZS1kucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhbdqMA0GCSqGSIb3DQEBCwUAA4IB
AQAJgvnGByTd1SZCrsqQ0x6r64qjVw8lIIQsP8NABgxrSW/iLn3y58xAE7FY6k/g
e90+XOZ6lPvN6zry57hHvBYvaxUESnxvKjv3bzajRZg70qdy2CGkQUsBpTOv29Fq
/pKiPokGVP34gJG6UqA6IYh3weOAwMKuKO3CwT3OsDN0HICwFZhjAzpw3Qmbca2Z
5ujL2GthH624WHG15M/WIrr3hqZAq90tG3ydMAyjLxK7AiVuNw9SmD3hUhT/murx
MgZREx2Sf8cFexj5+52XqVOssXTSRUNpJ3AwkQ8rdHagQbH1A/qhjteRZnr03U1a
9DhZH63Z1CRotJ9abK5Kgjtq
-----END CERTIFICATE-----
Generated at Tue Apr 7 16:29:19 2026 by rpki-client