Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/X0kxMQTYkMNVt360TUQugCQyT4Q.roa
File:                     X0kxMQTYkMNVt360TUQugCQyT4Q.roa (raw, json)
Hash identifier:          9XP8fk/oHEcAc9uGtRMymaP42B+fkm/vQuuanBks9Rw=
Subject key identifier:   5F:49:31:31:04:D8:90:C3:55:B7:7E:B4:4D:44:2E:80:24:32:4F:84
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       62
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/X0kxMQTYkMNVt360TUQugCQyT4Q.roa
Signing time:             Tue 31 Mar 2026 08:36:43 +0000
ROA not before:           Tue 31 Mar 2026 08:36:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5F49313104D890C355B77EB44D442E8024324F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:bc:b9:2a:43:f8:2f:09:66:91:4c:f6:80:
                    21:f8:35:a5:cf:e0:ae:6d:e3:da:66:60:c4:cf:ae:
                    06:ab:2c:2e:a9:e5:59:1c:d8:29:1c:07:8c:47:82:
                    a0:4e:9c:7a:a9:94:7c:33:09:99:69:14:c4:48:fd:
                    2b:5a:ef:c9:76:64:f5:27:1d:a8:a8:cc:96:3e:b6:
                    26:29:bb:cd:93:47:8a:04:5d:5d:86:99:ed:07:b0:
                    9a:3f:b1:86:a0:c4:56:7e:ec:17:04:61:55:96:ae:
                    6f:4d:1d:ad:4a:77:19:66:d1:f1:59:a9:79:87:4a:
                    4d:43:44:64:70:0c:b3:c6:82:78:e9:cb:dc:ba:6e:
                    38:24:44:27:ab:a8:6e:96:62:df:b0:b1:83:1a:58:
                    db:3b:ac:74:d5:53:09:81:7f:c8:48:59:53:14:27:
                    1a:ff:bf:b6:3d:28:b1:49:1f:d5:96:0e:05:f4:fa:
                    1d:6b:c5:8c:0c:f9:41:63:b0:d3:6e:7d:59:4b:09:
                    91:65:03:62:0d:86:c4:86:1d:76:79:88:76:ee:a2:
                    98:64:4a:89:6b:b0:ab:18:68:f3:ca:ae:71:62:f4:
                    00:59:ff:93:86:34:50:6b:76:93:39:04:b3:a3:e2:
                    cf:e6:3d:86:96:f3:85:39:8f:62:2f:82:66:32:50:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:31:31:04:D8:90:C3:55:B7:7E:B4:4D:44:2E:80:24:32:4F:84
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/X0kxMQTYkMNVt360TUQugCQyT4Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:08:43:be:48:e0:88:37:29:b0:6d:c3:30:c8:bd:2f:d1:a3:
         c3:91:f9:db:93:e4:b6:e3:85:23:97:8d:c1:bf:e7:9d:de:e0:
         de:8c:4a:cc:fe:0d:f5:38:ce:a3:fd:44:4b:8d:a3:10:17:27:
         83:f3:d9:b4:f3:90:23:80:4f:c3:5b:76:9e:3f:d0:78:f4:da:
         56:ab:ac:2d:c6:27:af:11:49:e9:bf:c7:2e:f8:7d:b3:fd:bc:
         dd:e3:67:15:82:09:da:4b:8d:a1:98:bf:cf:27:90:08:d1:20:
         8b:84:9d:e3:ba:00:aa:e9:7f:34:54:72:b0:d7:21:12:79:3f:
         a4:d6:db:36:c4:50:12:64:1d:3e:00:e5:68:f6:8a:59:c1:ee:
         3e:e5:b0:bd:d9:d3:07:88:d9:d3:94:00:47:4a:dc:01:46:05:
         12:69:1c:6c:02:36:bc:b3:79:46:72:13:94:00:4c:17:57:ad:
         c5:60:31:1e:59:cd:e8:5c:59:08:64:48:45:96:8f:fd:84:48:
         a5:fe:67:e5:3a:94:ab:ed:3d:aa:7a:93:4f:0a:77:ab:3d:f5:
         47:48:77:d6:0b:8a:ce:07:32:8c:59:2a:08:39:75:97:61:2b:
         d5:5d:49:f9:c2:0a:d6:56:e9:88:fd:01:e4:29:82:6b:79:fc:
         8f:c5:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:32 2026 by rpki-client