Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wOXuBvnhhU-s3WSuVVsKeiBoLhI.roa
File:                     wOXuBvnhhU-s3WSuVVsKeiBoLhI.roa (raw, json)
Hash identifier:          0SfqFn3OP3ZTeUe7hmR0py8foT18vROMfDEMntee4oE=
Subject key identifier:   C0:E5:EE:06:F9:E1:85:4F:AC:DD:64:AE:55:5B:0A:7A:20:68:2E:12
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       5A
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wOXuBvnhhU-s3WSuVVsKeiBoLhI.roa
Signing time:             Tue 31 Mar 2026 08:36:40 +0000
ROA not before:           Tue 31 Mar 2026 08:36:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C0E5EE06F9E1854FACDD64AE555B0A7A20682E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:59:14:c5:23:c5:8e:69:45:13:b2:18:97:
                    c7:a1:30:54:6d:67:e4:36:6d:6c:85:8d:70:9d:45:
                    47:18:d7:0c:4f:99:0c:7a:ae:2d:e9:36:99:d4:d8:
                    31:32:a6:be:7f:5c:86:d6:33:97:3f:1e:5f:b9:b5:
                    d7:00:e9:32:27:63:c4:c5:bf:9e:57:ed:40:63:10:
                    42:a8:fd:d5:f5:c7:bd:b0:ec:e0:2d:da:e0:6c:c3:
                    6f:35:fe:9b:63:49:a0:48:9c:38:09:90:3a:40:bd:
                    b0:5e:1c:b1:9d:dd:f5:fd:40:a2:ac:ef:48:35:28:
                    91:97:b5:73:ba:d9:08:88:ac:cb:30:0a:cc:b1:25:
                    07:3b:6f:93:5c:de:ca:85:36:e7:b6:ed:e0:93:6a:
                    41:09:96:8e:57:7d:6d:3b:fc:b6:18:ce:64:a3:4d:
                    86:96:6a:c6:c1:6c:e8:1e:11:b4:86:57:37:e3:0f:
                    66:2f:a6:84:0c:5d:6c:78:4a:fb:64:46:75:4f:de:
                    0c:25:0b:27:04:b6:51:2a:80:7a:22:49:14:57:d2:
                    2e:d0:82:05:5b:cc:24:a7:21:8f:c0:48:e5:f0:ff:
                    aa:f6:db:bb:fd:49:c1:88:41:ff:f3:8d:ba:ae:fc:
                    32:75:6a:e0:16:46:61:2e:9e:a8:c3:3d:c9:81:bb:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:EE:06:F9:E1:85:4F:AC:DD:64:AE:55:5B:0A:7A:20:68:2E:12
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wOXuBvnhhU-s3WSuVVsKeiBoLhI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:55:8e:01:8f:b0:d1:da:e3:8e:c9:fc:8d:80:c3:92:d8:
         83:da:16:0b:51:be:51:7a:2f:77:3a:59:b2:35:b1:d7:70:62:
         fc:b3:71:06:a7:ee:cc:49:5b:09:ce:90:0f:8a:09:3b:27:34:
         b4:50:3e:e9:7e:dd:09:37:13:e3:2b:1b:8f:c9:1e:2e:21:be:
         7c:40:f8:18:2f:ff:30:9d:df:99:bf:7a:c4:b2:20:49:e1:c6:
         d7:74:10:b3:81:62:b8:83:96:55:8c:ee:86:d9:c1:fa:b7:e0:
         9f:ee:a2:2c:65:00:2f:a1:5d:45:d8:b8:b3:d2:94:2a:e0:a2:
         db:0c:1b:08:b3:ae:89:65:f6:9e:10:96:e4:ce:a0:9d:dc:16:
         67:d0:f3:8a:f6:2f:0f:c1:3b:d1:56:bf:36:da:a9:45:1a:4a:
         0c:67:24:19:59:f9:e6:fb:96:81:ef:68:f2:7b:f7:2c:1a:74:
         ec:8f:d0:da:e4:fc:ff:03:1c:2d:21:ce:c6:9f:38:9d:43:6e:
         ef:b0:2b:89:12:08:23:13:1f:7f:dd:9a:f7:40:85:08:13:e5:
         f9:40:68:45:56:2b:63:3b:08:ba:06:2b:90:ce:77:b9:56:d4:
         40:57:f7:15:bf:b1:89:aa:e4:5f:a3:c7:d9:ef:78:63:48:0e:
         49:96:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:51 2026 by rpki-client