Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7PrYowZwbyzyONE35QUE8eHSib8.roa
File:                     7PrYowZwbyzyONE35QUE8eHSib8.roa (raw, json)
Hash identifier:          /OsBrIHcKN8yhTJ0NVlzYP47GdF/N7U8HStlefUxXTU=
Subject key identifier:   EC:FA:D8:A3:06:70:6F:2C:F2:38:D1:37:E5:05:04:F1:E1:D2:89:BF
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       71
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7PrYowZwbyzyONE35QUE8eHSib8.roa
Signing time:             Thu 25 Jun 2026 12:56:26 +0000
ROA not before:           Thu 25 Jun 2026 12:56:26 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 12:56:26 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=ECFAD8A306706F2CF238D137E50504F1E1D289BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:20:2d:f2:f9:59:ac:12:b8:a1:1a:53:1b:
                    fc:40:20:73:3c:f1:fe:55:05:c9:6f:56:69:25:ab:
                    e4:30:51:7c:9f:19:cb:5c:42:1c:80:3e:2b:7a:e9:
                    f8:bf:24:cb:79:27:7b:49:8f:e3:e2:de:42:ff:7a:
                    f8:3a:4d:0a:63:ad:6e:d5:45:12:eb:49:32:f6:95:
                    d0:9a:95:d2:1b:42:6c:97:3f:ab:fd:e6:a0:a4:9c:
                    2f:80:c6:97:72:73:4b:1e:50:54:75:31:64:9b:a9:
                    c5:cc:7e:00:d3:2f:3b:a0:0a:ad:ba:af:46:f7:3c:
                    95:a4:5f:a0:e2:33:8e:ea:45:01:64:50:4b:b7:c5:
                    db:dc:ae:8f:56:17:ab:42:71:a9:85:7e:96:fd:e9:
                    18:dd:b5:98:1e:96:23:77:27:9e:c0:4d:ce:bc:98:
                    da:f2:a8:5e:39:49:f1:fb:62:ec:af:f3:42:cf:ae:
                    c0:33:7e:1b:f5:c3:92:7b:07:e8:9a:71:fb:84:fe:
                    5a:bc:0a:d3:b6:f3:1a:dc:0e:e9:1d:70:74:ec:70:
                    33:ae:69:f2:21:74:f6:ce:cd:cc:a9:4b:3e:09:0c:
                    dc:03:43:4b:95:99:4c:84:b6:11:97:fb:a4:86:70:
                    b9:53:17:50:84:06:78:46:eb:44:23:d3:dd:cf:01:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:D8:A3:06:70:6F:2C:F2:38:D1:37:E5:05:04:F1:E1:D2:89:BF
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/7PrYowZwbyzyONE35QUE8eHSib8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:3b:bd:ff:f7:5f:ca:5b:47:b6:2a:f3:66:25:3b:dd:88:66:
         66:87:fb:ab:05:7e:f5:7a:64:eb:5e:f1:24:2f:21:4b:65:59:
         27:66:8b:85:08:48:db:89:e0:46:74:fc:56:d1:c9:65:48:f1:
         f9:51:b2:d1:b9:58:a3:26:bb:13:a3:ee:ae:72:02:59:4d:98:
         2f:d7:f0:70:45:6f:d5:8e:b0:a0:f4:fd:9e:c9:30:73:fc:d9:
         a4:99:cb:d3:41:5d:3b:66:39:4b:e3:dc:54:27:66:3e:2e:09:
         68:67:65:5a:5d:f4:d2:3a:90:ad:a3:09:4f:47:0f:2e:4c:67:
         61:5e:10:5f:58:3e:06:95:cc:9d:0c:04:fa:32:68:3d:c0:50:
         01:bd:43:e5:41:fd:e4:fc:8b:9c:83:0c:c4:af:e7:30:9b:8d:
         b9:cf:ff:34:7d:d0:c6:33:52:fe:65:b3:fa:b4:ca:32:38:33:
         bb:19:da:92:92:dc:0e:e4:d4:6b:95:2f:59:c0:0c:b1:05:f1:
         d0:41:ea:75:6b:24:5d:04:ab:68:1c:12:38:cf:94:1a:ba:83:
         6c:ee:f1:8a:b1:18:d2:d8:2c:5f:22:e2:84:61:82:3d:06:bd:
         ac:ec:0d:70:fa:84:81:9f:57:c7:86:0e:29:dd:3c:6a:54:80:
         13:65:5f:55
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDYyNTEy
NTYyNloXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRUNGQUQ4QTMwNjcwNkYy
Q0YyMzhEMTM3RTUwNTA0RjFFMUQyODlCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALDGIC3y+VmsErihGlMb/EAgczzx/lUFyW9WaSWr5DBRfJ8Zy1xC
HIA+K3rp+L8ky3kne0mP4+LeQv96+DpNCmOtbtVFEutJMvaV0JqV0htCbJc/q/3m
oKScL4DGl3JzSx5QVHUxZJupxcx+ANMvO6AKrbqvRvc8laRfoOIzjupFAWRQS7fF
29yuj1YXq0JxqYV+lv3pGN21mB6WI3cnnsBNzryY2vKoXjlJ8fti7K/zQs+uwDN+
G/XDknsH6Jpx+4T+WrwK07bzGtwO6R1wdOxwM65p8iF09s7NzKlLPgkM3ANDS5WZ
TIS2EZf7pIZwuVMXUIQGeEbrRCPT3c8BdcECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTs+tijBnBvLPI40TflBQTx4dKJvzAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy83UHJZb3dad2J5enlPTkUzNVFVRThlSFNpYjgucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChbgsMA0GCSqGSIb3DQEBCwUAA4IB
AQChO73/91/KW0e2KvNmJTvdiGZmh/urBX71emTrXvEkLyFLZVknZouFCEjbieBG
dPxW0cllSPH5UbLRuVijJrsTo+6ucgJZTZgv1/BwRW/VjrCg9P2eyTBz/NmkmcvT
QV07ZjlL49xUJ2Y+LgloZ2VaXfTSOpCtowlPRw8uTGdhXhBfWD4GlcydDAT6Mmg9
wFABvUPlQf3k/IucgwzEr+cwm425z/80fdDGM1L+ZbP6tMoyODO7GdqSktwO5NRr
lS9ZwAyxBfHQQep1ayRdBKtoHBI4z5QauoNs7vGKsRjS2CxfIuKEYYI9Br2s7A1w
+oSBn1fHhg4p3TxqVIATZV9V
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client