Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GC2auybwdtRKUaOdnR406kZYS90.roa
File:                     GC2auybwdtRKUaOdnR406kZYS90.roa (raw, json)
Hash identifier:          n/LT463UQWlUVjmu+JwlLk3vd1HLtbxswtU1Ib9VD2g=
Subject key identifier:   18:2D:9A:BB:26:F0:76:D4:4A:51:A3:9D:9D:1E:34:EA:46:58:4B:DD
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       8D
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GC2auybwdtRKUaOdnR406kZYS90.roa
Signing time:             Thu 25 Jun 2026 13:02:47 +0000
ROA not before:           Thu 25 Jun 2026 13:02:47 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:47 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=182D9ABB26F076D44A51A39D9D1E34EA46584BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:d7:57:82:3d:26:18:48:32:d6:0b:02:66:
                    7e:68:67:48:b9:fd:94:80:d7:45:f4:32:0e:d0:b7:
                    e2:98:74:95:5f:50:15:6b:68:57:46:ff:83:38:ba:
                    75:27:42:1c:4a:e5:dd:9e:b1:48:df:0b:bd:43:5c:
                    18:c3:74:ba:e1:6b:62:e7:40:80:04:63:1a:8d:fd:
                    40:37:07:f1:c4:5b:35:7d:3a:0a:81:c5:3a:b8:c8:
                    a0:03:9f:72:c1:d5:b3:61:37:6b:c3:a1:8c:df:5d:
                    40:b4:5c:2a:11:4a:4a:12:31:bd:f4:4b:0f:c9:58:
                    5c:b4:5d:bf:b3:ea:01:8b:b4:af:d0:74:6b:7d:19:
                    dc:61:80:07:2c:52:0a:cf:cf:8b:bb:fe:c1:64:5b:
                    6b:0c:5a:18:84:17:40:04:38:a8:62:00:ef:2c:11:
                    58:f3:27:cf:c6:c6:aa:cf:c1:d0:da:83:1a:50:58:
                    f1:29:ec:1b:e2:92:05:ab:48:19:8d:88:fe:a0:c9:
                    f7:a9:57:d2:6d:d8:d0:0d:c6:52:14:fd:68:2e:75:
                    1e:ce:fa:54:55:df:32:cc:d7:82:61:d8:1b:b5:2a:
                    f0:7c:9f:d7:b4:1c:f9:4f:0e:f5:16:7a:ae:36:da:
                    bb:9a:de:4d:e5:d5:38:c7:cf:a3:f0:73:49:39:ba:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2D:9A:BB:26:F0:76:D4:4A:51:A3:9D:9D:1E:34:EA:46:58:4B:DD
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GC2auybwdtRKUaOdnR406kZYS90.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:6e:6c:78:49:4f:ed:be:fa:45:46:7d:67:d1:f7:f4:29:f1:
         d8:f4:ef:24:11:41:ff:0a:be:e5:77:01:1c:f9:5c:b7:0b:9a:
         1f:39:87:93:d1:d4:8a:65:03:40:0d:c0:a2:3a:03:97:8d:05:
         59:03:21:66:92:be:ce:6f:ad:b3:ec:f6:43:10:4f:04:5c:df:
         a9:93:5a:d6:f8:20:32:08:7a:dc:44:d8:1f:2d:20:ed:30:8c:
         1d:c1:8e:51:65:c5:d6:61:9d:25:7c:16:f7:87:69:76:f5:d1:
         c7:b7:04:34:c3:21:fd:3d:65:eb:f5:4e:c5:5f:9e:0e:2a:ee:
         79:9e:88:ff:3a:f7:f9:eb:b2:8e:94:9b:c4:08:51:c9:19:8f:
         37:a2:0c:1e:e5:81:40:0f:42:78:86:fc:6c:12:50:84:ea:c2:
         5b:0f:10:09:67:03:1f:b7:49:da:e2:49:d5:0c:3c:d6:70:35:
         f4:05:42:ba:08:41:f1:d9:3e:88:e7:2f:80:3b:5a:46:0c:bc:
         90:52:54:78:1c:80:aa:6d:c7:61:8c:fd:2a:69:98:89:ee:13:
         2c:1f:14:ca:89:cc:6e:f9:1a:21:8b:4d:85:10:8b:fd:56:e5:
         19:f0:9a:a6:ad:ab:64:7f:7c:61:b1:97:6e:b9:09:e2:3c:b2:
         a1:a4:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client