Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/H5Ktzq9xi8_ZqIYPURyRUgaPrBE.roa
File:                     H5Ktzq9xi8_ZqIYPURyRUgaPrBE.roa (raw, json)
Hash identifier:          QhZfFd6XJpBVOowNKUBmhRQScZrSBTX6IThtSBrqROA=
Subject key identifier:   1F:92:AD:CE:AF:71:8B:CF:D9:A8:86:0F:51:1C:91:52:06:8F:AC:11
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       7A
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/H5Ktzq9xi8_ZqIYPURyRUgaPrBE.roa
Signing time:             Thu 25 Jun 2026 13:02:37 +0000
ROA not before:           Thu 25 Jun 2026 13:02:37 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 20:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:37 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=1F92ADCEAF718BCFD9A8860F511C9152068FAC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:9c:0f:a8:59:de:96:29:f3:14:6f:d6:e3:
                    8c:3b:69:fa:94:83:be:a1:24:b0:3a:59:06:d4:f0:
                    7f:c5:ca:91:a9:fd:a4:b6:2b:b3:ab:e6:03:4e:99:
                    19:8d:f1:f6:bd:ed:fd:d9:7c:50:74:9b:cb:c6:ba:
                    2c:3e:38:fc:a1:10:06:59:25:51:2a:50:3b:20:fb:
                    00:a1:b8:0b:35:1d:09:c3:ba:61:34:29:55:83:e9:
                    bc:7b:84:cc:ca:e2:e5:85:28:77:df:63:38:0a:39:
                    04:fa:ef:35:99:56:64:a2:c0:d2:ac:2d:98:6a:31:
                    91:de:09:0b:c1:84:e5:50:4a:b6:bc:49:95:b1:cc:
                    bd:d6:80:89:a6:6d:e8:ce:62:d6:8b:4f:bd:f1:c3:
                    12:2c:08:07:9a:51:cd:f9:79:30:a1:13:8d:60:e0:
                    95:e1:18:2c:51:03:ff:77:58:2c:e4:bd:b7:77:ab:
                    9d:7d:d0:30:bb:cc:0b:47:90:c2:b0:c6:9f:09:8e:
                    2b:21:3b:a0:c9:20:06:c4:40:ef:30:54:e1:2f:67:
                    c8:01:80:7d:5a:8a:fd:c0:e0:b6:4f:b0:d3:50:48:
                    4d:ac:aa:18:fc:c4:13:92:b0:01:e0:f0:c2:d9:0f:
                    af:1b:e6:00:ba:6d:cd:da:cb:e2:0a:7a:8e:f7:cf:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:AD:CE:AF:71:8B:CF:D9:A8:86:0F:51:1C:91:52:06:8F:AC:11
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/H5Ktzq9xi8_ZqIYPURyRUgaPrBE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:68:d7:31:d4:98:8e:57:9b:b0:48:39:00:f7:90:25:d8:
         2e:d4:ab:d4:31:e3:32:bd:fc:93:b7:d8:6e:b8:40:af:e0:83:
         0c:7c:ed:4e:06:f5:1d:88:e1:e1:7f:c3:30:51:72:c8:f1:55:
         f2:b5:2c:06:27:86:b1:b9:77:69:f4:6e:be:65:6c:96:de:e9:
         1a:44:a3:27:00:9a:f5:f1:ab:22:e8:09:d6:6f:15:17:d9:23:
         2e:fa:49:6e:c2:8a:f0:43:d8:15:6c:9b:08:b0:bf:88:45:3e:
         f2:ed:d4:16:e3:fa:4f:f1:8b:6b:38:ac:aa:36:46:73:ba:94:
         ab:0b:cd:2c:34:f5:6c:d8:62:51:0f:1d:6f:c4:5e:4c:b7:94:
         51:a5:bd:05:a8:99:dc:bd:27:a0:bd:c6:3d:20:84:24:71:e9:
         e6:9a:5f:a8:82:89:cf:60:a0:f0:43:65:37:07:c5:4a:ba:f3:
         c8:f0:ad:9a:b3:01:6d:b2:e3:ce:99:0d:39:ce:6f:41:bf:d7:
         2c:60:97:28:1d:ed:f2:66:3c:03:75:26:15:f1:80:8b:c2:97:
         16:62:fb:67:7b:55:83:fd:f1:40:21:60:a4:93:c4:d4:41:69:
         44:f6:4d:b3:29:1a:b1:60:bb:02:7f:9d:6f:b2:39:3e:36:0b:
         17:6a:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:57 2026 by rpki-client