Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/I5FCpvTS-ZG8ZksSllwOM1KBv_g.roa
File:                     I5FCpvTS-ZG8ZksSllwOM1KBv_g.roa (raw, json)
Hash identifier:          v9qLD58vnoubC63ZpMIPV9zYGlBZGmLWud5fwP1snd4=
Subject key identifier:   23:91:42:A6:F4:D2:F9:91:BC:66:4B:12:96:5C:0E:33:52:81:BF:F8
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       78
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/I5FCpvTS-ZG8ZksSllwOM1KBv_g.roa
Signing time:             Thu 25 Jun 2026 13:02:35 +0000
ROA not before:           Thu 25 Jun 2026 13:02:35 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:35 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=239142A6F4D2F991BC664B12965C0E335281BFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:ed:a6:92:01:ea:86:a8:2e:df:ea:8e:2e:
                    d8:0c:6d:40:42:50:87:6d:d0:da:78:62:f8:c4:ad:
                    91:8f:03:8c:00:e1:39:d0:28:ea:65:d2:7e:89:0e:
                    00:47:5c:c8:3b:3f:43:3d:26:f9:ee:43:c9:3b:c6:
                    fb:69:81:a5:ed:9d:9e:e3:94:bf:d4:8e:26:ea:67:
                    49:78:f3:12:0e:77:82:4e:0b:57:92:93:99:e5:cb:
                    62:1e:c2:69:02:1c:d4:f9:03:e7:23:a2:95:62:98:
                    07:d5:30:f1:af:3d:8c:b4:fa:41:31:2a:74:ee:6e:
                    e0:8b:95:7e:7c:f4:34:d9:20:17:42:a9:9c:2f:1f:
                    7f:86:58:1d:ec:62:c9:62:e0:91:7b:aa:07:e1:47:
                    fe:a1:9e:23:76:fc:9d:72:af:a1:86:f6:3e:d8:17:
                    46:3e:a4:21:45:c5:bc:56:1c:9c:3d:2c:ec:91:5a:
                    3d:76:6f:bd:d7:76:9d:0c:b1:d8:7e:d9:dd:05:e1:
                    af:2e:95:c1:ce:fc:59:38:15:11:77:41:49:3c:01:
                    af:ce:48:4e:06:cc:38:f2:0c:c0:d4:b2:90:35:d3:
                    7f:55:04:61:ac:4f:38:9d:56:20:98:b1:d6:5f:14:
                    31:17:df:d8:9e:fd:81:47:41:9d:7e:6a:34:7c:f0:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:42:A6:F4:D2:F9:91:BC:66:4B:12:96:5C:0E:33:52:81:BF:F8
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/I5FCpvTS-ZG8ZksSllwOM1KBv_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:64:4e:dd:83:90:d9:85:4d:20:e5:5a:d9:02:2f:6c:76:4d:
         b5:76:c5:91:f1:62:f9:f5:2c:e3:4d:14:af:10:45:9a:aa:f6:
         5b:37:6b:ff:88:a3:af:30:9c:0d:45:38:f6:5b:5c:b6:be:3b:
         c3:75:e5:0a:91:ad:f6:a0:b2:d4:84:ab:ef:d1:f0:29:51:6f:
         3c:be:a8:86:1d:2e:7f:5d:44:1c:c5:a1:95:27:61:8c:65:38:
         76:cd:09:0e:62:04:c3:db:0c:19:60:01:fd:6d:bb:84:38:e3:
         7e:c0:76:bf:d1:96:77:e4:a8:fa:38:90:f1:73:83:08:af:22:
         e5:7e:72:31:a7:11:35:09:c5:73:7f:3f:d4:17:4a:2b:ea:1e:
         d5:49:9c:8d:09:ae:da:bb:f8:d9:2e:9a:49:05:d5:e3:1f:48:
         66:91:a2:36:5b:1d:8b:e8:aa:8d:b6:90:59:6d:ec:d5:71:2f:
         3b:b8:f5:45:72:7f:03:86:44:7f:6d:60:6f:05:b8:07:14:a0:
         6c:a7:7a:1d:3d:ca:10:e3:ab:89:fd:cb:be:60:52:5a:c1:2c:
         51:db:b5:dc:81:24:9c:39:24:5c:70:60:b1:88:49:37:f8:49:
         e1:84:9a:07:e2:dd:2c:33:68:2f:93:41:c8:b5:a9:ba:83:fa:
         87:c2:f0:72
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDYyNTEz
MDIzNVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMjM5MTQyQTZGNEQyRjk5
MUJDNjY0QjEyOTY1QzBFMzM1MjgxQkZGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALlR7aaSAeqGqC7f6o4u2AxtQEJQh23Q2nhi+MStkY8DjADhOdAo
6mXSfokOAEdcyDs/Qz0m+e5DyTvG+2mBpe2dnuOUv9SOJupnSXjzEg53gk4LV5KT
meXLYh7CaQIc1PkD5yOilWKYB9Uw8a89jLT6QTEqdO5u4IuVfnz0NNkgF0KpnC8f
f4ZYHexiyWLgkXuqB+FH/qGeI3b8nXKvoYb2PtgXRj6kIUXFvFYcnD0s7JFaPXZv
vdd2nQyx2H7Z3QXhry6Vwc78WTgVEXdBSTwBr85ITgbMOPIMwNSykDXTf1UEYaxP
OJ1WIJix1l8UMRff2J79gUdBnX5qNHzwz7MCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQjkUKm9NL5kbxmSxKWXA4zUoG/+DAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9JNUZDcHZUUy1aRzhaa3NTbGx3T00xS0J2X2cucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhbgAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWZE7dg5DZhU0g5VrZAi9sdk21dsWR8WL59SzjTRSvEEWaqvZbN2v/iKOvMJwN
RTj2W1y2vjvDdeUKka32oLLUhKvv0fApUW88vqiGHS5/XUQcxaGVJ2GMZTh2zQkO
YgTD2wwZYAH9bbuEOON+wHa/0ZZ35Kj6OJDxc4MIryLlfnIxpxE1CcVzfz/UF0or
6h7VSZyNCa7au/jZLppJBdXjH0hmkaI2Wx2L6KqNtpBZbezVcS87uPVFcn8DhkR/
bWBvBbgHFKBsp3odPcoQ46uJ/cu+YFJawSxR27XcgSScOSRccGCxiEk3+EnhhJoH
4t0sM2gvk0HItam6g/qHwvBy
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client