Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/JHlLyYGDAQsI3hAvxcSEDk3V8lI.roa
File:                     JHlLyYGDAQsI3hAvxcSEDk3V8lI.roa (raw, json)
Hash identifier:          DqjvVxJV8U7CiAez0yyjRWKKW2y3Nzy6Z3KNckGSETE=
Subject key identifier:   24:79:4B:C9:81:83:01:0B:08:DE:10:2F:C5:C4:84:0E:4D:D5:F2:52
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       79
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/JHlLyYGDAQsI3hAvxcSEDk3V8lI.roa
Signing time:             Thu 25 Jun 2026 13:02:36 +0000
ROA not before:           Thu 25 Jun 2026 13:02:36 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:36 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=24794BC98183010B08DE102FC5C4840E4DD5F252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:2a:b2:47:cc:4b:82:c9:78:36:2a:50:05:
                    5d:12:62:30:fc:b9:06:28:1d:69:0e:12:16:b9:ce:
                    41:14:63:7b:04:61:d5:06:ee:a6:ba:d8:30:45:2f:
                    a0:94:cf:c8:75:ab:18:8a:c2:f8:a7:25:39:79:a7:
                    d4:f8:b8:56:fe:49:ed:19:0e:5a:19:dc:e2:e1:0d:
                    aa:b2:4b:7b:42:1c:db:08:f0:cf:5f:74:43:a1:5d:
                    48:30:78:38:83:4d:c4:23:2e:b6:6a:7f:7f:d0:c1:
                    6c:66:14:86:62:73:da:3f:59:84:fc:c7:10:1e:61:
                    1b:e4:ea:1c:3f:9e:b9:c9:5e:48:a3:c9:dc:48:a7:
                    dc:66:f4:3f:6f:53:f5:c2:0e:2d:60:1a:d2:fe:2f:
                    c7:3d:76:1a:bd:05:9d:84:e1:71:b7:f8:b7:3a:f6:
                    61:72:48:54:a2:49:fe:a9:d6:50:0c:89:13:9b:7d:
                    42:81:58:da:24:d8:e9:40:f7:92:6d:08:a7:60:7a:
                    0f:26:73:0b:cf:8b:28:90:30:63:6c:81:a4:2d:3f:
                    97:9b:08:63:56:21:32:da:4c:0b:02:fc:cf:d3:72:
                    c4:03:a3:b3:88:e4:bc:5d:ee:e9:f1:be:43:c3:a2:
                    ea:b0:28:e6:6c:2c:51:b9:8c:b6:f9:29:65:42:b3:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:4B:C9:81:83:01:0B:08:DE:10:2F:C5:C4:84:0E:4D:D5:F2:52
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/JHlLyYGDAQsI3hAvxcSEDk3V8lI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:e7:b7:39:58:fa:8a:54:b6:32:63:84:10:a1:1f:51:58:
         24:19:a9:4d:3f:2f:9d:87:9a:2a:b8:07:62:30:46:7b:f9:c4:
         65:8e:ee:75:07:8f:09:31:d0:05:00:3e:c7:75:06:3a:37:8a:
         7d:6b:bf:e3:ac:22:b2:ee:b1:e6:35:42:7c:73:a6:d9:2b:54:
         fb:1a:b7:c4:31:f3:7e:8e:a7:15:b3:bd:60:b7:38:3c:e9:48:
         d0:af:26:87:f3:15:df:28:2e:41:b2:1c:10:e8:4c:5e:08:a6:
         6a:b7:4f:c5:61:7d:df:b6:5b:f5:06:45:34:4d:af:67:c9:07:
         0b:78:fd:f2:1f:15:d6:78:99:68:fb:74:86:65:89:70:32:50:
         95:be:8a:dd:2a:66:43:af:0e:2b:33:4b:b9:6f:ce:9f:b3:3b:
         c5:cf:9b:6a:c5:39:4b:25:a5:98:83:ab:a5:5a:d9:86:14:90:
         f8:41:06:a5:9e:93:a1:1d:3e:cb:02:fa:42:76:4f:cd:1a:40:
         5e:99:cd:77:86:da:2c:87:db:03:af:84:cb:38:61:1f:ea:48:
         ff:3f:1b:49:d1:2e:e3:09:c0:b0:0e:2e:ce:b0:5b:9a:f0:02:
         2f:38:48:84:81:c0:36:02:11:21:99:cd:12:69:65:95:04:90:
         ff:5f:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:57 2026 by rpki-client