Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/PovA2dlTcNX3jq3NbxdFgFgMtHY.roa
File:                     PovA2dlTcNX3jq3NbxdFgFgMtHY.roa (raw, json)
Hash identifier:          snhIHoUQREZCrJmt6hDh9R/h8a0VZdIcArE5czVSXZ0=
Subject key identifier:   3E:8B:C0:D9:D9:53:70:D5:F7:8E:AD:CD:6F:17:45:80:58:0C:B4:76
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       88
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/PovA2dlTcNX3jq3NbxdFgFgMtHY.roa
Signing time:             Thu 25 Jun 2026 13:02:45 +0000
ROA not before:           Thu 25 Jun 2026 13:02:45 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:45 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=3E8BC0D9D95370D5F78EADCD6F174580580CB476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:db:ce:3a:74:48:bb:ba:cd:7d:42:8c:94:
                    04:d9:fa:11:68:39:98:5f:31:c8:b6:d2:8f:97:76:
                    56:cc:b0:5f:20:2c:3e:4d:2c:21:9f:b8:a7:f5:29:
                    cb:87:05:75:0a:93:86:cf:79:6a:d3:6b:d1:a2:88:
                    f4:7f:1f:22:fb:12:a6:59:c5:ac:52:11:13:05:84:
                    09:51:b2:7d:7a:d5:4a:6e:ed:00:d1:62:dd:6f:8c:
                    ad:55:de:6d:5e:11:f1:14:5d:88:7f:8c:3f:e6:69:
                    0a:c4:c8:0f:d4:ab:49:fb:cd:ea:89:e7:95:81:41:
                    77:67:c3:4b:2b:bf:c2:e7:74:2f:d3:36:ef:24:53:
                    9d:4a:4d:5d:94:d5:f3:df:e3:1e:f9:6b:1e:5e:cd:
                    3e:25:fb:96:3f:8e:19:33:3e:9d:b2:c6:e6:d8:d7:
                    1f:3c:91:42:e8:92:1b:c0:02:c0:84:a5:70:65:b9:
                    eb:40:44:f3:12:b2:61:60:1c:a3:69:9e:35:0f:90:
                    49:49:7b:20:48:f6:e0:23:15:a5:56:03:e1:5a:61:
                    9a:4f:4f:57:46:f4:83:24:c6:5d:04:34:6e:56:9f:
                    d6:43:7b:77:26:2b:26:8c:4d:9f:25:a5:a3:4b:18:
                    97:5c:19:8e:fe:60:48:b2:3e:70:ca:95:15:79:62:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:C0:D9:D9:53:70:D5:F7:8E:AD:CD:6F:17:45:80:58:0C:B4:76
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/PovA2dlTcNX3jq3NbxdFgFgMtHY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:12:f7:90:9b:bc:6b:9e:42:1d:2f:23:91:e2:e2:2b:cf:
         20:de:57:1d:c4:6f:56:15:27:dc:b0:b1:67:4e:7b:b0:75:b5:
         62:8b:8a:37:06:bc:e0:2c:e9:89:2d:29:21:f8:2f:fe:2b:83:
         8d:b6:20:4b:a8:32:74:72:9e:ce:54:64:61:8b:66:59:5b:c6:
         74:fd:45:49:d0:2c:a1:e9:ac:9f:87:2b:8d:32:53:b8:6f:af:
         e5:51:09:eb:bf:f0:ea:30:f0:b0:c2:00:56:35:7a:22:4a:db:
         cb:1e:2d:57:80:96:b2:d9:9b:be:db:82:71:07:27:5c:0b:3d:
         af:40:43:0e:89:8d:d6:2a:0e:07:f6:11:64:15:60:ab:4f:ad:
         52:40:11:f0:16:c0:26:19:ae:ec:37:29:48:fd:16:75:a6:bd:
         bb:c2:cd:4b:bc:9e:16:de:b1:1a:a1:9e:94:27:3b:d9:76:38:
         48:e8:11:30:5a:70:e0:14:08:bb:42:9d:18:ff:e5:08:91:9d:
         b9:b8:0e:01:91:13:1e:86:8f:51:3d:d8:29:0d:2e:44:88:37:
         9d:20:e8:59:12:ad:d6:5b:72:ef:90:f9:f4:d8:65:10:e5:14:
         75:ee:96:35:f6:b0:e2:83:02:c3:fe:ab:f7:e2:75:a0:f7:19:
         05:60:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:44:05 2026 by rpki-client