Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/THgQ2LQqjLZdjGDcIgriZDJ6EeE.roa
File:                     THgQ2LQqjLZdjGDcIgriZDJ6EeE.roa (raw, json)
Hash identifier:          3ZjVNeH8s6G7OSB4DIIdTvomxBiRtgWauMD1UVIs9pM=
Subject key identifier:   4C:78:10:D8:B4:2A:8C:B6:5D:8C:60:DC:22:0A:E2:64:32:7A:11:E1
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       82
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/THgQ2LQqjLZdjGDcIgriZDJ6EeE.roa
Signing time:             Thu 25 Jun 2026 13:02:41 +0000
ROA not before:           Thu 25 Jun 2026 13:02:41 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:41 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=4C7810D8B42A8CB65D8C60DC220AE264327A11E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:c2:d3:0a:62:4c:1f:21:79:ab:ab:c3:1e:
                    94:79:89:fa:b7:c6:62:fa:4d:a4:0e:2d:2b:36:55:
                    13:64:96:6c:fc:4c:e5:50:93:df:a9:b7:29:b0:6f:
                    c5:3e:54:68:1b:c1:2e:ed:e6:b2:1d:d5:4d:d8:b3:
                    26:41:e2:ce:88:da:c5:10:f9:05:d4:9e:1c:ed:b7:
                    9d:74:3d:ea:32:84:e1:d6:fe:9d:36:b1:4c:ec:e2:
                    81:d9:09:86:51:16:03:ef:8a:76:6f:15:c2:2e:c9:
                    59:10:19:92:68:c2:a4:39:4d:91:68:ea:7a:21:62:
                    37:e2:98:56:d7:d4:9b:d4:87:69:db:8c:b8:87:31:
                    88:3d:8a:ee:ba:e5:a2:35:02:e5:33:6a:54:ca:2c:
                    f2:58:0c:36:4c:af:2b:20:a6:d5:3d:83:5a:af:5e:
                    81:6d:5d:61:9a:1e:2f:b5:aa:c6:f2:5d:00:23:99:
                    9e:93:4d:01:93:40:ac:da:f5:e2:e8:cf:f2:5e:b2:
                    99:cf:1f:76:62:6f:9d:de:7b:4c:6a:ca:c2:3f:07:
                    15:b0:1e:de:45:ec:ca:5a:31:81:51:83:b6:b3:fc:
                    74:97:df:7c:f4:43:ef:88:8f:d6:9c:a7:f5:74:da:
                    3f:bd:4b:41:e4:de:cd:31:96:18:e9:66:e9:ac:00:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:78:10:D8:B4:2A:8C:B6:5D:8C:60:DC:22:0A:E2:64:32:7A:11:E1
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/THgQ2LQqjLZdjGDcIgriZDJ6EeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:42:3a:48:24:2a:77:26:99:a1:e6:80:62:ac:e9:21:35:
         0b:10:6e:39:6f:69:2b:9d:e7:3c:38:26:de:2f:20:b4:a9:ea:
         37:2f:14:a3:cb:c8:62:f0:ea:2a:ab:03:bc:81:b9:57:c4:96:
         d0:65:cc:cb:0e:8d:bf:69:3a:0a:73:36:f1:8e:3d:ab:f6:91:
         15:75:6e:13:40:51:6d:34:dc:bf:6a:53:02:8a:80:f7:e9:29:
         3e:9f:da:3c:05:80:d1:34:20:cb:97:fb:45:b5:03:be:49:86:
         42:b9:8f:e5:6b:3f:f9:f7:75:6f:92:72:3f:c0:82:43:33:4c:
         18:03:2c:01:b1:a5:ef:53:70:fb:75:b4:97:ac:db:b7:cc:bf:
         70:90:e4:68:0c:53:7b:99:9b:ed:18:fe:47:43:45:df:7c:66:
         58:27:44:3d:06:1a:11:35:8a:1e:ba:a0:a5:cb:39:a0:aa:0f:
         b5:dd:07:dd:fb:c7:95:72:31:a0:cf:8d:4e:69:9c:e6:f0:5f:
         81:f5:1d:01:5a:8f:7c:81:47:c0:33:68:e1:23:60:55:81:55:
         eb:aa:27:4f:b5:42:77:68:77:dd:78:df:84:90:a8:51:9f:3b:
         22:48:3b:2e:8a:21:f3:6e:dc:3c:8c:74:0a:75:bb:97:f2:6a:
         42:36:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:57 2026 by rpki-client