Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WNAKYtWUuAYCXFmeneFkBevGR7k.roa
File:                     WNAKYtWUuAYCXFmeneFkBevGR7k.roa (raw, json)
Hash identifier:          7pQM0yHqM0eEq5H2Pn/as7RE1zlHYJdH65DZbWWxpRg=
Subject key identifier:   58:D0:0A:62:D5:94:B8:06:02:5C:59:9E:9D:E1:64:05:EB:C6:47:B9
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       8F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WNAKYtWUuAYCXFmeneFkBevGR7k.roa
Signing time:             Thu 25 Jun 2026 13:02:49 +0000
ROA not before:           Thu 25 Jun 2026 13:02:49 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:49 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=58D00A62D594B806025C599E9DE16405EBC647B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e7:37:8d:80:69:59:fc:6e:32:fa:2f:28:46:
                    3c:84:02:ec:7c:b3:58:06:e8:c8:7b:b8:67:9f:4a:
                    0c:21:e9:5d:7d:76:d6:b2:2f:78:c5:a2:41:b7:92:
                    12:e1:af:c1:03:84:84:e6:d2:98:af:88:a0:a5:cb:
                    79:7c:8b:9e:a9:30:82:24:ba:60:8c:c8:83:f8:0a:
                    10:14:70:ca:51:0d:3e:0c:98:db:43:7c:93:1d:5e:
                    9d:ed:7f:6d:b4:43:5a:f2:7b:0c:8d:c9:92:7e:a2:
                    6c:71:71:9a:98:2c:0e:18:0f:a0:39:06:af:1b:a5:
                    7a:7b:54:90:31:62:8a:bf:77:0a:b3:99:cd:7b:50:
                    2e:f3:be:57:2a:9b:17:cf:07:a6:2a:22:5b:16:89:
                    f7:56:28:7d:5e:18:11:08:bf:50:a3:90:26:5d:62:
                    87:44:7a:f2:e8:03:95:28:47:77:07:55:f4:1f:80:
                    13:2a:4c:41:d9:1a:08:f0:86:c4:16:b6:be:23:71:
                    24:42:91:85:35:31:d3:4d:cd:a1:cd:3e:b8:57:0d:
                    dd:75:c2:a4:3f:17:ea:61:6e:95:df:94:5f:0d:ca:
                    45:24:b4:64:c9:97:03:9d:20:73:df:eb:48:16:48:
                    52:4b:e5:87:32:6b:59:43:a3:3f:85:3f:bc:aa:27:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:0A:62:D5:94:B8:06:02:5C:59:9E:9D:E1:64:05:EB:C6:47:B9
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WNAKYtWUuAYCXFmeneFkBevGR7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:70:6c:09:5b:0e:ac:93:58:4d:4d:00:5d:e2:c1:eb:7b:
         4f:3d:42:4b:ed:08:ce:18:ff:0b:16:2c:d2:c4:a0:32:df:50:
         f2:a7:ca:1a:6b:e6:0b:e2:ac:11:e0:e5:41:1a:4c:36:23:b1:
         b8:ee:98:2b:25:bd:ac:51:29:f2:1a:43:e7:cb:87:fd:fd:5b:
         6f:e0:cf:d1:59:c2:3b:87:9d:43:38:03:0e:b6:1a:c0:a9:f8:
         40:2c:2d:12:b7:95:96:b9:6f:43:bf:56:13:87:a0:4a:ea:15:
         9e:b7:c4:aa:c2:d8:2b:2d:7a:05:af:dd:70:68:82:9d:16:a2:
         c5:fe:a5:b0:83:61:10:02:68:7a:c1:0b:2b:2d:26:54:87:42:
         26:46:35:86:f7:a2:a3:7e:96:2a:89:ec:6e:22:b1:e8:64:88:
         6c:ac:64:d2:de:73:33:c4:a4:b3:c6:6b:04:50:a8:ba:b7:e0:
         52:df:a4:a3:4b:57:c0:2f:26:e0:20:72:c4:cd:67:75:0c:27:
         1c:58:ca:07:76:5d:44:a2:63:e5:dc:7d:68:ff:d5:14:ad:08:
         d4:ff:7d:b8:6a:4c:1f:2a:4c:63:f0:d5:cc:c6:d6:6b:63:f1:
         e1:f6:9d:b2:f4:90:b9:f1:a3:06:12:ab:a2:1e:b0:f5:f5:88:
         c6:bb:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client