Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Wnd44aVm52S-6oITqFcOHKhxRMo.roa
File:                     Wnd44aVm52S-6oITqFcOHKhxRMo.roa (raw, json)
Hash identifier:          xHRqOrRTa5GciOyThxo2g22uS5UbINt7i61iduG2I1Y=
Subject key identifier:   5A:77:78:E1:A5:66:E7:64:BE:EA:82:13:A8:57:0E:1C:A8:71:44:CA
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       8E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Wnd44aVm52S-6oITqFcOHKhxRMo.roa
Signing time:             Thu 25 Jun 2026 13:02:48 +0000
ROA not before:           Thu 25 Jun 2026 13:02:48 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:48 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=5A7778E1A566E764BEEA8213A8570E1CA87144CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:4d:f8:18:e8:68:7e:54:8c:91:87:7c:f1:
                    43:c2:ea:00:b2:d5:e6:7d:b3:b7:34:0d:94:bf:a5:
                    23:07:55:ac:a6:57:35:b1:9b:96:83:43:60:55:f1:
                    c2:d5:f9:3c:b3:a4:28:eb:7b:9a:c8:e9:3b:62:01:
                    a4:6b:8b:78:5a:c7:10:fa:cc:7e:6d:10:83:8a:41:
                    51:ce:3f:b9:c7:ce:74:ef:8f:ac:db:e1:e0:6c:75:
                    4a:2e:cd:08:71:22:a5:50:45:ce:5f:1e:a9:55:3c:
                    e2:4a:5d:e0:34:bb:45:59:73:a6:3f:33:e1:af:9e:
                    f4:18:17:2e:27:28:09:99:b0:6b:7a:6e:36:aa:f2:
                    b2:35:09:6e:a7:bd:b9:8c:87:45:de:71:bc:84:1b:
                    ef:f0:6b:c5:ee:76:b3:5e:ea:ab:78:37:0f:13:52:
                    e8:65:38:9f:ee:0b:b7:d4:e5:9b:47:b3:6b:31:e7:
                    e5:87:8e:b0:ed:ee:d5:58:19:ce:75:c7:72:51:ed:
                    55:e3:5a:a3:bb:4d:b7:80:3f:dd:e1:ec:d1:ca:cc:
                    c5:40:fa:5e:f0:9a:30:59:25:ff:b8:9a:9b:cb:26:
                    f3:76:d0:22:e9:cb:bb:fc:a6:22:28:fa:09:05:4f:
                    04:e4:20:72:78:6b:32:f1:1e:7f:e8:b0:d6:ab:8d:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:77:78:E1:A5:66:E7:64:BE:EA:82:13:A8:57:0E:1C:A8:71:44:CA
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Wnd44aVm52S-6oITqFcOHKhxRMo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:71:47:f9:1e:75:93:f3:24:5a:bb:53:d0:10:9c:4a:c7:97:
         67:f3:15:d8:fc:32:55:06:be:cf:87:0c:32:ae:44:30:8e:15:
         11:f2:52:a6:a2:a8:a7:55:cb:25:59:53:ca:2e:8b:43:55:a0:
         c4:60:9e:d7:a3:19:28:d1:81:c1:3e:cf:ac:46:72:1e:49:7a:
         9b:be:8f:9e:6d:b9:fc:45:a7:94:9a:61:1c:6a:54:f0:f4:b2:
         97:a3:11:24:bf:d9:00:e6:5a:79:d8:0f:61:ea:d7:28:0a:df:
         3d:4e:e8:87:dc:4b:08:b4:76:d0:04:65:c7:04:ee:85:43:a9:
         9d:81:8c:34:70:1d:36:9a:b9:48:ba:95:be:c5:23:6e:2d:9f:
         93:18:4b:69:08:66:2b:90:c5:7a:84:d7:30:d8:2c:d5:12:0f:
         8b:cc:40:5f:11:8b:ed:2b:4c:8e:0f:2b:7d:f1:57:82:aa:ba:
         78:3a:f2:51:9a:c8:21:79:db:2e:ad:dd:23:8e:7e:dd:c1:6e:
         67:a1:0b:f3:5c:d8:00:d3:4d:ae:c6:51:f9:5f:8d:64:71:83:
         e1:e9:54:df:48:e1:2a:b4:68:6f:09:ac:73:92:8a:d8:93:eb:
         d3:ad:76:80:cd:66:e4:8f:ed:14:e5:24:27:60:29:cf:38:22:
         1c:51:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:57 2026 by rpki-client