Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Yjg_fJwvq4gVS5tabiN1Ts6UlOo.roa
File:                     Yjg_fJwvq4gVS5tabiN1Ts6UlOo.roa (raw, json)
Hash identifier:          OwM68rJcIy62yGOp9KqRL1mjt0YKamSsCPxOUtXglHY=
Subject key identifier:   62:38:3F:7C:9C:2F:AB:88:15:4B:9B:5A:6E:23:75:4E:CE:94:94:EA
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       7F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Yjg_fJwvq4gVS5tabiN1Ts6UlOo.roa
Signing time:             Thu 25 Jun 2026 13:02:40 +0000
ROA not before:           Thu 25 Jun 2026 13:02:40 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:40 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=62383F7C9C2FAB88154B9B5A6E23754ECE9494EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:7e:a7:d4:3c:15:4f:fb:dd:2a:fb:61:48:
                    9a:8c:09:af:f2:d5:b2:c6:e4:e2:98:2f:a5:b6:c7:
                    da:2a:f8:f6:56:43:93:a9:02:c1:9a:09:b4:44:48:
                    62:9a:4a:37:0c:0f:d6:21:20:e7:16:eb:ca:03:99:
                    32:2b:53:a6:9f:97:32:0c:5a:67:09:93:aa:45:4e:
                    0d:3b:49:1f:56:c4:b5:5b:80:3e:57:da:fc:b7:68:
                    6d:b7:1e:17:82:a8:c8:c3:99:b4:61:06:23:95:8c:
                    c0:c5:56:c9:4d:98:a9:6c:03:80:bf:6c:7d:c8:4e:
                    a5:3f:9d:27:82:c5:0b:fd:7f:76:dd:c1:8e:c1:7f:
                    b7:b7:ca:14:43:f6:6c:4f:27:83:7f:c6:fa:c7:a9:
                    65:88:87:c0:f4:ec:86:86:75:c6:c0:aa:55:1e:b7:
                    ee:a0:ae:15:06:8a:ab:9c:96:01:da:a4:c2:c5:b1:
                    b4:13:5c:bc:d9:f8:53:3a:a4:ef:10:56:50:11:a2:
                    e8:42:28:af:0f:61:e6:a2:42:77:25:a4:46:63:d7:
                    c5:c5:70:81:0a:be:8e:79:57:5e:34:91:71:86:a3:
                    7c:07:a4:ab:f2:36:40:86:d5:fc:f0:bf:27:b8:f0:
                    c7:18:88:48:cd:b1:7c:94:5b:fa:b1:ff:11:aa:23:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:3F:7C:9C:2F:AB:88:15:4B:9B:5A:6E:23:75:4E:CE:94:94:EA
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Yjg_fJwvq4gVS5tabiN1Ts6UlOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:bd:07:12:11:a7:f5:85:dd:65:40:f9:72:dc:4d:50:c4:
         c5:2c:e8:47:51:b6:1d:9d:fb:52:a6:a9:75:b0:13:01:d7:de:
         68:3f:44:b6:1e:6a:99:1d:f3:4c:f4:76:80:1e:43:2d:ac:c4:
         9f:78:2a:42:8e:f6:39:66:1a:91:59:ba:d3:05:30:30:f7:b3:
         bc:97:89:1e:28:f8:ff:d2:0a:0d:27:6b:3b:0d:2d:18:2b:3b:
         79:fb:2e:13:48:6d:b4:29:91:b9:5a:4b:c9:cf:8f:5f:cf:76:
         13:fe:11:ed:97:a9:43:76:2e:a7:b4:d9:f7:de:b1:5b:39:70:
         cf:35:d9:c8:0a:37:d2:a7:6d:6f:88:54:0e:1b:8e:4b:5b:f4:
         4a:2e:8b:2c:44:2d:22:a8:49:52:89:d7:17:b4:d4:da:e4:ec:
         75:17:7b:9b:30:a4:fb:7a:e9:8e:3d:eb:73:c6:57:a8:22:dc:
         85:8f:e6:c6:38:6a:2e:3f:7b:4d:35:e6:1f:78:96:43:88:61:
         27:fc:fc:48:70:eb:9a:52:da:1d:67:31:19:bf:1f:03:93:3e:
         d1:4d:2c:87:94:f2:88:11:d2:7d:b0:e6:1e:92:56:8a:67:96:
         b9:92:2b:a7:06:76:e7:3a:3e:6a:a4:fe:62:7a:e0:33:9a:ba:
         46:5f:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:44:06 2026 by rpki-client