Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa
File:                     agxFzR3Q5m2QJDFVKek1EG0YxQs.roa (raw, json)
Hash identifier:          auwbkmqA5whQpE0J9OQcwCQ/QgsuGOeM6kSrAYhkST4=
Subject key identifier:   6A:0C:45:CD:1D:D0:E6:6D:90:24:31:55:29:E9:35:10:6D:18:C5:0B
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       8C
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa
Signing time:             Thu 25 Jun 2026 13:02:47 +0000
ROA not before:           Thu 25 Jun 2026 13:02:47 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:47 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=6A0C45CD1DD0E66D9024315529E935106D18C50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:da:39:9d:79:ee:da:5c:d4:72:54:80:39:
                    22:73:69:63:6c:20:96:e6:88:33:ac:52:51:88:6f:
                    dc:a5:60:a3:24:41:3d:c1:41:54:6d:37:ae:12:43:
                    e7:f4:00:df:73:52:ef:1c:10:b0:c3:76:ab:d5:b7:
                    48:67:e6:b2:e5:ed:f0:5d:71:30:7c:34:41:10:7c:
                    1b:92:b6:c1:46:5a:45:23:22:73:cc:70:c3:8c:05:
                    37:36:21:1b:a5:b3:65:3e:80:23:e4:be:66:1d:e1:
                    60:e5:83:a3:cb:e5:5e:a5:bc:d6:ac:c3:88:c8:f2:
                    b7:e4:c9:1b:07:d5:16:ea:28:ff:95:40:44:01:dc:
                    fe:9c:0c:a0:40:2e:fe:72:9d:1c:1e:e1:18:34:27:
                    55:a7:98:11:9f:5d:26:41:38:a1:1f:88:49:08:62:
                    1d:8c:bf:f5:34:cc:ac:32:fa:94:1b:45:3f:c3:9a:
                    5e:e2:8d:aa:ef:ec:76:95:61:46:a1:59:b7:71:a7:
                    ef:1c:94:28:39:39:c2:dd:26:14:aa:d6:16:8c:3f:
                    98:60:11:e9:05:e4:19:9f:9b:45:fa:f8:bd:42:31:
                    c2:44:63:ea:6b:56:03:37:9d:b0:37:73:fd:a3:14:
                    c7:50:76:6e:e2:5b:e5:49:e7:4f:f4:33:84:30:eb:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:45:CD:1D:D0:E6:6D:90:24:31:55:29:E9:35:10:6D:18:C5:0B
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:aa:69:dd:82:e7:41:df:95:df:c8:d7:25:d3:d7:fd:3e:
         98:5d:d7:b5:a6:74:3d:e5:e8:f9:d3:e2:9d:58:d9:87:c3:eb:
         f3:69:56:d3:a1:f8:5f:84:08:6c:66:fb:14:c5:89:76:b6:f6:
         8c:19:ce:38:46:0f:9d:3f:68:af:67:77:1d:05:6a:72:0a:a9:
         b8:19:14:c9:e4:17:47:d5:a2:97:11:c8:47:55:7a:17:c3:8b:
         87:a0:e4:6f:9f:bf:65:49:c5:05:96:05:9a:88:ce:db:bd:c4:
         7e:d3:51:a9:b2:7c:4d:e0:66:61:37:7e:38:a3:5e:26:93:e8:
         46:ae:58:77:6f:a9:63:46:0a:c5:66:e0:26:c9:2d:95:6f:95:
         43:7e:7d:b6:e3:4f:d6:e5:f4:f8:56:cf:41:db:95:ea:65:a6:
         fb:ea:58:60:f5:05:08:b7:e3:4b:f7:0c:32:24:d6:a2:24:d9:
         ef:e7:57:d6:42:c0:64:20:53:e7:29:34:fb:eb:66:ab:55:18:
         c8:65:32:3b:a2:b3:49:db:73:51:cb:e9:d2:7c:d5:37:5f:68:
         42:f0:7e:45:fb:7d:0f:51:51:ae:00:55:64:7b:eb:c7:c4:f0:
         e7:51:df:ae:ce:ac:50:20:a8:92:42:41:89:39:bc:8a:bd:28:
         48:90:2b:eb
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzYw
MDc2RkMyOEYwNERFQjk4MTdBMzQ4MjIyNjk0MkNCRUYxRjgwRDAeFw0yNjA2MjUx
MzAyNDdaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBMEM0NUNEMUREMEU2
NkQ5MDI0MzE1NTI5RTkzNTEwNkQxOEM1MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcUNo5nXnu2lzUclSAOSJzaWNsIJbmiDOsUlGIb9ylYKMkQT3B
QVRtN64SQ+f0AN9zUu8cELDDdqvVt0hn5rLl7fBdcTB8NEEQfBuStsFGWkUjInPM
cMOMBTc2IRuls2U+gCPkvmYd4WDlg6PL5V6lvNasw4jI8rfkyRsH1RbqKP+VQEQB
3P6cDKBALv5ynRwe4Rg0J1WnmBGfXSZBOKEfiEkIYh2Mv/U0zKwy+pQbRT/Dml7i
jarv7HaVYUahWbdxp+8clCg5OcLdJhSq1haMP5hgEekF5Bmfm0X6+L1CMcJEY+pr
VgM3nbA3c/2jFMdQdm7iW+VJ50/0M4Qw603xAgMBAAGjggHbMIIB1zAdBgNVHQ4E
FgQUagxFzR3Q5m2QJDFVKek1EG0YxQswHwYDVR0jBBgwFoAUxgB2/CjwTeuYF6NI
IiaULL7x+A0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MzcveGdCMl9DandUZXVZRjZOSUlpYVVMTDd4LUEwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGdCMl9DandUZXVZRjZOSUlpYVVM
TDd4LUEwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcgYIKwYBBQUHAQsEZjBkMGIGCCsG
AQUFBzALhlZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzE5MzcvYWd4RnpSM1E1bTJRSkRGVktlazFFRzBZeFFzLnJvYTAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoW5jDANBgkqhkiG9w0BAQsFAAOC
AQEAXsSqad2C50Hfld/I1yXT1/0+mF3XtaZ0PeXo+dPinVjZh8Pr82lW06H4X4QI
bGb7FMWJdrb2jBnOOEYPnT9or2d3HQVqcgqpuBkUyeQXR9WilxHIR1V6F8OLh6Dk
b5+/ZUnFBZYFmojO273EftNRqbJ8TeBmYTd+OKNeJpPoRq5Yd2+pY0YKxWbgJskt
lW+VQ359tuNP1uX0+FbPQduV6mWm++pYYPUFCLfjS/cMMiTWoiTZ7+dX1kLAZCBT
5yk0++tmq1UYyGUyO6KzSdtzUcvp0nzVN19oQvB+Rft9D1FRrgBVZHvrx8Tw51Hf
rs6sUCCokkJBiTm8ir0oSJAr6w==
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client