Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZU04SIj648Ebf8oaSMa45w1prI.roa
File:                     cZU04SIj648Ebf8oaSMa45w1prI.roa (raw, json)
Hash identifier:          a1hcvNX4R9VMVUQFs/5e7OJIiuIQzzcRkJakdxbNXVk=
Subject key identifier:   71:95:34:E1:22:23:EB:8F:04:6D:FF:28:69:23:1A:E3:9C:35:A6:B2
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       75
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZU04SIj648Ebf8oaSMa45w1prI.roa
Signing time:             Thu 25 Jun 2026 12:56:28 +0000
ROA not before:           Thu 25 Jun 2026 12:56:28 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 12:56:28 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=719534E12223EB8F046DFF2869231AE39C35A6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:bc:68:9c:9b:7b:81:49:cf:84:bc:fd:ca:
                    90:78:11:7b:b7:66:5a:ab:24:12:8d:43:80:40:68:
                    62:08:7d:81:c2:e0:b0:ff:d5:dc:4e:c6:2d:22:22:
                    5d:93:7d:cb:ed:ca:c0:a7:cc:f3:16:e5:14:e4:a2:
                    2a:0a:57:da:11:af:36:00:a8:04:2d:00:9c:9f:43:
                    d5:f4:3d:9e:92:d2:d9:26:55:82:10:52:f2:e0:7c:
                    5f:44:6a:b6:36:85:a8:cb:90:10:aa:3c:31:47:26:
                    7c:5e:63:d2:42:a4:56:1c:10:56:be:4e:7e:ca:e4:
                    2f:9c:6b:ce:6a:82:62:ce:f1:79:47:08:f1:53:53:
                    96:22:e6:92:d1:52:cb:21:a9:6a:c8:dd:a2:c6:82:
                    47:9d:0a:4d:a2:96:54:a7:e5:9e:21:3d:c1:b8:83:
                    bd:c2:f8:16:72:1f:1b:bf:0b:3e:94:4f:7c:91:35:
                    9f:8e:62:0b:3b:ce:a5:9f:8d:10:88:ec:90:b5:83:
                    e6:41:ef:e1:99:19:7a:c4:7c:bb:8c:6e:a8:3e:98:
                    00:29:c6:58:b1:24:04:4d:e9:30:16:4b:3a:41:b0:
                    32:d0:c0:ab:02:5b:9e:db:da:c4:0d:e5:82:b0:75:
                    24:96:9f:8f:14:e7:f8:19:8d:66:82:35:0d:1d:d7:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:95:34:E1:22:23:EB:8F:04:6D:FF:28:69:23:1A:E3:9C:35:A6:B2
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZU04SIj648Ebf8oaSMa45w1prI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:2f:14:c5:87:53:f8:36:c6:5e:42:b1:b9:ce:db:3d:71:
         c3:03:7d:e8:60:99:0f:8f:57:47:ab:76:75:b6:ed:86:02:76:
         50:99:f9:58:84:91:57:db:03:4f:5c:24:fd:52:b1:44:a0:45:
         63:33:f5:5f:08:be:c6:c3:fc:e2:a4:e1:29:71:14:f3:01:15:
         1c:17:ea:5a:be:28:7a:60:64:5a:d1:aa:2d:8f:e9:1f:b3:d8:
         77:25:c8:b6:9d:91:55:57:c9:8b:35:81:36:74:0f:02:cb:6b:
         b3:b9:44:81:53:87:4e:5e:8a:93:ce:82:4f:b9:82:dc:b3:7b:
         fb:15:40:ab:30:7a:d7:99:2b:96:5d:e4:1e:f5:46:c8:62:f6:
         c6:0f:ea:56:0f:76:67:72:a6:02:ac:10:61:d1:b7:c7:44:cb:
         3c:94:41:96:f3:11:74:bd:c9:0a:04:46:9c:e5:cc:5c:29:f1:
         f7:50:a4:d8:7a:cf:5c:67:e0:56:df:ac:dc:fc:9e:04:36:da:
         f5:91:71:08:21:2d:fb:d8:ca:59:65:c9:c4:67:dc:b5:c6:38:
         3d:a3:d4:d3:ad:e8:e6:d6:fd:aa:66:48:48:0c:c1:66:6e:c5:
         2b:e2:02:4d:c1:eb:09:e3:dc:06:44:b1:39:5b:b8:3f:68:ba:
         f8:c0:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client