Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa
File:                     flXaDjCo64DbF5klqyfE3hJ3N4s.roa (raw, json)
Hash identifier:          kL1kolAHrFQ0Or3BnCNAvV7fCFiN8g33hHLScUANoL8=
Subject key identifier:   7E:55:DA:0E:30:A8:EB:80:DB:17:99:25:AB:27:C4:DE:12:77:37:8B
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       6F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa
Signing time:             Thu 25 Jun 2026 12:56:25 +0000
ROA not before:           Thu 25 Jun 2026 12:56:25 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 12:56:25 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=7E55DA0E30A8EB80DB179925AB27C4DE1277378B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:b4:44:30:69:a0:ce:61:79:c1:84:34:32:
                    21:c2:c9:33:84:ee:19:41:e7:9a:ba:d2:b8:90:5a:
                    1f:c0:c8:5d:33:8e:15:00:75:5b:fb:d3:0d:93:c4:
                    b2:68:76:7e:94:05:41:26:78:c1:00:22:f2:38:b9:
                    80:51:7a:2d:b4:26:62:26:25:a8:36:89:d3:b4:49:
                    48:10:82:4e:b4:b5:ee:34:22:58:80:06:f7:49:8b:
                    8d:6a:00:41:0a:48:0f:41:1a:68:67:65:b7:e3:47:
                    98:f9:63:42:b1:27:c9:49:9e:76:5f:56:38:7b:b6:
                    59:fa:5d:d1:68:f3:39:bd:9f:16:f4:cf:31:e1:6e:
                    da:07:4e:f7:ee:3c:3d:9a:64:78:b1:bd:39:17:0d:
                    28:83:1c:ae:5d:da:9c:ee:36:b8:bb:bb:f7:93:41:
                    7e:da:e3:1e:2c:e6:96:b6:6c:b5:6f:aa:f2:61:8d:
                    92:7b:ee:e7:8c:4d:c4:45:31:eb:99:c2:b1:63:98:
                    c1:b5:43:c7:03:7c:02:77:57:fc:22:93:61:92:a0:
                    6c:d9:7c:03:75:bc:b5:15:f8:e1:6a:98:1e:64:45:
                    1a:d3:8f:a0:0d:37:52:31:60:c2:94:fd:6c:f5:75:
                    31:b1:ee:df:ad:63:9f:51:65:b6:4a:c4:7e:15:c1:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:55:DA:0E:30:A8:EB:80:DB:17:99:25:AB:27:C4:DE:12:77:37:8B
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:de:59:38:aa:25:2a:3a:94:ed:c5:bd:97:93:23:a4:c2:fd:
         8a:de:ae:7a:3e:4f:49:d5:67:e5:4c:d3:17:03:03:8c:fd:fb:
         83:ac:ff:01:8b:e4:48:42:1e:d0:34:79:b2:78:cc:09:0c:70:
         86:4b:c8:fb:18:f1:cb:c7:22:52:cb:36:ca:5f:f5:1f:b8:9f:
         5e:bc:83:d3:71:c4:27:36:f7:bb:b0:ba:c0:b1:79:16:1c:da:
         9a:67:94:55:35:cd:25:26:8f:41:e5:e0:07:1a:d9:e0:7f:86:
         43:0c:db:56:9a:d3:da:df:24:32:5a:5b:9c:77:98:05:82:d7:
         93:8f:d6:b9:33:2b:da:7b:cb:4b:86:e0:85:ca:65:f8:fe:cc:
         3e:5a:f8:81:25:e2:ea:e2:fd:98:31:38:d4:40:d6:d3:42:bb:
         76:f8:3a:5a:40:3c:3e:2f:66:40:5a:c5:b7:14:2f:82:e7:ec:
         4d:c3:31:d6:98:fd:0e:92:4c:2a:2d:bb:b4:6d:e9:41:3c:f6:
         d2:fa:e5:2b:42:84:47:8b:fa:06:bc:7d:e7:a4:8f:bc:98:f7:
         c9:2c:65:34:3c:7f:0b:a2:16:d6:71:49:c6:be:95:0f:c5:c8:
         61:65:a2:40:d3:69:6e:6e:de:96:ef:dd:26:81:e1:63:7d:f4:
         e6:be:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client