Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/hfVobRCFNHZHJpIbO26qd1QveLk.roa
File:                     hfVobRCFNHZHJpIbO26qd1QveLk.roa (raw, json)
Hash identifier:          7QuUCUrdSLZkX1tauF2I0vh6zWhiSMItWawWsLsTzMA=
Subject key identifier:   85:F5:68:6D:10:85:34:76:47:26:92:1B:3B:6E:AA:77:54:2F:78:B9
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       94
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/hfVobRCFNHZHJpIbO26qd1QveLk.roa
Signing time:             Thu 25 Jun 2026 13:06:56 +0000
ROA not before:           Thu 25 Jun 2026 13:06:56 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:06:56 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=85F5686D108534764726921B3B6EAA77542F78B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:ab:a7:09:76:05:7c:88:ad:53:d3:ba:20:
                    10:4b:0d:9a:92:f4:54:83:e4:26:62:5e:b8:9a:6e:
                    d5:78:a0:49:8b:52:d4:1e:cb:f1:b9:fa:97:e5:37:
                    64:47:cc:5e:60:bb:44:de:27:97:0d:bd:84:82:88:
                    53:c2:12:4e:d7:e4:e8:63:c8:b1:3b:cb:40:81:c8:
                    20:d8:6c:f3:53:a8:c3:ca:e9:a2:c5:e3:00:0f:2a:
                    ca:51:ff:0f:35:4e:42:dd:e9:35:98:d7:dd:28:33:
                    d3:58:19:ec:b9:ab:ce:f2:d0:9b:49:c9:aa:f5:91:
                    45:ba:71:a3:30:5a:50:39:5d:ca:5d:f3:e5:4e:b5:
                    94:e2:28:be:8b:30:a0:ee:90:cb:e2:e9:b4:6f:7b:
                    8c:2a:d4:1d:ca:04:9d:c3:fa:74:e0:4b:85:2e:df:
                    69:44:0c:07:80:70:f6:61:25:f2:35:2a:49:4c:12:
                    8f:35:c6:cb:1a:c9:19:82:4e:ea:f3:3d:a9:a3:73:
                    6c:27:cc:da:1a:7f:89:be:2c:8d:d2:86:43:73:18:
                    28:2d:da:5d:4f:a7:37:60:e0:08:4d:c0:dd:36:2a:
                    2c:25:e5:33:60:89:7f:5a:da:52:59:71:74:0c:ab:
                    b5:83:be:f7:f7:db:12:07:2a:66:70:28:da:0c:9c:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F5:68:6D:10:85:34:76:47:26:92:1B:3B:6E:AA:77:54:2F:78:B9
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/hfVobRCFNHZHJpIbO26qd1QveLk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:64:a4:34:9d:9b:63:fd:98:22:6e:42:17:aa:0f:c7:b6:
         ee:4a:bc:ce:2e:59:4f:73:46:ca:03:4a:f5:c1:f4:27:a1:1c:
         7e:77:74:f5:67:3b:b4:fe:a5:bf:9b:35:95:39:e2:f7:35:66:
         2b:57:0e:5b:21:df:1f:97:2f:18:f6:bb:fa:98:10:96:39:f7:
         ba:c1:f2:3a:ae:b1:69:b0:e9:45:2a:b3:cc:fd:f8:da:92:6d:
         53:51:4e:1d:13:89:4c:ac:e7:55:e0:c5:cc:f6:25:f1:5d:9c:
         ea:b2:0c:ad:87:43:14:a8:77:6b:ca:e5:b2:8d:28:d1:cd:3b:
         ec:da:9a:35:fd:89:8c:6a:e5:32:a8:f6:f2:42:99:ee:91:47:
         cb:e0:0e:62:c9:6a:79:e2:64:60:be:7e:e0:60:fe:8c:c4:a3:
         ee:15:f1:42:ed:16:b1:c5:9f:39:bf:53:4c:6c:a9:9b:e9:9c:
         79:c1:e0:38:35:34:63:7f:fe:78:5d:7e:bf:32:b0:78:ee:d3:
         ed:9d:c7:d9:0c:f2:64:e1:ab:e8:b6:56:74:d2:b5:56:21:be:
         0b:9c:e3:06:20:01:0a:b9:25:20:3e:00:b8:74:8b:36:99:21:
         39:bb:71:1e:75:fe:3f:25:75:3e:95:e9:ee:b7:f9:df:59:2f:
         37:70:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:57 2026 by rpki-client