Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m1BNsyopDk9seSqhKo8qOodZejk.roa
File:                     m1BNsyopDk9seSqhKo8qOodZejk.roa (raw, json)
Hash identifier:          KAurJ5TI7oFtBeSuydGZcMQWFdEabJj4hllNWWK2SaM=
Subject key identifier:   9B:50:4D:B3:2A:29:0E:4F:6C:79:2A:A1:2A:8F:2A:3A:87:59:7A:39
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       74
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m1BNsyopDk9seSqhKo8qOodZejk.roa
Signing time:             Thu 25 Jun 2026 12:56:27 +0000
ROA not before:           Thu 25 Jun 2026 12:56:27 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 12:56:27 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=9B504DB32A290E4F6C792AA12A8F2A3A87597A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:62:5a:f9:0a:d4:dd:9e:17:02:0c:e9:54:
                    e1:d9:0f:7e:36:e2:20:47:cc:8f:e5:37:b0:da:e7:
                    5a:54:6d:25:82:4e:e0:ff:91:11:40:30:08:c7:c5:
                    0a:45:e1:8f:88:78:32:3a:cd:87:c6:95:1e:01:a0:
                    4b:6f:34:51:78:99:3b:6c:7b:44:bd:8a:06:d9:b7:
                    81:3e:ab:94:b1:c1:2d:f6:18:0b:cf:ae:55:14:d4:
                    fe:f7:62:00:6e:6b:f2:d1:d1:cb:cb:55:2d:f4:8f:
                    8b:1c:44:cd:4e:3e:48:6f:20:01:38:f5:86:dd:7b:
                    d7:f1:c2:97:97:98:20:ec:ce:c3:e3:f2:f2:3e:d4:
                    12:72:76:0d:da:45:43:7d:04:41:4b:13:4b:7e:53:
                    4b:eb:da:4f:e3:6f:38:19:72:ec:a1:f1:27:5e:b4:
                    76:2c:08:22:f7:11:a3:de:91:b9:b3:a7:d4:a0:86:
                    f4:79:56:9d:f0:28:dd:67:bd:e3:7b:17:dd:2c:e0:
                    f4:20:1f:52:9c:54:cc:84:54:4e:d4:71:13:16:ea:
                    33:82:f4:25:6e:b7:c9:d8:14:0f:6f:08:e0:7c:d2:
                    15:74:2f:0b:5b:17:63:fe:a8:cd:fe:1a:fa:5d:48:
                    6d:36:a1:b0:fb:ff:6c:13:0e:0a:c5:c6:6b:02:3f:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:4D:B3:2A:29:0E:4F:6C:79:2A:A1:2A:8F:2A:3A:87:59:7A:39
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m1BNsyopDk9seSqhKo8qOodZejk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:fa:0f:01:26:4f:eb:7f:03:ca:20:34:e5:39:a9:52:59:
         6d:c4:7b:ca:cf:09:ab:2a:10:7e:88:66:59:a3:f9:f2:03:50:
         26:02:0d:f4:52:47:49:00:83:2b:cd:8c:af:54:06:39:e7:58:
         cf:48:d4:6e:03:66:e2:13:2b:a1:eb:02:7d:94:81:c7:ba:f9:
         f3:7f:61:ea:9b:ca:b6:5f:fe:68:e5:2e:56:c9:3f:2c:a3:ea:
         85:51:55:9a:aa:60:d4:a6:26:9f:22:69:27:8a:d7:39:5b:09:
         2a:95:79:0c:32:09:6a:30:e0:dc:d5:26:43:80:e4:30:d2:bb:
         b3:fa:97:94:d4:9d:23:2c:6b:9f:33:c3:65:7b:dd:5c:8d:11:
         0c:25:2f:cf:86:39:e8:a1:86:f3:c9:91:ea:ea:ac:d6:28:f7:
         a7:ec:4a:ce:ca:fc:3f:07:f0:e3:5b:f8:72:6a:9e:bb:03:fd:
         84:37:43:07:4e:75:e2:41:2b:55:32:92:73:a9:40:d3:a6:be:
         1c:4b:9a:59:d0:71:a1:2d:fa:87:d7:b9:54:46:2e:85:4e:4a:
         6c:b1:d8:6e:8c:94:f9:87:c2:91:9f:e9:5a:85:c5:2a:22:8e:
         cc:34:9c:ec:2c:9c:6d:e3:4c:ae:92:42:00:64:5e:36:c2:aa:
         65:24:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:44:05 2026 by rpki-client