Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/n8QSBIWhCv-b5QWzNgx6qkF9dnM.roa
File:                     n8QSBIWhCv-b5QWzNgx6qkF9dnM.roa (raw, json)
Hash identifier:          BjWbuyvrZffO3piPwD8zEdspl47KTrDOMFFGQazGQ3E=
Subject key identifier:   9F:C4:12:04:85:A1:0A:FF:9B:E5:05:B3:36:0C:7A:AA:41:7D:76:73
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       7B
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/n8QSBIWhCv-b5QWzNgx6qkF9dnM.roa
Signing time:             Thu 25 Jun 2026 13:02:38 +0000
ROA not before:           Thu 25 Jun 2026 13:02:38 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 20:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:38 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=9FC4120485A10AFF9BE505B3360C7AAA417D7673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:5e:06:0f:83:16:48:72:ca:6b:76:b6:71:
                    49:ab:94:8a:82:b5:c9:79:a5:30:31:3e:ee:1c:5c:
                    a0:1a:2a:b4:26:3a:87:c2:1f:d4:ca:e5:0a:6f:ab:
                    b6:31:08:e0:3d:27:fc:89:95:a6:e1:ec:3d:40:9c:
                    ef:17:84:fc:35:35:cf:e6:b5:a3:0a:4a:69:0e:c5:
                    f8:9e:1d:b0:d1:21:ff:e1:43:e4:0e:ca:6a:c5:21:
                    c0:35:76:1e:7a:6f:d1:2c:ba:fc:50:c6:27:0b:d1:
                    0e:09:93:32:2d:d6:da:14:a9:c4:f2:63:53:66:a4:
                    2b:c3:81:e9:35:63:e3:fb:32:db:30:c1:03:d7:ca:
                    fc:99:2a:8e:b0:b4:07:54:f7:1d:d0:f3:19:39:5e:
                    c9:dc:28:63:86:6d:92:09:c4:3b:8b:88:0a:21:0f:
                    e2:ea:d7:32:9e:a2:cc:64:7b:76:57:87:b2:e7:b2:
                    28:0e:db:6b:7b:a0:3a:3c:b7:a4:a3:f9:6e:e0:47:
                    4b:17:87:be:5f:7f:86:05:ef:14:b7:4c:e6:a9:33:
                    f6:4a:68:a2:a3:55:ac:7f:25:00:62:11:e8:30:b7:
                    c3:ca:f4:f6:48:5f:03:fb:0d:5f:a5:89:08:22:47:
                    fb:da:11:8d:b1:17:91:74:4f:d1:bf:b7:d2:b2:3b:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:12:04:85:A1:0A:FF:9B:E5:05:B3:36:0C:7A:AA:41:7D:76:73
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/n8QSBIWhCv-b5QWzNgx6qkF9dnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c1:f0:a6:5e:d3:96:2a:0b:8a:93:41:c0:ef:02:cf:9f:ce:80:
         a9:8b:08:e7:25:eb:aa:3c:d2:9d:58:e0:71:c0:ba:b9:1f:c7:
         fe:5e:c0:d0:5c:a5:6b:35:f8:bd:91:e7:59:7d:f6:1c:96:1c:
         0a:ee:9b:07:18:1b:7e:c6:c5:ec:0a:40:c9:55:29:9b:11:a8:
         a6:c6:9b:31:f0:73:6d:e6:8a:43:bf:fe:bf:ab:f1:b1:ea:fe:
         f9:6f:71:19:56:77:49:d9:e8:90:37:ca:59:2b:88:65:36:10:
         53:bc:ff:d2:13:08:26:d8:06:fa:72:0d:53:d4:a8:1b:7a:f6:
         36:ed:b8:ae:eb:67:5f:79:73:f5:42:80:64:7f:51:0a:43:57:
         a4:f9:69:1c:28:e2:9a:a5:f6:92:cd:7d:d8:24:73:f8:c0:06:
         c9:74:f7:97:4d:5f:7a:77:3d:13:2a:3e:96:35:13:27:5a:71:
         61:c3:c1:ae:33:47:2e:7b:84:7d:8d:92:c3:4b:a5:fa:e0:c9:
         7b:5f:c8:c8:49:24:b7:fe:ae:9b:93:13:3e:19:82:de:8b:d7:
         5c:71:92:34:22:da:2d:ed:7b:99:97:f2:0c:ec:24:c3:96:5d:
         21:8c:04:e5:dc:9e:a4:82:e2:05:5f:31:7e:f7:c1:37:ae:14:
         76:41:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client