Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/sCeYicE2paxJEt7VSM-tOd6Dzpg.roa
File:                     sCeYicE2paxJEt7VSM-tOd6Dzpg.roa (raw, json)
Hash identifier:          rb2GFubgx+xCQVM7UkV9N0IJFMNmL4nHKMOsTHdxdxM=
Subject key identifier:   B0:27:98:89:C1:36:A5:AC:49:12:DE:D5:48:CF:AD:39:DE:83:CE:98
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       86
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/sCeYicE2paxJEt7VSM-tOd6Dzpg.roa
Signing time:             Thu 25 Jun 2026 13:02:43 +0000
ROA not before:           Thu 25 Jun 2026 13:02:43 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:43 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=B0279889C136A5AC4912DED548CFAD39DE83CE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:65:da:c2:7b:67:b4:f2:1e:a5:e4:0f:cc:
                    ae:80:67:97:8c:37:20:c3:87:82:13:6b:7e:c9:2d:
                    71:d9:33:d8:62:5c:25:07:fe:e3:8c:04:1f:b7:a9:
                    52:05:2b:69:e9:c8:4f:59:31:6c:87:49:ef:ea:fe:
                    6c:7c:ea:1a:ff:43:39:2b:f6:ff:b2:20:99:b9:4a:
                    b2:b1:9d:4d:20:2f:38:a4:46:d5:91:d8:35:20:e7:
                    41:92:26:76:49:e8:90:f8:f4:2c:47:02:c9:f3:f1:
                    08:f6:a5:86:17:db:a1:8f:f4:b7:8b:49:0b:b0:0c:
                    e3:b4:5e:27:87:4d:df:e0:63:02:05:b5:44:f6:29:
                    f2:46:b0:b6:9c:3e:d9:fa:99:32:68:34:26:30:f1:
                    e1:c6:76:c3:f9:12:7f:80:e6:6e:33:92:11:1c:6c:
                    bc:c2:85:cb:46:33:3f:a0:e7:e9:fb:2a:8e:73:03:
                    a3:c1:44:ce:85:58:12:2d:9d:a5:e6:ed:65:f7:62:
                    19:47:77:a9:79:83:a2:5f:18:dd:a0:6c:ba:84:a7:
                    a1:76:f8:3e:d5:aa:6c:c9:8b:16:c9:8b:1a:3d:4f:
                    fd:8c:40:87:d4:e9:db:15:b0:41:f3:91:c3:00:09:
                    26:1f:fb:de:ab:e7:5e:ac:db:00:70:d1:b4:da:1d:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:98:89:C1:36:A5:AC:49:12:DE:D5:48:CF:AD:39:DE:83:CE:98
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/sCeYicE2paxJEt7VSM-tOd6Dzpg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:04:ba:ae:a6:b6:4e:70:60:a6:af:9f:8b:7a:ad:12:c1:
         ed:52:f3:c8:03:67:3f:2a:24:40:9b:08:e5:25:ba:cf:92:83:
         68:a7:7c:15:a6:4c:ce:ab:2b:ca:40:7f:12:4b:fa:18:68:a6:
         47:64:84:30:bc:1c:92:c0:62:09:32:4e:c7:cc:54:f9:2e:1b:
         d9:78:4e:ab:db:80:0a:a3:f1:db:7e:33:03:8e:52:1b:f0:c8:
         c6:83:cf:ad:9b:64:18:ee:26:06:1e:5a:9b:6c:43:d8:e8:a2:
         a3:96:d0:f6:ff:1b:a5:67:d7:d5:05:9f:7c:42:ff:dd:75:48:
         60:30:ed:06:d7:ce:e5:1f:5a:ec:b2:cf:e5:19:d0:b5:e7:5f:
         da:f0:16:92:fd:8a:7a:52:c1:c4:fa:22:39:ba:c2:f6:91:dc:
         81:13:ec:33:74:14:4a:3f:af:e0:15:6b:f0:ba:0b:55:cc:d2:
         3d:77:0a:2b:d6:c1:9b:58:19:8f:2b:fe:2d:09:23:ea:d5:6a:
         c3:52:60:a8:6c:03:ce:7c:e9:ad:92:e5:41:c1:aa:93:91:e4:
         ba:49:1a:58:ef:83:20:76:9d:96:bc:48:39:ee:1d:09:c1:7e:
         64:49:0e:46:13:56:25:7d:63:87:45:c8:53:bd:52:06:d4:93:
         27:91:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client