Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/vgdYVgOMxugOWcPZCHLNFULN3kY.roa
File:                     vgdYVgOMxugOWcPZCHLNFULN3kY.roa (raw, json)
Hash identifier:          6wdgNdxRDgqp/PzSv38/6lB7E8gNEBkiUxuL2ab+j+s=
Subject key identifier:   BE:07:58:56:03:8C:C6:E8:0E:59:C3:D9:08:72:CD:15:42:CD:DE:46
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       7D
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/vgdYVgOMxugOWcPZCHLNFULN3kY.roa
Signing time:             Thu 25 Jun 2026 13:02:38 +0000
ROA not before:           Thu 25 Jun 2026 13:02:38 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:38 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=BE075856038CC6E80E59C3D90872CD1542CDDE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:f9:b7:b2:f6:ec:7f:c6:4f:3a:dc:34:3d:
                    29:a6:aa:80:21:a8:7a:29:39:da:e6:d1:1a:cf:eb:
                    c2:ed:8f:6f:ec:c1:b6:ca:99:8d:d8:d8:94:95:72:
                    b9:73:6c:5c:76:6c:5c:96:3f:f1:17:f8:89:05:be:
                    83:e9:7e:d0:58:03:b7:ae:f0:ae:f2:2a:15:cb:3b:
                    67:80:fe:cf:28:31:64:2e:57:b6:56:5f:3d:3f:42:
                    31:19:64:bb:30:92:6b:58:01:84:40:91:d0:f9:d5:
                    f8:f9:9e:20:ad:a2:d9:08:8c:2a:05:68:ff:c0:b7:
                    15:9c:04:97:26:7e:54:24:84:28:13:18:42:24:e6:
                    af:88:b5:2e:da:bc:d5:23:a1:40:44:b8:f4:c5:2c:
                    41:b0:43:90:d6:19:75:65:e7:02:8c:88:46:b4:a1:
                    0e:75:a2:a0:0e:94:84:7a:fc:2d:01:69:60:be:dc:
                    29:48:7f:2d:4e:c2:dd:d9:c6:7f:4d:8d:13:62:ef:
                    0e:7d:19:5b:f2:8a:df:83:27:85:2a:80:1e:cb:50:
                    ac:b6:57:3c:d6:8c:e6:85:34:f6:74:f4:70:6b:8c:
                    8c:6a:9e:1f:42:c3:ad:ec:f2:57:ab:af:56:56:2b:
                    0e:85:85:79:42:aa:d6:94:76:9c:fa:2d:c1:06:5c:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:07:58:56:03:8C:C6:E8:0E:59:C3:D9:08:72:CD:15:42:CD:DE:46
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/vgdYVgOMxugOWcPZCHLNFULN3kY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:fd:a1:4e:89:08:c7:e6:eb:fd:93:f5:bd:73:ac:94:1e:
         e0:c2:0f:e0:70:a3:96:53:1b:7d:23:2a:42:d1:cf:ee:93:c1:
         52:9e:17:a9:0a:3b:5d:c4:af:6a:61:54:12:5d:9e:71:64:ef:
         47:45:e1:1b:f8:04:ea:c8:a2:83:0a:8f:d8:33:00:22:3b:9a:
         1c:98:39:ca:5c:d1:06:ab:9d:1d:98:2a:02:99:3f:4f:7f:b2:
         16:41:f7:b8:1f:86:e2:a8:62:ff:25:57:fe:5c:12:b6:9a:3f:
         ab:44:3c:15:4d:6a:a1:79:e1:a0:19:61:cf:ae:31:fa:f1:34:
         7d:82:ff:ff:5b:cf:62:36:7d:58:86:03:c4:27:f0:04:dc:5e:
         e0:09:1e:17:4c:e1:da:af:6b:c7:4e:38:c3:61:37:6c:eb:fc:
         64:b7:a2:ec:f3:d0:12:9d:29:47:8d:2f:c8:d0:9e:a4:b1:fb:
         75:71:4e:7f:bf:88:63:e2:93:7c:85:20:ad:38:e6:f5:b8:be:
         45:3d:ab:68:f4:98:0f:25:94:7c:0f:e4:49:93:7b:51:8c:79:
         e7:12:98:56:96:22:81:e3:7b:18:76:88:3f:40:35:0e:e3:7f:
         79:c4:9c:db:fc:40:d7:fa:c7:19:b6:1e:ba:0e:c9:5b:c6:46:
         7f:bb:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client