Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/yei7pFiePCg89JS48JlYNA7LzPU.roa
File:                     yei7pFiePCg89JS48JlYNA7LzPU.roa (raw, json)
Hash identifier:          iGvxqFT3fGO4UI7QHMB76Dq3U+zQCqeowgdp1shQkiA=
Subject key identifier:   C9:E8:BB:A4:58:9E:3C:28:3C:F4:94:B8:F0:99:58:34:0E:CB:CC:F5
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       81
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/yei7pFiePCg89JS48JlYNA7LzPU.roa
Signing time:             Thu 25 Jun 2026 13:02:40 +0000
ROA not before:           Thu 25 Jun 2026 13:02:40 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.185.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 13:02:40 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=C9E8BBA4589E3C283CF494B8F09958340ECBCCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:f6:44:1d:5f:10:fa:39:00:ea:bd:2a:a8:
                    6a:50:d3:de:32:26:03:f5:b8:41:9f:b9:b4:1b:85:
                    a3:03:0b:94:35:7c:b0:4c:b5:8c:0c:a0:7e:12:43:
                    e5:bc:ff:66:83:f0:9d:25:d0:fe:c5:4f:31:6b:06:
                    52:93:5f:1f:a5:96:97:18:52:ba:f1:56:6b:b7:7f:
                    b0:07:75:b1:2a:e9:e7:60:f7:be:8b:cd:6f:d5:35:
                    01:56:b0:f1:6b:10:e2:8d:cc:4d:60:9e:b8:d6:46:
                    dc:4f:57:42:b8:63:85:c6:ee:66:c2:9e:de:30:69:
                    27:58:ff:c4:97:b7:6a:27:98:3a:38:0a:00:c9:27:
                    7e:62:79:3c:1f:3a:a0:34:e1:25:dd:99:ef:ed:0d:
                    88:28:61:8b:02:5a:ea:5e:3a:90:62:97:d7:d4:27:
                    54:23:a7:3e:92:34:36:7e:78:ea:6d:0a:a0:92:88:
                    3e:12:75:d2:27:c7:80:38:1f:03:c5:09:65:fb:69:
                    2c:dd:8b:a6:d9:f2:51:8f:e9:b5:ea:65:97:4c:21:
                    4a:f7:c4:a9:3b:58:46:76:50:0b:a5:b8:82:3e:6e:
                    51:04:0f:07:cc:3c:7d:ab:3a:99:9e:27:04:7a:6f:
                    71:30:ab:86:f8:6f:4a:a6:15:25:c1:fc:b8:a9:9b:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:BB:A4:58:9E:3C:28:3C:F4:94:B8:F0:99:58:34:0E:CB:CC:F5
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/yei7pFiePCg89JS48JlYNA7LzPU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:93:68:2d:d7:31:b7:b3:50:ba:04:af:80:fd:53:a2:dd:
         f8:6c:de:d4:4a:02:d7:51:85:48:19:f1:3a:49:9a:81:af:dd:
         3a:54:dc:eb:02:49:6c:da:31:e4:1b:50:63:06:5c:cf:19:bd:
         cb:b2:f5:48:4d:81:9e:0f:5b:00:0d:42:86:72:19:d4:c6:0c:
         aa:a5:9b:ad:39:c4:a1:dd:b7:47:22:bb:43:3b:f4:54:d7:2c:
         ee:43:a2:5d:e6:ea:07:48:22:0e:d2:c1:fb:d0:77:aa:6b:28:
         bb:04:d7:51:df:ce:48:eb:ad:b3:82:cb:1d:46:a4:f4:ae:fd:
         4a:28:7d:91:06:40:63:f3:ce:72:c5:ea:9a:d3:93:9c:7a:3b:
         15:7f:cb:53:c9:6b:0b:e4:18:28:90:4d:07:a2:56:46:f5:0c:
         59:6e:2a:c6:7b:1a:51:67:62:03:6c:28:4a:55:97:1e:d7:09:
         53:98:09:ef:6a:ad:cf:9f:f2:30:cb:17:db:14:9b:c7:79:6b:
         23:f7:ac:7b:e7:60:ea:27:b5:59:0d:ab:ac:fe:e5:c8:c1:cc:
         d3:05:ba:94:14:a0:10:36:09:56:db:cd:1b:a8:da:30:8d:c4:
         e2:f9:53:37:c4:33:cf:e5:6f:c7:c2:b2:f6:52:3a:2c:ff:66:
         ae:9b:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client