Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/z3NI1zjrZIxIXBAPZIIHKrN4T14.roa
File:                     z3NI1zjrZIxIXBAPZIIHKrN4T14.roa (raw, json)
Hash identifier:          dtvFHH9BD1CnULsUXMtvxnGCNufU0SDJfQgGYdALkf8=
Subject key identifier:   CF:73:48:D7:38:EB:64:8C:48:5C:10:0F:64:82:07:2A:B3:78:4F:5E
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       76
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/z3NI1zjrZIxIXBAPZIIHKrN4T14.roa
Signing time:             Thu 25 Jun 2026 12:56:28 +0000
ROA not before:           Thu 25 Jun 2026 12:56:28 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jun 25 12:56:28 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=CF7348D738EB648C485C100F6482072AB3784F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:bb:4b:c8:4a:aa:86:92:3d:c2:62:7d:25:
                    6b:01:35:e9:b1:fa:64:12:81:ca:37:a6:68:1e:aa:
                    ad:14:08:f6:7b:c3:33:07:ca:c8:f4:32:c3:7a:a6:
                    87:a7:96:8b:41:15:04:87:80:4d:72:06:b1:e7:bd:
                    31:63:4f:30:f6:bf:4f:bb:81:67:da:a5:0b:da:25:
                    10:b8:71:e4:b1:28:51:36:a9:f8:6b:6a:d4:2b:04:
                    8e:37:0f:48:d0:ee:a4:01:a7:43:1e:b3:90:ca:fe:
                    5f:29:c5:8a:2d:91:d7:73:4c:8c:18:0c:f4:f7:89:
                    ac:a5:c3:31:55:b0:48:d7:f4:03:56:8c:5b:fc:98:
                    58:f7:b8:20:2b:f8:98:41:c4:e2:10:e0:c6:ba:7d:
                    5f:01:2d:17:83:7b:9a:e9:8a:46:e9:6c:9f:4c:4a:
                    f7:6a:fe:bb:16:a6:b5:6a:ec:3d:e3:ad:a0:5f:f8:
                    13:10:d4:a1:f5:ad:a3:7d:68:71:8d:ba:a2:86:91:
                    7c:07:af:01:47:98:db:77:26:1b:10:1a:41:7e:a1:
                    f7:48:3b:ee:55:b2:66:f7:c7:3d:e7:6c:15:b6:a7:
                    97:01:52:60:3d:bc:68:df:6d:08:7b:a1:92:23:df:
                    7c:4b:10:7f:a7:86:e1:c0:c9:85:d1:39:21:02:6d:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:48:D7:38:EB:64:8C:48:5C:10:0F:64:82:07:2A:B3:78:4F:5E
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/z3NI1zjrZIxIXBAPZIIHKrN4T14.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:bc:53:08:bf:40:2e:b9:05:1f:a7:94:da:23:cd:58:83:ae:
         d6:55:43:db:cc:40:d8:62:f2:ee:ea:2d:3f:df:62:80:01:36:
         42:ac:1e:3d:10:08:5d:6e:ba:8e:d4:77:9d:9c:29:b3:fb:1c:
         c7:08:4e:10:01:59:e4:db:b4:99:f0:e1:74:ff:bf:58:91:69:
         e8:b0:2d:73:c3:42:cd:02:ec:f9:4c:be:d4:88:f9:d8:36:70:
         38:21:6e:50:df:1a:4c:5b:ad:27:bc:1c:9e:50:18:0f:84:5e:
         a6:71:52:6f:33:de:2d:9e:a2:64:fd:7a:de:20:ca:df:dc:d0:
         90:ea:64:19:05:dc:09:04:ac:55:50:dd:24:dd:45:9a:d4:b9:
         cc:2a:32:88:ce:0c:bb:8a:80:71:38:21:77:e8:8f:31:f1:5d:
         fa:6b:e9:81:ff:2c:8e:8c:e0:fb:28:1c:cb:5e:1d:29:28:7a:
         2f:1f:f2:64:5c:ae:61:94:ea:2b:a3:03:e2:6c:a5:11:3e:30:
         9d:83:0c:0f:64:fd:57:c4:75:7c:ba:ab:51:8a:82:cd:cf:fa:
         16:07:c0:26:10:bc:51:bd:9d:05:54:3a:ff:2a:f1:95:4a:0b:
         d8:ff:0d:0f:f5:58:07:25:6e:ba:17:18:df:e7:d7:8d:34:95:
         22:b0:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client