Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/LsoVuO4oARcQTdnBYToxCe0m9wg.roa
File:                     LsoVuO4oARcQTdnBYToxCe0m9wg.roa (raw, json)
Hash identifier:          UMghVGkqal6mfeaG1i7yu0IHP/TODQdFmEU5LaZU5Rw=
Subject key identifier:   2E:CA:15:B8:EE:28:01:17:10:4D:D9:C1:61:3A:31:09:ED:26:F7:08
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       CE
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/LsoVuO4oARcQTdnBYToxCe0m9wg.roa
Signing time:             Fri 25 Sep 2026 05:56:19 +0000
ROA not before:           Fri 25 Sep 2026 05:56:19 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        211.133.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 12:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 25 05:56:19 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=2ECA15B8EE280117104DD9C1613A3109ED26F708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:fd:50:da:65:8a:bc:22:79:64:28:35:43:
                    0f:20:ea:9a:2b:0c:71:54:09:95:d1:ad:35:03:e2:
                    df:f8:f7:9e:e5:67:27:24:b3:83:cd:9f:68:59:3a:
                    e1:ee:db:16:5f:9e:e8:5d:d2:38:44:22:c5:e2:4b:
                    ab:b9:cf:5b:d4:06:46:13:11:d1:f9:cd:9b:c1:91:
                    bf:03:17:56:22:8e:c1:fe:c5:75:ba:39:75:b7:f5:
                    c6:7f:2f:83:19:21:7c:f7:bc:87:c8:66:21:cc:9b:
                    7c:7e:c9:7b:bd:c4:3b:64:0e:63:2f:02:a7:60:a0:
                    9c:aa:47:f4:99:54:d8:d7:82:0e:83:ee:ec:a4:e7:
                    d6:9a:b4:6f:41:4a:15:b3:6d:35:09:61:94:fb:fd:
                    d8:da:95:f5:54:4f:f5:24:e8:f5:9c:ec:8a:71:95:
                    60:f8:b5:02:74:36:0e:c8:2a:11:8c:a9:1b:d7:32:
                    b3:b1:8e:6c:f7:df:f7:ec:56:a0:b8:e3:ba:64:9a:
                    ab:b2:f5:03:86:d6:08:1d:11:c0:45:ea:3f:26:d7:
                    b6:a0:21:f8:35:0f:87:86:db:cd:4d:72:23:f2:d2:
                    6a:5f:ba:9f:a6:35:e8:85:9e:03:76:68:46:d0:68:
                    5f:78:cb:be:e2:4a:39:a2:74:67:c8:e9:ce:d5:a8:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:15:B8:EE:28:01:17:10:4D:D9:C1:61:3A:31:09:ED:26:F7:08
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/LsoVuO4oARcQTdnBYToxCe0m9wg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:81:1c:05:b8:fa:45:35:87:31:1b:d9:42:28:1e:66:dd:79:
         a9:cd:b8:51:55:64:e1:d7:48:91:94:b8:f7:ae:8d:70:d6:33:
         b4:03:c1:cb:0a:b9:dc:2e:d8:fe:d1:7d:fe:46:90:5c:33:7b:
         af:35:16:98:29:a2:5a:d5:07:c9:6d:a3:67:aa:82:f3:f2:de:
         96:c6:39:81:e8:04:87:92:cd:c9:4d:d9:19:b2:28:9a:f1:fc:
         9c:a1:83:d1:e9:4b:16:3f:55:24:7a:b9:66:c7:33:97:fd:13:
         9d:5e:09:bc:84:46:c8:27:aa:e5:c1:14:5d:5e:1b:cd:09:27:
         89:58:d4:ea:37:b1:c0:97:ee:7a:d2:26:81:95:89:d9:1f:62:
         6b:01:59:1c:a1:b9:1a:ba:e8:27:79:26:6b:97:c3:cc:c2:bf:
         ba:7c:b9:ee:93:2e:f4:4c:34:67:cf:a1:ff:30:05:ab:70:42:
         a8:00:02:27:4c:ef:59:dd:43:ea:2e:70:dc:a1:66:53:6b:34:
         3d:c9:27:ab:d9:60:81:9a:6c:b2:7c:24:02:e9:9e:0a:67:76:
         c3:ec:b0:28:a4:7f:00:4f:c3:ac:27:87:2d:c8:c6:34:78:6d:
         a8:1f:41:17:be:3f:0f:ed:07:c5:c4:b8:e1:26:ca:05:85:36:
         80:83:1c:f2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjUw
NTU2MTlaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFQ0ExNUI4RUUyODAx
MTcxMDRERDlDMTYxM0EzMTA5RUQyNkY3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDID/1Q2mWKvCJ5ZCg1Qw8g6porDHFUCZXRrTUD4t/4957lZyck
s4PNn2hZOuHu2xZfnuhd0jhEIsXiS6u5z1vUBkYTEdH5zZvBkb8DF1YijsH+xXW6
OXW39cZ/L4MZIXz3vIfIZiHMm3x+yXu9xDtkDmMvAqdgoJyqR/SZVNjXgg6D7uyk
59aatG9BShWzbTUJYZT7/djalfVUT/Uk6PWc7IpxlWD4tQJ0Ng7IKhGMqRvXMrOx
jmz33/fsVqC447pkmquy9QOG1ggdEcBF6j8m17agIfg1D4eG281NciPy0mpfup+m
NeiFngN2aEbQaF94y77iSjmidGfI6c7VqNi/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULsoVuO4oARcQTdnBYToxCe0m9wgwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL0xzb1Z1TzRvQVJjUVRkbkJZVG94Q2UwbTl3Zy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbThUAwDQYJKoZIhvcNAQELBQADggEB
AAuBHAW4+kU1hzEb2UIoHmbdeanNuFFVZOHXSJGUuPeujXDWM7QDwcsKudwu2P7R
ff5GkFwze681FpgpolrVB8lto2eqgvPy3pbGOYHoBIeSzclN2RmyKJrx/Jyhg9Hp
SxY/VSR6uWbHM5f9E51eCbyERsgnquXBFF1eG80JJ4lY1Oo3scCX7nrSJoGVidkf
YmsBWRyhuRq66Cd5JmuXw8zCv7p8ue6TLvRMNGfPof8wBatwQqgAAidM71ndQ+ou
cNyhZlNrND3JJ6vZYIGabLJ8JALpngpndsPssCikfwBPw6wnhy3IxjR4bagfQRe+
Pw/tB8XEuOEmygWFNoCDHPI=
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:37 2026 by rpki-client