Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Leq3qzTmfKxpJZEVT5tQeP77FGg.roa
File:                     Leq3qzTmfKxpJZEVT5tQeP77FGg.roa (raw, json)
Hash identifier:          MEZHWGjqP9CfxzVFafRjSpNv8PL9TBUeTHAkKYP9FaY=
Subject key identifier:   2D:EA:B7:AB:34:E6:7C:AC:69:25:91:15:4F:9B:50:78:FE:FB:14:68
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       56
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Leq3qzTmfKxpJZEVT5tQeP77FGg.roa
Signing time:             Thu 25 Jun 2026 13:06:55 +0000
ROA not before:           Thu 25 Jun 2026 13:06:55 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        137.40.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:06:55 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=2DEAB7AB34E67CAC692591154F9B5078FEFB1468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:55:dd:4b:31:a7:96:3b:e2:54:b2:57:28:
                    2b:ac:87:b3:ec:d5:fa:60:4a:b4:51:66:30:02:ac:
                    27:76:8b:e3:91:21:14:ce:d7:2c:67:b8:3d:c3:0b:
                    c5:2c:bc:6a:fb:20:95:52:8c:f7:d7:7c:36:4a:d5:
                    b4:03:a1:6b:ba:e1:a7:37:2a:f4:29:cc:93:29:c0:
                    f2:0c:ee:2c:dc:e0:02:0f:91:e7:c0:df:a3:c5:6d:
                    91:d2:6e:7a:e6:5b:34:18:c6:0f:1e:90:41:22:05:
                    68:09:bb:61:35:cf:96:31:17:b2:4d:5e:0b:4b:43:
                    5b:eb:6f:5c:da:ba:7b:dc:e2:94:d2:f9:bd:ab:ca:
                    7d:1e:e7:dd:08:01:ce:3d:c8:42:c3:0e:ae:23:d3:
                    e8:4e:a7:31:09:e8:c7:6b:bc:10:50:31:1d:cc:47:
                    51:c8:74:ac:73:5b:32:28:a8:d7:c3:95:1f:29:73:
                    07:b5:82:3a:e6:2e:f3:de:8b:0a:81:73:bf:26:11:
                    7a:48:17:55:34:e0:41:a1:67:6b:b5:ac:56:50:cb:
                    cd:17:2a:96:28:7d:d1:55:6b:60:fb:32:0b:0a:26:
                    7d:1a:cd:ec:1d:1b:9e:b4:5e:29:31:7f:bf:c5:66:
                    40:a3:cd:56:63:2d:5d:c9:ab:1a:e3:f1:e8:57:c4:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:B7:AB:34:E6:7C:AC:69:25:91:15:4F:9B:50:78:FE:FB:14:68
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Leq3qzTmfKxpJZEVT5tQeP77FGg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:0f:b1:80:d5:0c:d3:61:19:10:55:10:fe:e8:a7:96:da:
         65:27:96:06:97:fc:b8:9e:fb:07:17:89:ad:ff:31:12:30:ff:
         7f:33:16:c4:10:53:02:3d:18:df:9a:1d:aa:b2:e3:40:9d:4c:
         fa:8a:fb:84:9c:80:2c:b9:f4:ab:b6:9a:ce:9e:35:ac:14:86:
         6b:72:af:5c:f8:8f:9c:b5:c8:c8:07:24:05:c5:2d:56:4a:6d:
         ec:45:9c:3a:b2:c4:0f:01:3a:6f:2a:21:1e:be:56:bc:92:a1:
         58:04:2f:64:9d:d7:47:d3:fa:c1:ee:05:f8:9a:ba:b6:8d:79:
         2b:8e:02:bd:80:33:8a:81:11:0b:92:33:b0:9e:26:44:3d:05:
         a2:8b:98:70:0a:1a:d8:2e:e2:ae:53:55:46:7f:08:d9:82:fa:
         c6:b2:bd:c9:9a:86:2d:31:55:40:91:84:78:79:f0:0e:cd:84:
         2c:8e:6c:44:20:21:54:b5:f5:86:70:6e:ba:c8:56:2c:1a:46:
         fa:be:48:8e:33:8f:f4:68:69:24:06:28:b7:30:d6:fa:ab:46:
         ba:dc:e5:c2:f0:11:fa:5b:f0:75:99:78:bd:68:63:ab:56:c6:
         ca:a1:1c:1a:33:ba:0a:0b:ed:3e:56:0a:83:ce:e9:c0:c1:8b:
         5e:a9:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:28 2026 by rpki-client