Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/lFC0FAHYTF7WMWG2n8PWTy0NL60.roa
File:                     lFC0FAHYTF7WMWG2n8PWTy0NL60.roa (raw, json)
Hash identifier:          +/uHBxjYZ5AKQQpppocYxXhu92EjamE/XCPrWsM1ijs=
Subject key identifier:   94:50:B4:14:01:D8:4C:5E:D6:31:61:B6:9F:C3:D6:4F:2D:0D:2F:AD
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       57
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/lFC0FAHYTF7WMWG2n8PWTy0NL60.roa
Signing time:             Thu 25 Jun 2026 13:06:56 +0000
ROA not before:           Thu 25 Jun 2026 13:06:56 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:06:56 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=9450B41401D84C5ED63161B69FC3D64F2D0D2FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:ac:cd:df:a4:ea:59:99:82:88:18:84:31:
                    d8:09:9b:4a:b6:16:8d:01:31:51:2d:4d:8d:7b:ef:
                    50:1b:32:86:76:04:da:0d:c5:6f:d8:04:09:36:af:
                    bf:65:c8:c8:37:4a:ec:4a:41:10:1e:44:d0:16:eb:
                    5f:32:37:5a:2f:e7:80:29:4f:bd:c4:63:c3:68:19:
                    c6:61:22:0b:1a:06:34:e8:e9:80:a5:ef:1c:ca:0d:
                    19:07:1a:31:d2:4f:25:b7:61:b3:07:88:45:ef:72:
                    38:f1:f6:3a:fb:69:dd:89:fb:d3:78:0d:77:de:20:
                    02:a7:a1:93:d4:47:a2:8e:f3:82:b5:68:9b:0a:34:
                    40:24:03:b6:2b:dd:6a:af:be:e5:a3:16:82:2b:f8:
                    70:d3:5b:4d:68:69:dd:5b:91:a3:e1:12:25:0a:c0:
                    40:75:44:80:52:aa:47:a8:20:99:cc:a4:f5:af:71:
                    26:4a:83:97:bb:2f:49:48:e0:b1:77:9b:0c:39:41:
                    d9:8a:f5:f7:2a:51:c7:1a:17:e0:e1:17:a9:51:d2:
                    db:73:d6:b2:32:55:d9:8b:6f:af:a7:af:d7:f2:e1:
                    ae:4d:b8:bd:4a:b2:1e:2a:4a:11:91:a3:5a:36:6a:
                    d1:b6:71:23:d6:31:40:3a:3a:e8:06:05:78:9a:fc:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:B4:14:01:D8:4C:5E:D6:31:61:B6:9F:C3:D6:4F:2D:0D:2F:AD
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/lFC0FAHYTF7WMWG2n8PWTy0NL60.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:59:c0:99:1d:a3:e5:03:cb:9c:89:06:30:cd:90:42:2b:
         e6:6a:5a:48:bc:c6:ca:22:f3:ff:ea:30:23:4d:0e:27:f0:1a:
         cb:61:55:a7:99:d6:61:08:5d:a7:d0:ad:77:12:89:24:4a:38:
         3d:e2:38:fa:21:70:33:10:f6:66:ba:c7:15:9d:e1:62:65:9a:
         93:9b:0b:c9:9e:8d:47:ac:28:53:0b:46:13:ad:38:12:13:cb:
         50:51:d4:04:7f:0c:41:3c:a0:15:c8:ca:0e:4c:59:b6:b9:73:
         47:ee:56:b5:5f:3f:ba:b1:b4:07:f6:10:05:bf:52:bd:85:09:
         83:9b:09:46:f8:2d:86:52:ca:cc:7f:5b:af:a2:91:28:ed:e3:
         93:b9:c0:6c:36:74:a5:97:55:4c:72:9f:4e:47:fa:3e:c7:87:
         ab:da:9e:96:3e:cf:7f:55:d3:b3:d3:be:73:59:7c:0b:66:70:
         06:fd:ea:2d:dc:41:6a:a3:c3:ab:bd:83:3a:03:32:0c:42:fe:
         f5:9d:cd:4b:bb:1f:5f:8f:99:9b:ff:0a:70:6e:c0:39:c7:9d:
         46:5e:e1:91:e2:54:35:53:d3:96:67:94:21:49:1e:94:05:5f:
         e8:b8:17:6d:67:aa:34:4f:a9:5d:5a:76:17:eb:24:09:8d:04:
         2c:9c:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:29 2026 by rpki-client