Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20267/lgsMgYnRhEJJiKsWWlwA0_rdRt8.roa
File:                     lgsMgYnRhEJJiKsWWlwA0_rdRt8.roa (raw, json)
Hash identifier:          j7M0Pe+WnptfPwNVZv2yar+glwg1d5/pGeiKchdpm54=
Subject key identifier:   96:0B:0C:81:89:D1:84:42:49:88:AB:16:5A:5C:00:D3:FA:DD:46:DF
Certificate issuer:       /CN=9206913B5F7754B8E1116F135D4A3B8F75959658
Certificate serial:       26
Authority key identifier: 92:06:91:3B:5F:77:54:B8:E1:11:6F:13:5D:4A:3B:8F:75:95:96:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/lgsMgYnRhEJJiKsWWlwA0_rdRt8.roa
Signing time:             Thu 04 Jun 2026 12:57:42 +0000
ROA not before:           Thu 04 Jun 2026 12:57:42 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     38647
IP address blocks:        160.25.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206913B5F7754B8E1116F135D4A3B8F75959658
        Validity
            Not Before: Jun  4 12:57:42 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=960B0C8189D184424988AB165A5C00D3FADD46DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:da:8a:1a:15:c0:36:f0:d1:5c:97:61:a5:
                    9f:55:49:77:ed:a8:1b:1c:04:cb:37:bc:06:c9:cd:
                    a4:e8:74:31:b3:01:0b:64:f7:d9:a9:60:0b:f0:d5:
                    c4:9a:db:01:19:e8:70:1a:a7:f2:0d:d8:cf:40:35:
                    01:04:ef:ac:e9:c0:ac:8a:1f:c0:cb:1e:a8:dc:fa:
                    e7:4e:93:5a:13:f5:98:a6:5b:9c:40:7f:76:58:70:
                    0e:1b:e2:9a:0b:a7:39:06:b7:16:a6:f4:25:86:37:
                    b2:9f:c9:73:9e:e9:91:c0:6f:c3:b2:37:9e:80:74:
                    c9:22:5d:2d:d0:a7:16:eb:d0:30:dd:a1:4a:22:f3:
                    ea:82:da:3a:c7:2e:f4:0d:19:08:18:52:14:68:74:
                    f7:db:19:03:5b:45:64:b4:e8:f8:c5:f5:7a:87:bf:
                    fe:ac:e8:fc:07:c8:51:18:74:2c:db:d0:41:2e:91:
                    fa:12:bc:69:fa:9d:d9:38:06:65:7f:91:27:19:29:
                    ce:2c:8c:ed:0b:a1:0b:e4:21:db:fc:34:6f:d9:89:
                    55:83:70:86:e5:4d:7c:3c:87:37:8d:6a:7c:8c:65:
                    16:31:dd:03:eb:be:50:e0:71:51:3c:f6:38:bc:56:
                    08:d2:b0:a5:a1:c4:dc:62:13:4f:31:30:d4:8e:be:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:0C:81:89:D1:84:42:49:88:AB:16:5A:5C:00:D3:FA:DD:46:DF
            X509v3 Authority Key Identifier:
                keyid:92:06:91:3B:5F:77:54:B8:E1:11:6F:13:5D:4A:3B:8F:75:95:96:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/lgsMgYnRhEJJiKsWWlwA0_rdRt8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:55:10:df:83:03:d5:4e:1c:d6:66:29:e7:56:71:43:a7:45:
         98:d4:b4:e4:0c:09:ff:61:a3:98:7d:b5:53:33:a7:53:45:e3:
         33:51:86:c2:44:8c:82:a0:e4:ea:46:01:ee:f3:3b:40:82:3a:
         a8:c0:6c:e8:cf:95:9d:b0:f7:f0:49:04:a4:bc:60:d3:c3:5d:
         83:9a:5c:65:18:f4:51:f2:8d:ec:6e:a2:c3:ed:74:e1:6d:65:
         c5:7e:b2:04:7d:5c:64:3f:9f:b1:41:5b:fc:77:57:bd:6c:ea:
         25:43:76:cd:93:1d:48:8a:a5:cd:e4:77:c0:32:8d:b7:f3:b0:
         53:d9:7a:87:78:f2:c1:d9:5e:fd:a8:09:b2:5c:17:74:f4:e0:
         a1:e9:6a:23:4c:46:c8:83:a8:d7:0a:e9:6e:61:0c:9c:36:92:
         f6:40:c6:23:6b:34:33:52:59:28:cb:68:85:34:57:e7:68:2a:
         05:5c:a8:f8:be:f9:a0:5f:85:28:54:79:4a:c9:0c:07:ff:be:
         10:5b:05:f6:4d:43:33:95:ae:6e:e1:e5:b5:5a:c7:e3:96:d6:
         40:0f:44:fa:ee:d9:83:bd:98:a8:d2:e3:df:af:10:13:c7:03:
         84:48:08:b9:52:6f:56:a4:9e:04:ef:ad:a5:fd:d2:a8:d1:6a:
         bf:78:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:56:47 2026 by rpki-client