Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/lkY6AxkWJqXNopJv10Q27k2lxX8.roa
File:                     lkY6AxkWJqXNopJv10Q27k2lxX8.roa (raw, json)
Hash identifier:          8WSMVuoSpfUM38yc8fO3qvCjyajfQ/oRh7zcX5Xmc9g=
Subject key identifier:   96:46:3A:03:19:16:26:A5:CD:A2:92:6F:D7:44:36:EE:4D:A5:C5:7F
Certificate issuer:       /CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Certificate serial:       6B
Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/lkY6AxkWJqXNopJv10Q27k2lxX8.roa
Signing time:             Tue 31 Mar 2026 07:29:09 +0000
ROA not before:           Tue 31 Mar 2026 07:29:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7667
IP address blocks:        192.26.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451
        Validity
            Not Before: Mar 31 07:29:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=96463A03191626A5CDA2926FD74436EE4DA5C57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:86:96:38:b0:bc:50:04:42:4a:9e:7a:dd:
                    b9:f1:cf:99:62:c6:18:2a:da:12:83:aa:49:ef:4f:
                    8b:1e:b3:8a:0a:1a:65:2d:98:8e:5c:c0:83:88:2d:
                    24:26:b6:85:c8:88:74:e2:e9:41:86:ff:19:2d:d9:
                    6b:41:90:cf:14:72:92:91:c7:c5:db:ab:79:7d:db:
                    26:59:ac:ba:5b:24:cb:e4:10:c4:cd:cb:42:e1:ba:
                    c7:67:15:e7:89:69:21:44:36:c8:e6:69:db:39:1f:
                    53:63:89:d2:58:b4:19:ae:16:13:6e:c5:ab:8d:e1:
                    f0:19:6a:76:94:c7:8e:52:2f:f7:69:42:8c:92:df:
                    41:d9:be:d8:cb:81:5b:e7:81:85:fb:18:3c:18:49:
                    85:a6:70:f4:97:08:96:1d:a0:9f:41:10:2c:ad:de:
                    1e:a5:c8:e7:cb:32:09:c9:fa:d6:46:a1:df:68:73:
                    21:69:b6:a3:75:2e:d0:54:fd:cb:ae:fc:56:e9:47:
                    28:cd:f9:49:62:62:bd:79:29:c8:8d:aa:ca:4d:cc:
                    71:1f:ec:52:6d:72:63:26:c9:17:8f:94:25:93:1b:
                    a1:8b:34:76:85:f9:83:2e:66:33:b9:eb:18:46:b1:
                    39:14:6b:c7:11:7e:af:81:d3:ed:4e:d6:26:83:4c:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:3A:03:19:16:26:A5:CD:A2:92:6F:D7:44:36:EE:4D:A5:C5:7F
            X509v3 Authority Key Identifier:
                keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/lkY6AxkWJqXNopJv10Q27k2lxX8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:0f:49:c5:a2:82:83:a1:d0:c2:4f:a5:a9:22:09:78:13:
         84:92:83:97:bf:af:07:5b:04:be:d4:5a:7e:32:32:f3:2f:8f:
         57:de:72:c3:df:71:a9:78:0e:98:a3:93:17:86:66:c9:2f:2e:
         89:5d:7e:e1:12:2b:c6:95:3e:c2:27:fc:97:d0:4e:b0:09:78:
         1e:04:0d:45:0a:16:74:8f:69:3c:22:0d:40:8c:f8:a3:46:9e:
         80:17:79:67:91:dd:e5:b2:42:4c:42:28:11:a0:78:97:94:5a:
         f8:b4:0e:5e:82:23:72:04:e1:a5:03:5e:8f:6d:c8:ea:3b:fc:
         df:1b:a0:38:7c:cf:39:69:8e:0e:b5:6b:78:47:69:3e:be:da:
         c9:ac:21:b7:f1:89:91:c7:46:32:0e:fe:38:2d:8f:b3:c7:04:
         bc:ff:70:09:e7:51:2a:db:56:7f:f1:2f:3b:cd:df:e6:51:bc:
         35:62:17:db:4f:32:11:67:7f:e6:95:55:12:50:42:31:6c:97:
         55:ce:84:64:07:87:e2:9f:c6:52:92:98:2b:94:52:6d:80:0b:
         33:73:32:36:96:9c:44:26:5b:8e:8f:b2:49:b0:d5:64:ec:f8:
         bb:e8:79:6f:11:00:cf:35:66:96:df:a9:50:2f:c9:e5:64:dd:
         4a:0d:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:28 2026 by rpki-client