Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa
File:                     lzBKzRcUeQd_pdVF0007EPJNoKE.roa (raw, json)
Hash identifier:          Yccps3I0qaDpTzpKK1vwBnk62rNO+AlYGNbWlZQlSa8=
Subject key identifier:   97:30:4A:CD:17:14:79:07:7F:A5:D5:45:D3:4D:3B:10:F2:4D:A0:A1
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       73
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa
Signing time:             Thu 05 Nov 2026 01:22:29 +0000
ROA not before:           Thu 05 Nov 2026 01:22:29 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        218.228.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 17:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Nov  5 01:22:29 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=97304ACD171479077FA5D545D34D3B10F24DA0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:8a:3c:16:d5:8d:8f:19:d4:a5:7c:24:8e:
                    ed:ab:90:2c:d8:65:71:4d:6e:28:68:5b:b3:d2:70:
                    eb:8a:f6:1b:e6:8b:9b:d3:9b:94:dc:6b:0e:ac:1f:
                    37:f2:eb:77:62:ef:36:6f:84:45:70:f3:a1:0b:44:
                    b3:e4:cb:b2:d9:29:2e:55:31:4a:41:80:c4:c6:a6:
                    e2:67:e5:f3:b2:41:5f:a8:d6:d0:50:1d:dd:3f:a5:
                    5c:18:37:83:9a:44:52:0b:0b:df:0a:c9:0f:bc:67:
                    b4:fd:8f:e6:a4:21:e6:1d:14:02:b2:c7:bb:15:c0:
                    39:71:2f:ff:3e:bb:7a:00:ea:01:4f:14:43:19:c4:
                    45:10:9c:1a:79:2c:92:ba:ff:90:82:2f:02:1b:2d:
                    34:e3:91:20:fd:c9:ba:4a:e8:94:15:18:20:b3:9f:
                    46:34:46:64:05:29:0d:49:8f:9e:54:ac:72:74:cb:
                    7c:a1:a5:90:6d:24:85:40:0f:e7:2e:d4:2d:bb:b1:
                    d4:cd:33:46:55:3b:7d:79:df:58:39:9e:c9:88:97:
                    db:cd:c6:ae:ff:b5:70:f7:51:0f:01:a7:34:2b:61:
                    ff:50:9e:e7:5f:7a:05:7a:eb:17:44:17:a0:30:0b:
                    28:9d:1e:d2:8e:11:bc:46:31:a3:8b:87:0f:f2:de:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:4A:CD:17:14:79:07:7F:A5:D5:45:D3:4D:3B:10:F2:4D:A0:A1
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/lzBKzRcUeQd_pdVF0007EPJNoKE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:44:eb:1d:fc:b7:bc:c4:39:e8:47:69:62:14:7f:14:e0:f7:
         62:4c:c4:04:18:19:f1:0f:18:7d:1d:0f:d8:b0:61:46:fc:a2:
         c5:a0:71:ac:ae:dd:15:01:cf:05:9e:62:0d:ff:b3:29:45:b2:
         ad:04:f6:4e:62:96:7b:b5:36:a3:57:72:30:cf:93:78:20:01:
         51:68:6f:d9:b7:28:4e:c7:44:74:93:b5:48:8f:f7:2f:e9:6b:
         d3:01:8b:12:30:13:38:24:16:25:ee:bb:8c:79:26:c9:39:83:
         8c:f6:64:18:e0:e9:6e:e5:17:2e:9d:d1:69:ba:8a:06:3f:95:
         5a:ee:5e:25:2c:04:07:32:f6:a1:69:35:8f:3d:5c:21:cd:a7:
         21:0e:b2:ac:d9:57:b5:51:9c:bc:c5:89:c2:38:5a:43:dc:2a:
         00:e4:2a:22:9b:9f:db:16:7c:c7:d2:ae:1d:24:33:c6:77:ce:
         8a:82:8b:80:88:bd:a3:c8:2c:96:d3:49:da:d9:07:67:26:95:
         7e:76:90:e3:06:76:a7:18:87:d2:c9:79:ce:33:77:66:1e:70:
         da:eb:a8:d1:cf:dd:09:1d:c6:ca:31:f5:15:c5:b6:54:a1:23:
         96:ca:2e:cf:2a:27:90:56:55:d6:ce:bd:b9:51:cc:b5:e5:90:
         f0:72:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:51 2026 by rpki-client