Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lEVI_72GYtGnfAoJ3koNXfhgeQk.roa
File:                     lEVI_72GYtGnfAoJ3koNXfhgeQk.roa (raw, json)
Hash identifier:          57Tk1e0S42RV6W8CSsbJb4LwfI+FkOaO9a/UxkSGem8=
Subject key identifier:   94:45:48:FF:BD:86:62:D1:A7:7C:0A:09:DE:4A:0D:5D:F8:60:79:09
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01D2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lEVI_72GYtGnfAoJ3koNXfhgeQk.roa
Signing time:             Tue 31 Mar 2026 07:39:46 +0000
ROA not before:           Tue 31 Mar 2026 07:39:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        223.132.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=944548FFBD8662D1A77C0A09DE4A0D5DF8607909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:4f:e1:e2:f5:cb:14:6d:2b:a9:6a:41:c4:
                    6f:83:fd:b8:48:a9:5b:38:bb:af:6a:41:53:56:43:
                    b3:23:2f:08:95:f5:48:d5:96:ba:f1:3a:36:c6:e9:
                    58:32:9e:04:9c:64:cb:9f:b5:1a:d9:df:ad:b8:b7:
                    a8:41:14:f7:83:44:6b:79:14:a5:02:3b:34:58:50:
                    7d:3f:64:d0:be:86:ca:4e:5c:42:c4:62:53:c3:20:
                    03:50:e9:16:a4:f5:f7:9f:d8:07:49:f8:e3:06:6f:
                    ff:04:f7:c0:d7:f9:a9:ab:47:6c:3d:8e:9a:ab:27:
                    b1:38:da:09:7f:6f:5c:f7:d9:2e:17:ec:09:8b:50:
                    b6:4f:7d:ee:88:96:87:f1:03:ce:2d:75:44:f0:b2:
                    63:75:a8:11:17:30:ea:e4:41:4f:35:19:90:81:3c:
                    1c:37:2d:68:be:7d:1f:84:d7:2a:6e:b4:f2:11:01:
                    4c:14:9b:1a:2e:7b:1f:01:1f:3d:08:72:2c:b6:1a:
                    e2:7f:b0:dd:8f:94:46:45:e0:b7:20:f3:c6:9b:5a:
                    ad:8b:53:54:26:36:84:d9:d6:0d:86:18:43:d0:e0:
                    1d:79:57:a1:6d:00:25:81:2b:91:04:d8:5b:2e:fa:
                    5f:47:04:de:9b:9d:ea:c8:d2:3f:6a:72:19:ac:fd:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:48:FF:BD:86:62:D1:A7:7C:0A:09:DE:4A:0D:5D:F8:60:79:09
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lEVI_72GYtGnfAoJ3koNXfhgeQk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:00:30:22:9a:d7:8d:9e:58:49:c1:2e:ee:17:47:a7:ee:
         91:13:fd:a2:cc:c7:b2:1d:5e:aa:22:77:af:b0:8d:d7:d1:f9:
         eb:b4:fc:aa:a7:cb:06:cc:7d:3e:c4:21:b6:85:38:80:cd:d6:
         5f:c2:85:a7:d5:f9:0d:a3:86:cf:2a:c5:50:f7:19:b8:91:fa:
         c4:4f:cc:d0:1c:93:93:f1:60:15:ef:8b:44:3d:53:ca:dd:d6:
         1e:0c:18:04:05:5e:c8:ac:69:a7:21:50:5f:ac:1e:7e:00:33:
         71:c1:63:14:1c:e1:77:61:03:c5:3d:61:41:5b:ef:aa:49:c6:
         db:ad:2d:b3:b6:cf:50:c3:35:21:b3:94:dc:f2:5b:aa:98:2c:
         81:5f:83:4d:04:f5:c9:58:ab:01:d8:f0:38:62:75:dc:10:35:
         fd:f5:9f:bb:3d:ea:1c:34:6a:b5:ee:4c:10:cb:fd:05:05:9b:
         e7:cf:64:b5:de:df:f1:08:28:a3:11:9d:24:2c:1c:17:4c:46:
         af:62:ac:a4:4b:84:8c:f4:ed:b9:33:28:f5:1d:36:75:e7:f0:
         2e:74:14:41:b1:08:2c:f5:ba:44:3d:51:90:bd:a4:f1:42:b9:
         ba:21:fb:aa:3d:d9:d6:2f:e3:d4:7f:2d:0f:49:5f:29:bf:e2:
         26:9d:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:26 2026 by rpki-client