Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/lmjHQIhfSxZLpQVEbs8F7aakSCY.roa
File:                     lmjHQIhfSxZLpQVEbs8F7aakSCY.roa (raw, json)
Hash identifier:          tmi2bpLuJbaTq62qa+JIO92x3htBDeD4uCH540Ck9yQ=
Subject key identifier:   96:68:C7:40:88:5F:4B:16:4B:A5:05:44:6E:CF:05:ED:A6:A4:48:26
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       92
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/lmjHQIhfSxZLpQVEbs8F7aakSCY.roa
Signing time:             Mon 27 Jul 2026 06:44:28 +0000
ROA not before:           Mon 27 Jul 2026 06:44:28 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        122.222.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 27 06:44:28 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=9668C740885F4B164BA505446ECF05EDA6A44826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:f1:c6:7d:f8:e9:db:22:57:59:48:8f:40:
                    ec:ca:63:b5:77:3c:51:ea:16:35:20:02:62:2c:af:
                    ec:07:52:b7:6f:30:a2:9f:cd:ef:9e:bf:b3:c4:6a:
                    3f:f2:53:54:ab:16:a6:30:98:d3:8f:02:43:91:79:
                    5a:78:8e:f7:95:a6:a0:bf:cc:07:56:01:c7:06:bb:
                    fe:cb:7a:09:07:ce:91:5d:55:94:81:e1:a4:41:4e:
                    28:a1:62:57:0a:06:f7:db:95:eb:bd:96:d4:4f:a9:
                    92:92:53:ce:57:20:40:66:78:c4:7f:eb:e5:3c:82:
                    3c:74:72:42:7d:b7:b8:a8:97:32:2e:a1:7c:97:f1:
                    be:44:27:17:e1:ca:9e:6b:b5:91:ff:cf:83:82:99:
                    a9:68:c0:56:a9:64:02:f7:92:0e:19:5e:f9:66:f7:
                    93:83:bf:11:b2:a9:b3:63:b1:9b:db:50:23:a7:c5:
                    f2:cc:ad:64:3b:9e:0c:2e:61:44:75:4c:0d:61:c4:
                    8e:11:6a:71:9e:c9:a4:d6:1e:6b:30:ec:65:92:67:
                    64:a9:05:87:d7:59:00:e0:45:ff:39:34:b2:09:8f:
                    a6:b2:15:ae:95:4b:83:71:9a:2e:05:0a:cd:95:0a:
                    89:97:3f:3f:d1:ca:9f:fe:0b:2c:1b:1d:89:e5:4a:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:C7:40:88:5F:4B:16:4B:A5:05:44:6E:CF:05:ED:A6:A4:48:26
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/lmjHQIhfSxZLpQVEbs8F7aakSCY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:ca:4a:a9:ef:8c:91:0d:e4:cf:8e:c3:71:c7:6e:b6:29:
         db:d9:c7:52:49:57:f0:9a:cb:77:f7:f9:d4:bf:92:c0:06:93:
         9f:f3:3d:a4:d0:7b:08:8f:c0:31:fc:17:c1:e4:1f:a0:c8:59:
         31:98:f4:c7:ea:13:d7:40:14:92:d7:43:d6:e5:b8:97:cf:39:
         82:d3:be:84:b6:88:e5:30:6c:41:e8:bb:10:3e:50:10:74:49:
         66:01:9c:a2:2a:81:0f:65:1f:a6:55:a9:c6:f8:b8:8c:7f:45:
         c6:d3:10:bb:c6:47:30:d4:c1:5a:bd:a9:d5:65:16:a7:27:83:
         b8:fd:57:7c:99:41:ca:be:83:72:24:4f:c7:8c:f9:f6:fa:28:
         07:2c:20:9c:0f:7e:bf:42:47:fc:d1:88:d0:e0:81:91:73:f5:
         82:0e:55:17:94:e6:98:b1:54:94:15:2c:d0:37:48:2c:b8:d1:
         c8:e2:5d:26:e9:f4:e1:bd:32:92:67:d1:79:4f:a9:18:29:37:
         26:74:aa:af:73:ec:a4:47:30:a3:f1:0e:01:fd:a0:62:4c:05:
         b9:53:82:7c:4e:7b:11:39:e2:3a:01:e9:41:8a:87:19:49:b7:
         0f:24:5a:ed:f9:65:7f:0e:c6:07:36:fd:4f:c1:a0:73:96:6d:
         1f:1b:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:52 2026 by rpki-client