Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa
File:                     LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa (raw, json)
Hash identifier:          E8b6/oHsZ3N6i3s6fhNzAxlR5QZ07SxqHkAIGUXMLnc=
Subject key identifier:   2E:0B:14:C7:22:25:1E:88:98:E0:A3:E4:E0:12:71:87:A5:05:C2:FB
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       41
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa
Signing time:             Tue 31 Mar 2026 08:34:36 +0000
ROA not before:           Tue 31 Mar 2026 08:34:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18121
IP address blocks:        180.94.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Mar 31 08:34:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2E0B14C722251E8898E0A3E4E0127187A505C2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:e9:e7:c8:b4:6f:7d:20:85:72:c6:10:02:
                    b3:66:e2:2a:42:8a:5c:85:22:dc:85:0c:a9:78:cf:
                    36:35:40:d1:e5:b6:81:68:3e:e4:91:f2:10:a8:14:
                    6c:96:b6:97:37:05:5a:ad:ac:37:a1:9b:ac:42:a2:
                    c7:e8:64:fe:ad:0b:00:b7:b6:e4:3f:2c:ee:4d:6c:
                    5f:bb:2d:50:25:6f:2d:46:72:c2:30:66:4e:55:d9:
                    d1:6c:50:6d:80:1b:69:42:cb:f0:03:bd:39:1c:28:
                    b5:44:5f:bf:b1:90:7c:03:1b:55:cc:8e:5e:67:ae:
                    33:8a:bd:2e:9e:87:b5:b6:43:75:f7:ca:97:46:d0:
                    59:54:d3:77:07:b7:1d:a7:b4:90:26:3b:a9:6c:5c:
                    fa:bb:ff:af:af:fe:09:1f:5d:b7:e2:61:3f:0c:8c:
                    98:f5:d8:21:21:41:df:2e:72:b4:22:43:b0:90:6c:
                    3f:36:27:91:fa:f3:20:1e:af:99:e9:29:8c:19:c5:
                    a3:db:62:90:4c:ee:49:83:0c:ee:d0:94:13:73:a3:
                    04:77:fb:4c:fd:4c:d2:eb:fe:14:6d:3f:b7:49:8f:
                    1b:8d:99:ff:23:41:d8:0e:6b:7b:d6:b6:fa:a9:84:
                    c2:90:ac:86:34:54:68:43:3d:63:bf:40:5a:92:f7:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:14:C7:22:25:1E:88:98:E0:A3:E4:E0:12:71:87:A5:05:C2:FB
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/LgsUxyIlHoiY4KPk4BJxh6UFwvs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:d0:fb:e8:8f:79:e9:17:18:53:61:2f:87:66:af:f5:c1:0b:
         d5:0b:4b:07:f2:f6:30:51:89:db:04:5c:07:8f:2e:21:ef:c3:
         ff:b9:06:72:3f:6b:4f:85:c9:ec:7d:5a:cc:19:15:ec:b1:a9:
         a5:b5:83:3f:ed:f5:e3:85:7f:ba:ee:e0:57:2f:c6:7b:d9:ea:
         d2:7a:cb:ed:e5:1d:2d:ae:a4:54:70:30:88:60:31:b8:7e:0a:
         79:c4:0e:97:87:64:59:3e:2d:c1:9b:b0:fb:c5:9c:58:86:9c:
         b2:32:7f:da:25:c1:24:1a:84:f4:bc:f3:ba:60:92:2f:42:36:
         b2:d6:2b:0f:21:79:85:53:a9:28:4f:3f:51:2b:20:e3:79:67:
         12:18:f7:5f:2e:d9:3c:76:4b:e5:55:17:bd:cf:e5:e7:c0:e5:
         c6:a8:59:f3:1c:39:66:d4:28:d4:89:0c:2d:e0:93:cb:c1:cd:
         6a:9d:c0:9b:93:a6:5c:29:40:ee:e7:ff:2b:2a:bd:ba:84:87:
         18:1b:5d:3b:36:a8:15:ef:96:b5:eb:b8:9c:30:73:dd:c3:5a:
         9c:8b:36:81:dc:fd:f4:a1:0a:66:8a:98:1b:48:67:3a:b7:fe:
         d3:28:9a:3e:af:06:3c:ef:dd:fe:98:f7:4a:87:2c:ad:d2:be:
         0a:53:78:b7
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI2MDMzMTA4
MzQzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkUwQjE0QzcyMjI1MUU4
ODk4RTBBM0U0RTAxMjcxODdBNTA1QzJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK0H6efItG99IIVyxhACs2biKkKKXIUi3IUMqXjPNjVA0eW2gWg+
5JHyEKgUbJa2lzcFWq2sN6GbrEKix+hk/q0LALe25D8s7k1sX7stUCVvLUZywjBm
TlXZ0WxQbYAbaULL8AO9ORwotURfv7GQfAMbVcyOXmeuM4q9Lp6HtbZDdffKl0bQ
WVTTdwe3Hae0kCY7qWxc+rv/r6/+CR9dt+JhPwyMmPXYISFB3y5ytCJDsJBsPzYn
kfrzIB6vmekpjBnFo9tikEzuSYMM7tCUE3OjBHf7TP1M0uv+FG0/t0mPG42Z/yNB
2A5re9a2+qmEwpCshjRUaEM9Y79AWpL37YsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQuCxTHIiUeiJjgo+TgEnGHpQXC+zAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC83MTMvTGdzVXh5SWxIb2lZNEtQazRCSnhoNlVGd3ZzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7Re0DANBgkqhkiG9w0BAQsFAAOCAQEA
z9D76I956RcYU2Evh2av9cEL1QtLB/L2MFGJ2wRcB48uIe/D/7kGcj9rT4XJ7H1a
zBkV7LGppbWDP+3144V/uu7gVy/Ge9nq0nrL7eUdLa6kVHAwiGAxuH4KecQOl4dk
WT4twZuw+8WcWIacsjJ/2iXBJBqE9LzzumCSL0I2stYrDyF5hVOpKE8/USsg43ln
Ehj3Xy7ZPHZL5VUXvc/l58DlxqhZ8xw5ZtQo1IkMLeCTy8HNap3Am5OmXClA7uf/
Kyq9uoSHGBtdOzaoFe+Wteu4nDBz3cNanIs2gdz99KEKZoqYG0hnOrf+0yiaPq8G
PO/d/pj3SocsrdK+ClN4tw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:18 2026 by rpki-client