Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/LSVHIKeas_O9Q7erfmX1doIku-I.roa
File:                     LSVHIKeas_O9Q7erfmX1doIku-I.roa (raw, json)
Hash identifier:          7MKGxAa5VaOwcAh2mZhrWJjNFK+IQ2BGDgOu7R9Ui1g=
Subject key identifier:   2D:25:47:20:A7:9A:B3:F3:BD:43:B7:AB:7E:65:F5:76:82:24:BB:E2
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       B7
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LSVHIKeas_O9Q7erfmX1doIku-I.roa
Signing time:             Tue 31 Mar 2026 07:33:10 +0000
ROA not before:           Tue 31 Mar 2026 07:33:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        219.100.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2D254720A79AB3F3BD43B7AB7E65F5768224BBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:7e:e1:75:58:2d:7a:a3:b6:63:31:38:5b:
                    72:ac:70:29:83:20:70:0e:77:4f:f5:43:33:a2:3c:
                    d1:85:0a:03:32:9d:cf:f1:e9:63:d2:9a:dd:51:b2:
                    f0:0b:9a:ad:4e:f6:1a:a6:24:df:ef:55:df:1b:7c:
                    16:df:1e:30:13:93:b4:bf:71:00:29:37:30:be:06:
                    80:39:41:8d:11:50:dc:86:ef:7a:a6:bc:9e:45:ac:
                    87:fb:70:49:3e:e8:24:58:f5:d6:cf:0c:4f:63:da:
                    b4:ea:83:24:6a:da:4d:5d:cd:06:ed:38:38:e5:fd:
                    89:08:8f:bd:9f:29:70:f7:06:4a:f9:f7:dc:b1:83:
                    bc:4d:62:71:39:57:d5:54:74:bd:a7:a1:cf:f6:a2:
                    03:c2:c3:5c:2b:10:74:1a:24:ab:6b:f1:bf:e1:06:
                    be:b6:ee:44:f6:b5:11:39:00:c6:73:a7:d9:a3:89:
                    fe:82:98:4e:8c:7d:3f:e1:fb:74:c4:49:9e:2a:47:
                    c5:37:55:58:a6:d5:67:ec:a6:72:fb:7a:3d:db:63:
                    0c:f3:48:a7:b1:a2:99:c5:92:94:9b:3a:e0:36:a8:
                    e5:fd:93:6d:5c:ab:15:10:0a:e2:cc:07:55:84:f2:
                    df:75:22:95:13:5f:e7:ff:e5:7e:c5:2a:ee:e0:f3:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:25:47:20:A7:9A:B3:F3:BD:43:B7:AB:7E:65:F5:76:82:24:BB:E2
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/LSVHIKeas_O9Q7erfmX1doIku-I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:02:0d:7f:94:ba:e1:7c:8c:ab:37:45:0c:0e:1f:fb:52:
         75:ee:6a:fe:ce:f8:f6:e3:75:f6:73:9d:78:69:61:ea:0a:e2:
         6c:cb:a4:34:65:0e:73:a6:75:c4:1f:8f:4e:a3:bf:e9:e0:7b:
         4a:98:f6:8a:b2:cb:ef:24:31:00:a5:84:db:2a:d1:6f:92:be:
         16:e4:27:25:47:2b:e6:e1:93:09:b6:a6:63:04:bd:5c:d0:09:
         7a:1c:f3:ef:be:9b:c5:60:14:b0:40:c6:a7:46:64:d5:fc:92:
         2c:0f:bc:f3:66:49:af:ce:c7:fd:a1:6a:09:71:c4:05:9c:d2:
         5c:c1:6e:c6:51:cf:2d:87:b3:06:33:9f:2f:66:fc:78:a8:0b:
         ed:3c:08:3f:70:1a:f7:df:e4:4d:35:94:4f:76:aa:1e:9b:fc:
         45:8a:b4:82:3c:6b:da:b5:4d:ef:df:3c:27:d4:35:ab:bc:f4:
         d7:56:95:1c:a8:ad:20:dc:ae:20:28:1d:e5:aa:3f:93:a6:e4:
         b7:20:0c:b4:00:ef:2e:5d:60:3d:e2:60:49:1a:4f:0d:2e:b4:
         c5:6c:66:ab:db:95:83:7a:87:af:8e:a8:62:12:c2:b1:1d:05:
         e6:55:02:9e:5a:09:2b:2f:36:80:0b:19:19:42:fb:3f:e2:a8:
         e1:56:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:22 2026 by rpki-client