Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/880/KCQOgWs3D5K1TuNMoOvk91-lemk.roa
File:                     KCQOgWs3D5K1TuNMoOvk91-lemk.roa (raw, json)
Hash identifier:          6v7WTVLO+/dVl6A8MemjCWDZp0g4CSjBah59Y/j8h8s=
Subject key identifier:   28:24:0E:81:6B:37:0F:92:B5:4E:E3:4C:A0:EB:E4:F7:5F:A5:7A:69
Certificate issuer:       /CN=500DB610F976599E25BA70B3F016F53709FBAD78
Certificate serial:       54
Authority key identifier: 50:0D:B6:10:F9:76:59:9E:25:BA:70:B3:F0:16:F5:37:09:FB:AD:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/KCQOgWs3D5K1TuNMoOvk91-lemk.roa
Signing time:             Sun 12 Apr 2026 00:19:27 +0000
ROA not before:           Sun 12 Apr 2026 00:19:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58650
IP address blocks:        157.250.240.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500DB610F976599E25BA70B3F016F53709FBAD78
        Validity
            Not Before: Apr 12 00:19:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=28240E816B370F92B54EE34CA0EBE4F75FA57A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:dd:e6:24:ab:4e:01:ba:af:19:40:a5:f9:
                    95:83:81:1e:1a:a4:8a:82:9e:f9:e3:04:76:68:6c:
                    d8:e0:51:83:eb:16:48:f3:04:85:4c:eb:2a:08:0f:
                    7c:1c:af:24:73:ab:bc:43:1a:34:2f:46:e5:76:e2:
                    e5:7c:cc:89:96:82:61:51:fe:9f:e6:cd:34:d5:b2:
                    0b:c3:e2:3c:0f:7f:00:64:4b:0a:3a:b7:de:55:5a:
                    13:a4:34:c7:b4:06:1c:78:ef:b5:ab:29:70:5b:61:
                    f9:64:1c:80:b3:0c:13:55:5c:89:f3:6a:f9:5d:d5:
                    72:fd:47:4f:06:be:f2:35:a6:fb:8c:c1:4d:da:2f:
                    75:0b:5e:9f:b5:00:40:15:8d:3b:cb:68:f5:8f:e4:
                    60:7c:67:60:5a:e9:9f:8b:f6:e3:88:ec:1d:7a:09:
                    b1:5a:a4:c9:a0:9c:0d:b8:a3:be:4f:ed:00:9f:e5:
                    86:b7:9a:0d:69:f2:bb:b2:0f:ef:a8:a0:ff:18:cd:
                    f5:80:d5:f1:a1:ad:7f:f2:4a:55:4e:e0:96:26:7c:
                    2c:8b:68:bd:df:60:8d:36:2f:7a:7e:80:0e:c7:43:
                    5c:02:8f:c5:39:b9:f4:e2:ae:c6:3c:de:8d:4c:a2:
                    09:94:6a:87:a1:0f:49:bc:ce:c5:29:a0:94:97:8f:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:0E:81:6B:37:0F:92:B5:4E:E3:4C:A0:EB:E4:F7:5F:A5:7A:69
            X509v3 Authority Key Identifier:
                keyid:50:0D:B6:10:F9:76:59:9E:25:BA:70:B3:F0:16:F5:37:09:FB:AD:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA22EPl2WZ4lunCz8Bb1Nwn7rXg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/KCQOgWs3D5K1TuNMoOvk91-lemk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.250.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:06:b4:ce:32:44:65:63:f1:50:4e:d1:ea:47:8d:38:15:fa:
         99:93:7b:bc:bf:a4:a5:dc:06:22:54:c1:85:9d:aa:c5:7b:52:
         8f:52:f2:e5:7b:58:81:b3:f6:35:3b:66:d4:6d:8b:86:45:e5:
         36:e4:2f:88:92:ef:c6:3d:66:6c:e5:4a:47:b4:d2:2e:71:dd:
         cf:36:ef:ba:82:09:5e:45:eb:1d:35:39:40:eb:e9:5c:ae:28:
         49:e3:dd:93:f2:9b:11:56:a8:5f:d5:67:5e:ce:04:61:f2:2b:
         9d:9f:be:49:05:e4:49:32:2c:7d:8a:17:12:c6:a4:14:39:fe:
         06:04:10:7e:20:03:ef:5b:4c:3b:d1:23:9e:bc:c3:d8:14:c3:
         3d:c6:cb:a9:4b:75:38:2c:c9:a8:f6:c6:78:f9:23:06:19:62:
         a0:25:6e:cf:8f:d3:70:0b:73:9f:f9:3e:e9:74:03:0b:c3:fc:
         4a:4b:13:6f:ae:54:17:76:72:9e:35:09:d6:b9:0c:1a:c8:83:
         4f:ac:81:c9:a4:d8:2b:16:ca:b5:bd:ab:7a:cf:8e:94:84:1c:
         fd:d4:c0:b3:f2:55:ec:a5:67:15:73:07:80:01:ea:85:12:38:
         c3:20:9d:ee:e4:3d:bb:c6:66:6e:05:b2:f8:a1:47:0b:8d:4a:
         2c:3b:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:57 2026 by rpki-client