Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/LNsFvBcEgtwukfFT_mjg2uM-95U.roa
File:                     LNsFvBcEgtwukfFT_mjg2uM-95U.roa (raw, json)
Hash identifier:          AxVQPPOkzRrT8m8CxvmN3Ixw09YDIYmnGSt7fnD1h0g=
Subject key identifier:   2C:DB:05:BC:17:04:82:DC:2E:91:F1:53:FE:68:E0:DA:E3:3E:F7:95
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       C2
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LNsFvBcEgtwukfFT_mjg2uM-95U.roa
Signing time:             Tue 31 Mar 2026 07:27:18 +0000
ROA not before:           Tue 31 Mar 2026 07:27:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2CDB05BC170482DC2E91F153FE68E0DAE33EF795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:ab:97:8b:f0:01:ab:0e:eb:08:5d:05:b9:
                    00:d3:35:ab:3c:13:c0:bb:55:9c:76:a3:70:3f:6b:
                    b8:88:8e:26:dd:dc:91:f4:c2:78:29:df:42:d3:a9:
                    54:c7:6a:3d:cc:9c:e6:f9:89:83:51:04:8f:48:ab:
                    91:ce:8e:91:2f:fe:65:43:7e:d8:7b:a7:2f:29:fe:
                    c5:fa:77:60:77:c5:f5:aa:71:bf:7e:9c:92:c6:e9:
                    37:64:bd:48:29:c9:dd:53:6d:6e:39:c6:cf:8c:53:
                    1d:d3:53:89:42:4c:07:a2:f8:36:c4:56:57:dc:ce:
                    7f:0f:77:f4:a6:ac:f1:ac:3c:46:5d:e8:cd:c7:32:
                    33:69:ac:67:11:03:91:73:0b:cc:e2:11:15:df:6c:
                    2a:a6:84:6c:e7:d9:ab:c6:9e:be:a1:3c:d9:31:32:
                    4e:ad:37:bd:9c:75:d2:ee:eb:e1:bc:94:44:a2:e9:
                    66:00:de:6d:fc:da:9a:02:0c:60:de:6f:fc:10:fa:
                    a9:3e:cd:d0:3a:9b:1a:28:aa:0c:5e:22:22:f9:ca:
                    6d:2d:77:69:fe:45:63:b8:41:bb:42:88:f5:74:40:
                    a5:9c:88:38:96:6a:4d:f0:82:8c:af:bd:56:f6:88:
                    e7:e5:07:10:63:3a:23:6a:c9:d2:42:38:18:25:ee:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:05:BC:17:04:82:DC:2E:91:F1:53:FE:68:E0:DA:E3:3E:F7:95
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LNsFvBcEgtwukfFT_mjg2uM-95U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:f6:43:33:be:55:46:78:27:07:40:d7:84:8d:77:39:5c:
         74:bd:d2:62:b9:ff:b9:d8:86:4a:86:0a:0f:18:69:91:0b:18:
         ba:0d:a5:7c:4f:ed:ab:32:13:75:3c:a6:c8:4d:66:d6:06:ce:
         31:d2:3a:fe:62:ab:7f:98:86:a9:4c:2d:21:6b:8f:75:a3:13:
         d1:75:df:3b:4b:19:de:93:df:ee:11:1d:6d:12:02:20:d2:36:
         0b:cb:63:b4:c4:64:75:b4:93:cb:10:ff:68:15:d6:91:2d:38:
         b2:dc:42:91:7c:19:65:df:47:63:36:04:4a:d4:e3:2e:8c:e1:
         60:b9:ec:e4:19:14:7f:78:93:73:f7:6d:70:6b:70:87:8b:08:
         be:75:c0:8c:1e:2a:71:12:b5:4c:03:c6:cf:e5:95:92:47:b4:
         2e:46:39:46:19:e8:20:7a:47:6f:91:2c:8f:2c:16:73:0c:aa:
         e2:61:51:e0:91:b4:b0:33:9a:bb:c7:f1:1f:21:18:27:a9:1d:
         12:a3:da:73:8c:80:36:9d:17:1c:b7:59:09:14:55:1e:94:d1:
         ba:ba:b9:bb:a4:b9:e2:9e:b5:9b:a9:27:5f:7a:31:d5:56:cb:
         94:d4:f4:9e:72:f9:97:09:a0:41:56:68:6c:71:5a:c2:47:9c:
         bb:31:81:8c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw
MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNjAzMzEw
NzI3MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDREIwNUJDMTcwNDgy
REMyRTkxRjE1M0ZFNjhFMERBRTMzRUY3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnTauXi/ABqw7rCF0FuQDTNas8E8C7VZx2o3A/a7iIjibd3JH0
wngp30LTqVTHaj3MnOb5iYNRBI9Iq5HOjpEv/mVDfth7py8p/sX6d2B3xfWqcb9+
nJLG6TdkvUgpyd1TbW45xs+MUx3TU4lCTAei+DbEVlfczn8Pd/SmrPGsPEZd6M3H
MjNprGcRA5FzC8ziERXfbCqmhGzn2avGnr6hPNkxMk6tN72cddLu6+G8lESi6WYA
3m382poCDGDeb/wQ+qk+zdA6mxooqgxeIiL5ym0td2n+RWO4QbtCiPV0QKWciDiW
ak3wgoyvvVb2iOflBxBjOiNqydJCOBgl7iVtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULNsFvBcEgtwukfFT/mjg2uM+95UwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB
ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk
c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjA3L0xOc0Z2QmNFZ3R3dWtmRlRfbWpnMnVNLTk1VS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSrawwDQYJKoZIhvcNAQELBQADggEB
AAYe9kMzvlVGeCcHQNeEjXc5XHS90mK5/7nYhkqGCg8YaZELGLoNpXxP7asyE3U8
pshNZtYGzjHSOv5iq3+YhqlMLSFrj3WjE9F13ztLGd6T3+4RHW0SAiDSNgvLY7TE
ZHW0k8sQ/2gV1pEtOLLcQpF8GWXfR2M2BErU4y6M4WC57OQZFH94k3P3bXBrcIeL
CL51wIweKnEStUwDxs/llZJHtC5GOUYZ6CB6R2+RLI8sFnMMquJhUeCRtLAzmrvH
8R8hGCepHRKj2nOMgDadFxy3WQkUVR6U0bq6ubukueKetZupJ196MdVWy5TU9J5y
+ZcJoEFWaGxxWsJHnLsxgYw=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:41 2026 by rpki-client