Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/LO1WiuzcTieEXbeIEMONWWiuc0Q.roa
File:                     LO1WiuzcTieEXbeIEMONWWiuc0Q.roa (raw, json)
Hash identifier:          j1FRtiBXuU2YFp2SLiE+FlgXxSsjxHWBeszWfB/9TOU=
Subject key identifier:   2C:ED:56:8A:EC:DC:4E:27:84:5D:B7:88:10:C3:8D:59:68:AE:73:44
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0129
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LO1WiuzcTieEXbeIEMONWWiuc0Q.roa
Signing time:             Tue 31 Mar 2026 07:36:41 +0000
ROA not before:           Tue 31 Mar 2026 07:36:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        110.44.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2CED568AECDC4E27845DB78810C38D5968AE7344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:ac:9a:c1:cc:62:26:97:50:40:dd:c6:81:
                    12:20:c0:0f:db:4b:d5:7a:25:98:c2:bc:71:9c:e6:
                    4c:18:15:c0:88:65:95:10:d4:ba:34:d4:44:0a:cc:
                    6f:37:72:bc:c1:7b:45:c2:95:a3:1a:81:55:5a:eb:
                    1c:37:50:68:67:cf:cf:ae:02:76:17:07:9e:83:3e:
                    9a:88:5a:17:5e:42:da:93:ab:04:40:71:fa:08:b6:
                    12:95:9b:70:39:fa:bf:b1:79:c1:7b:7d:d1:b9:52:
                    87:fa:d3:a4:ec:c5:66:1d:82:9d:59:d9:90:3b:ed:
                    f5:58:91:5e:93:12:32:0f:46:50:6e:3c:d7:9a:da:
                    98:c5:34:6a:0d:e8:97:85:c5:05:bd:be:54:2e:05:
                    41:3e:42:2d:bf:91:cb:bb:54:76:bc:12:ec:a2:7a:
                    2d:b4:68:0a:aa:df:9f:39:99:42:2e:95:e0:68:86:
                    fe:cb:b4:21:b9:f9:60:8f:72:3e:72:c1:24:93:01:
                    46:57:16:17:a4:19:b3:a1:5d:f0:e7:7c:60:cb:73:
                    16:db:6f:b8:3e:1d:1c:d4:5f:69:91:a5:ae:e1:7f:
                    9a:7b:a9:37:ce:35:7d:14:92:ad:8a:e0:02:d9:bd:
                    c9:5c:bf:c2:de:a1:73:af:60:94:96:b3:b3:0b:4c:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:56:8A:EC:DC:4E:27:84:5D:B7:88:10:C3:8D:59:68:AE:73:44
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LO1WiuzcTieEXbeIEMONWWiuc0Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:04:03:b9:c9:2f:3b:ef:6f:09:ac:fa:61:5a:72:8d:80:
         75:e9:75:8f:c3:d2:17:cc:22:2b:a7:a9:ad:ba:65:63:da:28:
         e4:3b:46:2d:5d:18:ee:a6:7f:99:b8:f2:1f:1f:e1:96:c2:81:
         1e:ea:18:0e:e7:ae:e6:c1:fa:84:30:25:29:13:2c:49:18:d7:
         cc:89:c0:89:65:a2:5c:c0:34:ad:78:1a:04:be:f8:53:16:9c:
         12:cf:73:a3:50:b5:a3:59:6c:88:26:af:07:bc:bb:c4:73:24:
         0a:98:e5:af:43:06:44:1c:c7:3f:54:ab:db:56:88:45:4f:e4:
         a8:0d:90:2d:6e:08:27:59:c2:64:98:57:e2:f4:a3:f5:be:5b:
         ef:eb:d1:56:39:f5:94:7b:a9:1e:2b:5f:b7:c3:31:82:44:50:
         e3:9c:82:df:85:78:c6:e4:2a:c3:22:70:19:8f:dd:3d:40:02:
         4d:26:b1:1b:e2:7a:09:8f:ec:89:42:9e:bb:45:55:df:2e:b8:
         76:ee:e5:73:df:13:b9:ae:dc:04:b1:bc:06:15:d0:eb:4a:ec:
         af:6e:a6:18:3f:ca:92:a9:8e:f9:64:d3:44:62:bc:ce:e4:76:
         18:78:0d:2b:7f:2b:d1:64:4b:d8:c1:1d:3b:cf:54:e2:15:df:
         a8:ff:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:28 2026 by rpki-client