Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/LbrpJBKw6HlaZdbtPwY4M7ncRbM.roa
File:                     LbrpJBKw6HlaZdbtPwY4M7ncRbM.roa (raw, json)
Hash identifier:          Yl71gvauEg7J4cdJIhanK3PeXpizHdA9lgAvHCpu+Ok=
Subject key identifier:   2D:BA:E9:24:12:B0:E8:79:5A:65:D6:ED:3F:06:38:33:B9:DC:45:B3
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       AD
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/LbrpJBKw6HlaZdbtPwY4M7ncRbM.roa
Signing time:             Tue 31 Mar 2026 07:46:47 +0000
ROA not before:           Tue 31 Mar 2026 07:46:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        219.100.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Mar 31 07:46:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2DBAE92412B0E8795A65D6ED3F063833B9DC45B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:77:c2:f1:eb:eb:da:4e:84:9f:f9:9f:4a:
                    8e:e9:54:3f:5b:73:e8:95:5b:c5:30:71:9e:cd:1e:
                    e7:aa:3b:73:14:1d:6c:d9:ef:72:eb:7e:1c:69:61:
                    c5:da:da:bd:29:c1:f3:2c:8e:c0:c5:6e:a8:0b:24:
                    a2:a3:b0:f6:1d:af:05:1a:77:db:69:a4:e0:3e:06:
                    9d:eb:78:b5:ed:a2:dd:7b:b2:d3:91:b3:0e:48:aa:
                    1e:61:83:4d:a0:e8:f7:89:fe:7d:d8:aa:c5:3e:0a:
                    db:a9:bf:e2:22:79:e0:a1:4d:18:03:e4:54:58:29:
                    54:29:ec:3d:45:29:94:4b:d1:95:fb:a8:c4:d9:7f:
                    84:5b:b0:c2:99:82:69:e6:66:98:85:b6:be:a1:04:
                    12:d9:32:f2:5a:d7:79:e7:77:44:4b:7f:de:03:07:
                    ef:6a:96:5c:52:cb:0d:6f:ba:00:94:c6:64:2b:88:
                    4c:91:f4:08:48:84:ad:dc:4c:f8:71:38:14:2d:96:
                    76:1c:06:88:2d:57:f0:ce:1f:8e:b5:2e:9b:8a:18:
                    48:ec:f3:f3:bf:13:9f:fb:35:2e:cc:3b:3f:5b:1f:
                    ba:6d:c4:c5:00:32:56:cb:d3:c9:3d:a6:a4:1c:05:
                    20:d9:f9:d3:8c:3a:41:a4:66:6e:ea:bc:97:0f:14:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:E9:24:12:B0:E8:79:5A:65:D6:ED:3F:06:38:33:B9:DC:45:B3
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/LbrpJBKw6HlaZdbtPwY4M7ncRbM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:18:ee:4f:8c:05:5e:bb:43:23:d2:d2:b2:f1:3e:12:3a:c7:
         81:7b:e5:e0:5e:4c:52:52:b2:b2:99:bd:ab:96:4f:55:60:03:
         a4:e0:41:01:66:17:f4:a1:39:66:70:bf:cf:f4:c1:24:f9:52:
         60:82:bd:10:f9:63:86:5c:48:8d:de:0d:09:dc:02:6b:bf:4f:
         b3:16:32:31:32:d2:b4:af:41:9d:9c:10:eb:ee:96:3d:f4:6b:
         18:2e:2c:f6:8f:da:78:ce:79:d7:bb:66:b1:38:a0:12:c6:5f:
         98:d8:15:a8:de:80:44:da:22:90:75:d3:de:56:71:79:0e:76:
         a5:8d:4a:43:2d:66:4f:4d:bb:92:e4:dc:49:3e:8e:1e:a2:16:
         2d:96:3c:cd:5b:c9:d1:4e:8f:82:a0:1c:3d:2a:00:ec:6e:ae:
         ed:3a:a3:6a:fa:0a:6b:be:6b:ec:31:0e:77:38:23:08:b5:5d:
         b1:9f:13:6a:46:2c:19:c3:33:b2:fb:db:7e:bd:79:b5:9e:a1:
         24:24:bd:c7:58:9f:5e:94:a2:ce:83:11:b0:d4:ce:44:55:b1:
         8e:ac:d2:03:8a:d3:c2:ca:b9:69:09:28:00:b4:7a:70:59:3f:
         d6:51:30:17:21:62:d4:14:99:79:e3:d3:55:07:81:c2:fb:0a:
         a8:65:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:23 2026 by rpki-client