Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa
File:                     lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa (raw, json)
Hash identifier:          O+8yO/VJ8kGv7f3iFLs1/FDc/b3AOhBLM84p3KOd0W4=
Subject key identifier:   95:BF:B7:98:79:E7:3F:86:0B:E4:D6:FA:F7:29:2A:71:FD:1E:21:0F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0546
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa
Signing time:             Tue 31 Mar 2026 08:19:45 +0000
ROA not before:           Tue 31 Mar 2026 08:19:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.2.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=95BFB79879E73F860BE4D6FAF7292A71FD1E210F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:9d:dd:40:f6:d6:11:5f:f1:0e:07:22:a0:
                    9d:6d:18:9b:3a:c0:c6:fb:32:bc:63:32:39:36:39:
                    9f:a6:5c:3a:2c:8d:42:cd:72:55:58:d3:e4:4d:d1:
                    72:48:81:88:69:2c:33:32:7c:df:93:f7:82:68:d7:
                    0e:b6:fb:64:39:de:fc:81:44:9d:e6:ee:85:1d:17:
                    cd:92:d0:54:59:90:b0:86:0f:4a:4d:b5:33:ea:22:
                    0f:c0:fc:9b:f5:e6:20:43:d0:3e:d7:7e:89:15:c9:
                    a7:88:21:18:83:a6:b0:85:ca:9f:ac:69:88:72:a2:
                    c9:5c:2d:ef:70:51:0f:7b:7d:f8:5b:13:56:f1:06:
                    93:dd:98:13:98:de:20:b1:51:5a:7d:65:a3:6d:18:
                    f9:28:bf:94:4f:36:c6:45:28:e2:76:04:d3:82:3b:
                    4e:1a:d6:fb:e0:eb:9f:1c:5f:87:84:69:d2:da:98:
                    96:f8:55:bd:ef:59:fa:b9:65:fc:af:15:55:fa:c0:
                    32:e9:27:3f:c1:cc:6c:d5:3c:7a:e9:79:9d:f3:e2:
                    82:59:71:75:60:c0:f8:cb:d7:92:60:9c:a7:ef:56:
                    d5:e8:5c:f7:2e:a3:d7:79:e5:7a:eb:0e:9c:93:e7:
                    40:ad:43:5f:7d:d6:fa:97:2f:3c:cd:75:45:f0:58:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:B7:98:79:E7:3F:86:0B:E4:D6:FA:F7:29:2A:71:FD:1E:21:0F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lb-3mHnnP4YL5Nb69ykqcf0eIQ8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         70:08:eb:8a:17:bc:d7:e0:4d:44:6a:78:90:c6:69:f5:1b:00:
         d4:0a:1f:8d:86:89:3a:d0:00:89:9b:c3:12:77:93:5b:9c:5a:
         ec:71:40:ff:12:c1:53:ca:fe:04:2b:13:da:d9:fd:51:38:62:
         34:7c:e8:29:f8:52:e9:59:c8:6c:16:82:af:d2:3e:59:b5:75:
         e3:cd:80:4f:be:6a:fb:cd:14:18:0d:d1:b4:8c:a6:96:e4:2f:
         0d:f0:d1:e0:9b:b0:74:23:8b:48:02:e1:b7:90:c2:a5:c9:60:
         34:ed:2e:a8:f6:59:da:d9:b0:97:dd:31:09:63:5b:28:7c:cc:
         b3:36:9f:bb:61:00:6d:01:21:cf:fc:58:7f:be:8b:c0:e8:f3:
         05:20:91:8c:da:31:84:96:e1:f5:c7:b8:23:94:8a:1a:d9:d6:
         f0:06:fe:37:f8:1c:d6:d3:f6:7a:f6:a3:c2:44:e9:3b:d4:c6:
         d0:e8:e2:5a:10:3e:9f:0d:e0:f8:b4:0a:5a:7d:c8:72:c4:cb:
         44:68:ae:74:61:3d:1b:24:cd:1c:60:83:38:52:15:43:cf:19:
         e4:be:37:08:b0:61:5e:73:ee:bc:0e:cd:b5:7e:a9:d0:06:46:
         09:41:f6:f7:d6:9b:9c:3c:33:7c:fa:98:01:33:40:cf:81:d6:
         c9:7c:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:37 2026 by rpki-client