Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/LSfQ5RG07cMZzsU5EbP-Wii52M8.roa
File:                     LSfQ5RG07cMZzsU5EbP-Wii52M8.roa (raw, json)
Hash identifier:          F5UrRs3artrT0eEYYHvknk/uTpdieIsp8zq9tzEmIYw=
Subject key identifier:   2D:27:D0:E5:11:B4:ED:C3:19:CE:C5:39:11:B3:FE:5A:28:B9:D8:CF
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       2D
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/LSfQ5RG07cMZzsU5EbP-Wii52M8.roa
Signing time:             Sun 01 Mar 2026 01:36:29 +0000
ROA not before:           Sun 01 Mar 2026 01:36:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        27.54.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar  1 01:36:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2D27D0E511B4EDC319CEC53911B3FE5A28B9D8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:cd:d5:1c:e1:9c:6b:fc:1e:8d:cf:6b:88:
                    cf:17:17:93:09:4f:b4:fb:1c:f1:77:8f:0d:ce:a0:
                    89:ba:a3:4e:70:30:4e:81:a8:32:d4:2b:0c:02:c9:
                    46:39:ff:9a:9a:91:e8:29:79:43:9b:94:0e:93:db:
                    ab:e6:98:42:a6:9a:94:36:3e:47:ac:e1:9f:a6:15:
                    e6:c2:67:eb:e9:54:7a:0e:fa:db:72:1a:5c:eb:c8:
                    6a:fa:f1:2f:07:6a:cd:be:b9:7f:f0:d6:07:e2:47:
                    e0:2b:e1:ee:2e:2a:f6:d9:31:87:b0:ce:13:a8:a3:
                    69:3b:0e:26:8c:b2:21:a8:5e:ef:d8:7a:1d:b5:11:
                    0b:45:0d:0d:93:2f:14:4c:ea:9d:d9:ca:8b:2e:bf:
                    d7:0b:5e:8f:0d:7a:dd:de:ec:a5:67:7c:41:70:0a:
                    ba:a5:7d:04:b7:86:92:27:de:24:92:a4:d1:24:5a:
                    e9:84:7e:88:40:80:36:84:1b:b0:e6:b4:9c:7d:5b:
                    f5:72:c4:6c:6a:0e:b9:02:b8:f5:c5:80:22:cf:d3:
                    38:a8:4c:e2:80:06:36:f0:db:94:14:dd:e1:be:14:
                    95:0a:81:73:e4:67:d7:19:fa:09:1c:cb:b1:7d:77:
                    14:ec:1d:16:4b:b6:7b:d6:fe:fa:17:a5:16:1f:d1:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:D0:E5:11:B4:ED:C3:19:CE:C5:39:11:B3:FE:5A:28:B9:D8:CF
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/LSfQ5RG07cMZzsU5EbP-Wii52M8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:77:56:87:11:54:17:37:ed:74:06:e6:3b:7d:19:25:dd:
         ae:b3:7d:65:f8:c4:a3:5e:46:71:c1:61:1c:7e:9c:ea:47:1f:
         09:c3:3a:4f:7a:32:ed:4b:0b:6e:44:40:20:78:07:c4:be:2c:
         62:d4:5a:4c:76:c2:98:68:56:fc:ef:47:71:6a:61:af:58:a9:
         91:f2:b8:bf:9e:1b:b8:07:70:72:75:26:af:b6:08:c7:49:bf:
         00:dc:6f:3f:9a:58:f1:d6:f9:8b:46:c6:6b:a9:13:38:e5:e2:
         b5:69:08:11:fe:16:ac:55:30:6d:a8:cf:58:1a:65:8b:e5:16:
         ff:7d:4f:1a:93:0a:3c:26:9b:e7:49:e1:0b:77:42:05:bb:f9:
         6a:f2:d7:2c:b5:fa:b9:7d:1c:ba:d4:63:7c:71:52:1d:d8:94:
         81:24:5a:af:32:19:0f:96:49:81:2a:a9:2f:9e:84:95:5e:8a:
         20:e9:30:9a:5e:23:4c:f7:c0:9d:52:a8:a2:93:07:b8:1b:26:
         77:df:25:2d:f8:07:be:37:fa:9a:62:4c:f2:91:08:f7:9c:08:
         ec:55:56:60:7d:77:93:f9:da:ef:c9:7b:d2:c7:a7:d5:17:30:
         25:90:75:21:cc:d3:59:ba:a0:e1:1f:22:f5:fd:c0:91:1a:f4:
         0b:88:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:44 2026 by rpki-client