Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/LxzKzxbI_mWlXZyiD3RBMj0CScE.roa
File:                     LxzKzxbI_mWlXZyiD3RBMj0CScE.roa (raw, json)
Hash identifier:          eQSqtd7/0CMeEBxUadG043yCGOmVMEqe6siTRS1h4xk=
Subject key identifier:   2F:1C:CA:CF:16:C8:FE:65:A5:5D:9C:A2:0F:74:41:32:3D:02:49:C1
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       2C
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/LxzKzxbI_mWlXZyiD3RBMj0CScE.roa
Signing time:             Sun 01 Mar 2026 01:36:28 +0000
ROA not before:           Sun 01 Mar 2026 01:36:28 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        27.54.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar  1 01:36:28 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2F1CCACF16C8FE65A55D9CA20F7441323D0249C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:41:d1:af:0a:ca:5b:fe:64:4d:c7:fd:48:
                    68:1f:57:5e:aa:7b:1d:2b:17:37:d6:4b:95:12:f1:
                    c5:71:77:a6:c2:bb:b9:79:4b:dd:fe:0e:c5:b1:9e:
                    f3:d2:58:12:1f:01:03:fc:33:db:49:d8:07:ca:0f:
                    3a:e6:2b:38:64:3a:be:4c:e4:dc:24:1f:f5:d2:a4:
                    76:bc:06:9e:85:5a:3d:ef:6f:0d:6d:4f:18:e9:30:
                    48:26:f6:17:79:60:74:1a:53:5e:15:a8:80:1a:07:
                    96:33:ef:fd:9b:d0:39:92:19:6d:37:ec:3f:3a:43:
                    80:2f:a3:15:e8:aa:06:54:10:42:78:f0:0f:e7:cb:
                    71:f2:a0:c7:53:41:b3:4b:1e:f9:90:05:a4:09:8a:
                    94:d8:e2:ca:84:ee:d7:0d:11:7a:fa:1b:38:e0:47:
                    c6:ea:28:bd:05:fc:9f:e7:d6:be:52:98:4d:a6:06:
                    ec:cb:8b:45:0b:45:7e:e5:3d:b8:fa:48:93:b2:d3:
                    0f:72:32:96:ca:22:14:e6:5b:cd:b4:1f:3a:a7:ee:
                    b4:55:19:e5:62:25:56:8e:3f:d4:cd:f9:78:bc:a0:
                    ab:c9:fa:29:1b:15:49:6d:6e:cb:46:e9:09:80:26:
                    7e:45:3c:25:4f:f8:1f:2a:90:85:74:6b:a6:c1:b0:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:CA:CF:16:C8:FE:65:A5:5D:9C:A2:0F:74:41:32:3D:02:49:C1
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/LxzKzxbI_mWlXZyiD3RBMj0CScE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:0e:15:94:ff:2c:0a:a9:c8:1b:84:fa:ad:48:a9:1d:3c:
         9c:9c:ab:cd:06:2f:ab:1f:79:a5:4a:7c:1d:02:ae:35:99:4b:
         b2:4c:df:1f:cc:b8:5c:c3:a7:aa:37:1f:e2:06:8a:6f:43:20:
         14:3f:ae:fd:4b:aa:9c:a5:e2:2c:0f:77:f2:c4:89:b2:87:66:
         88:b7:49:1f:99:62:fd:8b:c5:d8:62:f5:a2:1c:f1:41:51:2c:
         76:49:d6:3b:83:60:d2:08:c2:7a:e7:0f:90:af:07:06:0c:c6:
         4e:32:25:84:f1:f9:86:2b:93:59:fc:e1:29:39:fb:f4:26:50:
         cf:b6:66:0b:80:bb:97:c7:c2:13:a9:19:35:e2:42:8a:9c:87:
         0b:8b:b1:26:97:d7:16:d5:23:f3:5a:d9:17:da:da:4b:3c:18:
         b9:9b:33:9a:d1:c4:4e:cc:3a:4d:d8:92:1e:d2:05:18:f4:47:
         96:dd:cb:f4:82:28:4e:86:2f:37:61:7a:0e:b2:c4:bd:92:9e:
         4c:25:53:1a:ca:f1:cc:91:05:44:33:b1:90:c5:25:39:04:59:
         e5:5f:31:69:3a:0c:90:02:cc:3b:ea:f7:76:24:3f:21:a0:8d:
         ab:00:62:8b:03:4b:b7:f9:b6:6a:8c:fb:80:83:5c:c8:e7:42:
         03:58:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:43 2026 by rpki-client