Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LCISCTSM88cKTX3k0SbGwlXHVhg.roa
File:                     LCISCTSM88cKTX3k0SbGwlXHVhg.roa (raw, json)
Hash identifier:          my5PAKxjibooGKdMjtREp5N0ddMnOBWrd4BoIt0L5CM=
Subject key identifier:   2C:22:12:09:34:8C:F3:C7:0A:4D:7D:E4:D1:26:C6:C2:55:C7:56:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LCISCTSM88cKTX3k0SbGwlXHVhg.roa
Signing time:             Tue 31 Mar 2026 08:26:54 +0000
ROA not before:           Tue 31 Mar 2026 08:26:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2C221209348CF3C70A4D7DE4D126C6C255C75618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:fe:ab:ed:d5:2c:73:3a:28:09:4d:6b:00:
                    f9:44:3b:4f:5b:f1:c3:a9:b9:b2:a5:23:3f:05:4f:
                    d2:4e:10:dd:4d:0e:0d:73:e2:e6:dd:49:0c:99:fc:
                    97:2f:e8:91:4b:63:b9:d6:a7:29:16:04:35:f4:49:
                    a4:17:f0:ed:6b:2f:0d:58:9f:f7:e6:8b:53:6a:28:
                    44:43:30:91:1b:42:04:3a:9c:e3:d6:1c:7d:c5:38:
                    b7:c4:cc:a1:e5:af:cd:80:f1:e3:e2:b6:77:ab:9a:
                    5a:8a:af:3c:a8:96:c5:e5:67:39:bd:a3:8a:a8:55:
                    08:b5:9c:6c:fd:e2:a7:57:f5:6d:a4:1a:ab:bb:51:
                    fe:60:50:6c:87:af:58:37:69:dd:38:36:56:08:d0:
                    40:1a:bc:6d:f1:4d:55:9d:fe:ff:69:05:7a:48:c0:
                    5b:b5:54:07:3e:6c:02:e7:51:3f:62:f4:08:c2:47:
                    93:bb:b6:57:12:75:bb:fa:07:1a:5f:4d:44:01:75:
                    c4:ce:fa:dd:21:34:a8:37:ba:99:92:bd:34:2b:d3:
                    d8:75:47:45:f1:e8:66:95:7c:a9:63:37:8b:d0:b2:
                    eb:d6:97:bc:74:db:ba:78:35:2a:80:51:79:d0:77:
                    96:d4:b5:3b:a4:70:09:28:18:d6:69:cc:7c:22:ae:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:22:12:09:34:8C:F3:C7:0A:4D:7D:E4:D1:26:C6:C2:55:C7:56:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LCISCTSM88cKTX3k0SbGwlXHVhg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:75:23:df:12:ba:1f:98:fc:9a:7c:2e:c6:7c:ad:2c:fa:
         e9:7d:6a:df:1c:33:a0:60:c3:01:1e:d1:9a:03:f9:57:48:29:
         01:c4:a4:7f:a7:65:4c:ae:f4:6b:4a:6b:21:f9:e8:32:43:39:
         03:de:c2:63:41:7a:82:d9:c6:d0:2c:c9:a4:2f:69:94:d1:7f:
         c0:ea:98:ac:b8:fc:b9:9d:be:c3:69:2a:f9:f6:33:10:c8:bd:
         86:d5:6c:dd:32:63:43:4b:87:93:40:9b:81:a3:51:d7:bc:bc:
         63:d4:b3:ca:f4:2d:8e:a3:65:6e:4e:be:e9:46:26:f1:e1:11:
         b4:81:c3:c3:af:24:8c:e7:ee:d2:d3:aa:f2:88:b8:4a:30:e4:
         5b:7d:42:1f:7e:16:be:99:89:e1:ff:e8:1c:76:fa:f9:98:26:
         e4:e3:7b:58:e8:5a:15:0e:4f:84:fa:76:30:e6:c6:3a:0a:31:
         4c:a3:39:77:06:73:fc:76:2d:25:f6:8a:58:d5:21:95:67:a8:
         90:ba:75:40:94:d5:32:7c:98:48:51:2d:e2:93:14:1a:c0:3d:
         0c:eb:0a:81:86:d9:01:02:85:d9:a1:fd:ce:e0:33:ea:d4:ba:
         95:42:96:7c:96:96:c8:9d:b6:aa:13:ec:52:54:66:f3:e4:2b:
         73:65:88:6a
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDMjIxMjA5MzQ4Q0Yz
QzcwQTREN0RFNEQxMjZDNkMyNTVDNzU2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvpf6r7dUsczooCU1rAPlEO09b8cOpubKlIz8FT9JOEN1NDg1z
4ubdSQyZ/Jcv6JFLY7nWpykWBDX0SaQX8O1rLw1Yn/fmi1NqKERDMJEbQgQ6nOPW
HH3FOLfEzKHlr82A8ePitnermlqKrzyolsXlZzm9o4qoVQi1nGz94qdX9W2kGqu7
Uf5gUGyHr1g3ad04NlYI0EAavG3xTVWd/v9pBXpIwFu1VAc+bALnUT9i9AjCR5O7
tlcSdbv6BxpfTUQBdcTO+t0hNKg3upmSvTQr09h1R0Xx6GaVfKljN4vQsuvWl7x0
27p4NSqAUXnQd5bUtTukcAkoGNZpzHwirnSLAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQULCISCTSM88cKTX3k0SbGwlXHVhgwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9MQ0lTQ1RTTTg4Y0tUWDNrMFNiR3dsWEhWaGcucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa8AwDQYJKoZIhvcNAQEL
BQADggEBABXPdSPfErofmPyafC7GfK0s+ul9at8cM6BgwwEe0ZoD+VdIKQHEpH+n
ZUyu9GtKayH56DJDOQPewmNBeoLZxtAsyaQvaZTRf8DqmKy4/LmdvsNpKvn2MxDI
vYbVbN0yY0NLh5NAm4GjUde8vGPUs8r0LY6jZW5OvulGJvHhEbSBw8OvJIzn7tLT
qvKIuEow5Ft9Qh9+Fr6ZieH/6Bx2+vmYJuTje1joWhUOT4T6djDmxjoKMUyjOXcG
c/x2LSX2iljVIZVnqJC6dUCU1TJ8mEhRLeKTFBrAPQzrCoGG2QEChdmh/c7gM+rU
upVClnyWlsidtqoT7FJUZvPkK3NliGo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:10 2026 by rpki-client