Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFuUvBfOoVaham_xl4p_D8-7VjY.roa
File:                     LFuUvBfOoVaham_xl4p_D8-7VjY.roa (raw, json)
Hash identifier:          Xv+mkwNMWgMsyPY8X/mvVOcAkTIHM9fewi0rAT3lbeQ=
Subject key identifier:   2C:5B:94:BC:17:CE:A1:56:A1:6A:6F:F1:97:8A:7F:0F:CF:BB:56:36
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1500
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFuUvBfOoVaham_xl4p_D8-7VjY.roa
Signing time:             Tue 31 Mar 2026 07:58:43 +0000
ROA not before:           Tue 31 Mar 2026 07:58:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5376 (0x1500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2C5B94BC17CEA156A16A6FF1978A7F0FCFBB5636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:c6:a4:40:93:f4:b6:d9:e4:ae:b8:6d:5b:
                    45:a4:13:a4:5f:28:65:03:2a:8f:ce:44:c1:86:e1:
                    89:ac:98:50:c3:c6:ba:f4:bb:3e:8f:5c:ad:7b:eb:
                    c8:3a:b4:c8:2b:fb:2a:a5:a3:f8:99:76:c4:6d:46:
                    cd:7e:36:d1:1e:6c:46:83:d8:a1:b9:d2:d5:8a:18:
                    1d:67:5b:10:e7:43:1f:f4:24:d0:85:54:03:56:ae:
                    be:03:d4:57:51:f6:63:d4:a6:c1:9b:44:b7:67:0b:
                    77:c7:ed:37:92:ea:0e:01:7f:26:8f:c5:5a:58:b4:
                    ae:44:80:ca:8a:84:7f:c7:ac:ed:0c:59:a2:99:86:
                    db:7b:41:c2:18:13:89:b1:91:85:ea:ff:e1:aa:1b:
                    db:18:b7:a6:a9:83:9f:28:12:28:90:21:8b:67:56:
                    17:d2:16:dc:a5:84:fd:48:7f:25:2e:fb:33:25:49:
                    a9:3d:e6:be:2d:6c:1e:ac:f2:5f:73:c5:c2:4a:05:
                    e5:9b:56:c8:c2:cd:04:ca:13:91:73:0e:2e:85:d5:
                    2a:53:6c:76:dd:51:a3:d7:e1:5c:e2:36:38:e8:f0:
                    a4:5b:61:5b:38:ec:81:ea:9b:de:69:d8:e3:ee:12:
                    fb:98:7b:81:7c:9c:ed:4e:d9:d1:fe:96:03:4f:4b:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5B:94:BC:17:CE:A1:56:A1:6A:6F:F1:97:8A:7F:0F:CF:BB:56:36
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LFuUvBfOoVaham_xl4p_D8-7VjY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:b0:93:93:4f:d0:dd:e4:65:b3:59:66:ee:7e:40:1c:13:
         54:62:72:49:b8:e7:5f:f8:64:09:22:26:5b:18:29:02:78:b0:
         b3:f9:8c:16:29:00:6c:3f:ee:84:3c:c6:16:54:ae:9b:21:97:
         9f:07:39:d4:ed:05:97:b7:af:70:63:49:c5:ae:49:4c:ce:da:
         26:c8:ae:3e:c7:a9:c1:7f:b3:a2:e0:4b:e5:57:8a:35:dd:40:
         79:87:82:85:6f:c8:1b:0a:9a:d4:4b:d8:41:4f:29:8f:d8:44:
         e0:f9:b8:f2:34:28:89:8e:ec:38:89:6a:23:0a:f3:5d:24:5b:
         b9:12:50:86:38:66:cf:c2:ab:9c:69:ba:94:35:2c:b9:ef:a3:
         d9:38:0a:77:7a:fa:6a:8e:f8:0f:74:5d:63:8e:15:2d:23:48:
         4c:9a:84:2b:a7:51:91:fe:f1:eb:27:d2:a6:e2:79:82:f0:cd:
         72:e2:7b:47:71:71:84:0f:30:86:ae:9f:6a:e1:8c:99:dc:6e:
         66:22:b8:b8:7d:e9:5c:25:62:46:55:84:d7:fd:fc:be:9a:77:
         dc:91:a6:0d:5d:cf:a9:e2:32:06:9b:f1:57:5e:5f:da:7a:54:
         7e:c8:4a:c0:d0:78:f3:77:e7:12:e7:29:f1:57:79:42:a5:82:
         be:06:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client