Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lvm83VsDO2sf8lOP04EPZEpltMw.roa
File:                     Lvm83VsDO2sf8lOP04EPZEpltMw.roa (raw, json)
Hash identifier:          Q4CiKOam49pyBUwRAAZXkmmv2mFVSK8yWVKT8QkfIYM=
Subject key identifier:   2E:F9:BC:DD:5B:03:3B:6B:1F:F2:53:8F:D3:81:0F:64:4A:65:B4:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lvm83VsDO2sf8lOP04EPZEpltMw.roa
Signing time:             Tue 31 Mar 2026 08:02:47 +0000
ROA not before:           Tue 31 Mar 2026 08:02:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5868 (0x16ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2EF9BCDD5B033B6B1FF2538FD3810F644A65B4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:f6:54:ce:1e:51:1c:12:a1:cb:b2:46:2a:
                    36:d6:05:b8:78:46:b8:89:ec:76:a4:f9:45:97:8c:
                    1a:e4:59:53:b2:39:9d:65:86:08:d0:88:a7:ab:1a:
                    43:c4:a7:eb:71:f6:72:e8:94:7c:a7:82:b9:e1:3a:
                    5d:d3:27:13:9e:3c:e2:45:6e:22:ce:76:37:80:1d:
                    87:83:90:b9:a7:92:67:8a:be:19:43:08:4d:8a:00:
                    2b:51:33:07:6f:dd:75:10:f2:bc:7b:88:18:af:84:
                    2c:69:34:34:af:98:dc:05:3d:ac:98:e3:71:c0:dd:
                    8f:bc:39:90:e4:3e:72:ca:55:f4:09:44:1b:98:f8:
                    00:36:af:0c:9a:e8:c7:89:50:31:2c:f5:c7:32:7f:
                    63:a7:79:41:cd:01:51:c9:1e:b8:33:d6:c1:88:24:
                    c3:54:fd:36:d7:a1:9c:79:48:99:a2:8c:6d:55:a3:
                    79:a6:d1:c0:ce:ff:77:a5:30:2e:01:7d:26:c8:0b:
                    3e:06:a7:29:e4:fc:99:8b:c2:3e:36:ee:bd:f4:83:
                    7e:7f:9a:70:c3:83:21:c4:38:c6:4e:e5:59:af:3e:
                    03:d6:f2:97:7e:7d:32:91:d4:d4:b3:3b:35:48:cb:
                    a5:07:5e:9f:36:40:25:47:85:4a:64:e3:a7:c6:23:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:BC:DD:5B:03:3B:6B:1F:F2:53:8F:D3:81:0F:64:4A:65:B4:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lvm83VsDO2sf8lOP04EPZEpltMw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:1d:fe:ce:3b:40:85:46:01:d3:ab:f8:6c:de:08:ba:5e:
         71:31:b9:ae:0b:86:84:38:c7:da:14:28:42:fc:5d:a3:07:17:
         65:74:d3:20:38:f7:40:ba:ce:89:82:2e:09:09:70:5a:7c:f8:
         e9:b6:70:3b:6b:1c:91:96:90:ab:56:74:a1:f3:c2:84:d3:aa:
         ec:42:50:08:7c:48:84:00:e1:3f:45:46:a6:6b:2c:16:a2:58:
         12:54:fb:04:71:00:60:ef:f0:1d:08:8d:76:dd:48:b8:56:d9:
         77:c1:b6:e3:84:9a:fe:25:be:f3:3b:0a:09:dc:9c:dc:d3:b8:
         24:1b:25:f2:df:13:32:5d:79:31:d1:53:a4:3c:94:ed:fb:5c:
         b1:a7:03:50:78:81:f0:69:1a:de:46:fb:08:a3:28:54:04:a6:
         1e:9a:0f:63:da:8c:f8:b4:86:4d:f3:67:2d:21:30:fc:53:f6:
         7f:c8:46:b4:d9:ba:77:d4:82:03:18:2b:bf:99:c1:9b:39:b9:
         db:e9:f3:15:5d:9a:a2:0b:ef:4d:af:81:34:2e:1f:b2:67:ec:
         9f:9b:00:01:c5:93:80:88:43:bd:d9:e0:d9:96:28:b0:bb:43:
         c5:bd:6c:dc:d3:cf:6d:db:60:ef:14:d8:8f:04:22:6e:4f:09:
         1e:ab:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:43 2026 by rpki-client