Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/LAvNa7ToR38szCpBLXmYDrNbY54.roa
File:                     LAvNa7ToR38szCpBLXmYDrNbY54.roa (raw, json)
Hash identifier:          V5QWf30eIgOuRgIdZUY2iXovhu43DQaJG+ZXUOpJZDY=
Subject key identifier:   2C:0B:CD:6B:B4:E8:47:7F:2C:CC:2A:41:2D:79:98:0E:B3:5B:63:9E
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       36
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LAvNa7ToR38szCpBLXmYDrNbY54.roa
Signing time:             Tue 31 Mar 2026 08:39:41 +0000
ROA not before:           Tue 31 Mar 2026 08:39:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        120.72.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar 31 08:39:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2C0BCD6BB4E8477F2CCC2A412D79980EB35B639E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:98:77:25:01:e5:e5:f8:bd:2f:a0:ef:90:
                    2c:ae:bd:17:13:95:85:c4:f0:9b:b5:45:03:01:97:
                    56:5f:2e:71:36:ad:36:76:0c:89:ed:58:6d:c4:34:
                    9b:70:ef:9c:17:8b:f2:71:a1:b2:cb:f8:c5:7d:6f:
                    6a:4c:af:2f:53:e9:02:91:bc:3d:a9:88:b4:38:0a:
                    e3:79:cc:30:01:7a:9b:07:bb:cc:5a:73:04:da:65:
                    72:81:86:87:60:dc:4f:0b:8f:b9:72:ea:45:ad:ff:
                    b4:9b:63:ad:91:10:5f:4b:03:f1:4a:49:d1:7c:5e:
                    88:2b:e2:ce:e8:58:a6:7a:52:24:c0:a2:f3:fa:bc:
                    b4:d0:b7:e2:b8:75:3a:87:68:04:39:34:ce:c6:47:
                    53:d1:b0:1c:fa:8c:0c:96:7f:9d:0d:d0:06:e3:25:
                    8d:b1:cc:69:9b:16:ff:ed:c4:d2:d9:05:51:f0:33:
                    d8:fb:cc:fa:a5:ce:3c:3c:3c:02:46:33:31:98:84:
                    d4:ec:e3:cd:37:cf:30:2d:25:60:22:46:56:a2:5a:
                    5f:51:3b:65:d9:d6:d2:38:6c:be:7b:06:3e:48:b2:
                    9a:bd:fc:73:2e:80:0c:c6:00:d3:0f:b5:e2:b6:15:
                    12:c9:c9:c6:33:c6:e6:6b:4b:2b:7f:ba:ca:e5:36:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:CD:6B:B4:E8:47:7F:2C:CC:2A:41:2D:79:98:0E:B3:5B:63:9E
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LAvNa7ToR38szCpBLXmYDrNbY54.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:62:b9:a5:43:f9:57:9c:48:c5:44:59:76:4d:14:ee:9a:2d:
         17:da:54:b4:81:c6:fa:e7:73:a8:0b:66:c7:72:eb:2b:2a:cc:
         42:c7:14:91:77:51:5d:99:c1:e6:99:18:12:14:f6:f8:92:04:
         9c:ed:a0:d2:5d:8b:31:fb:7a:05:03:8b:31:a0:a9:8c:67:45:
         e4:37:4b:c8:b8:85:91:4f:8f:6c:18:a7:58:0f:ba:ec:6a:8d:
         6f:6f:e1:30:64:8f:4e:cd:15:f6:93:d6:2e:1d:56:ce:bb:be:
         84:05:6f:e9:c8:74:33:99:53:82:aa:52:d2:4b:8c:36:c3:4c:
         46:b6:29:4a:a7:80:68:cd:6b:23:14:01:87:e0:69:a6:0f:ce:
         17:51:07:e3:14:a2:61:fa:2c:92:63:9b:7a:21:5b:b5:0a:be:
         8c:d4:11:74:8b:e3:63:2c:ac:e9:e6:97:d4:9c:b3:de:27:71:
         6b:89:88:53:02:81:fb:e8:b2:ce:ac:0d:8a:e8:32:b6:42:e9:
         5d:c7:2c:3b:5e:2b:c2:28:84:26:ea:76:9c:09:8b:35:3e:5c:
         33:1a:d7:6a:34:6b:e0:37:68:7d:3a:d2:a1:41:0e:73:73:5b:
         07:24:6e:5a:50:2d:56:5d:1e:a7:1b:c3:ff:7b:02:9a:07:74:
         6d:30:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:01 2026 by rpki-client