Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/514/lmMmj_SpAo4YTCZBC7EN7KhcRw4.roa
File:                     lmMmj_SpAo4YTCZBC7EN7KhcRw4.roa (raw, json)
Hash identifier:          dZB4oqoZpgG85wRedHKS9c5zlb7MHlyfLQomjeskC6k=
Subject key identifier:   96:63:26:8F:F4:A9:02:8E:18:4C:26:41:0B:B1:0D:EC:A8:5C:47:0E
Certificate issuer:       /CN=FCEBE7BD1B88EB1520DA98D5692E673E0A4DD2AF
Certificate serial:       02
Authority key identifier: FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_OvnvRuI6xUg2pjVaS5nPgpN0q8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/lmMmj_SpAo4YTCZBC7EN7KhcRw4.roa
Signing time:             Thu 02 Apr 2026 09:21:50 +0000
ROA not before:           Thu 02 Apr 2026 09:21:50 +0000
ROA not after:            Fri 02 Apr 2027 09:01:56 +0000
asID:                     55387
IP address blocks:        27.253.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_OvnvRuI6xUg2pjVaS5nPgpN0q8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCEBE7BD1B88EB1520DA98D5692E673E0A4DD2AF
        Validity
            Not Before: Apr  2 09:21:50 2026 GMT
            Not After : Apr  2 09:01:56 2027 GMT
        Subject: CN=9663268FF4A9028E184C26410BB10DECA85C470E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:df:3c:d1:7e:7c:5c:71:82:cd:05:8e:74:
                    bd:d8:cf:34:79:4b:22:4e:5b:fe:90:53:9f:58:a9:
                    87:6f:77:3c:12:48:dc:15:8c:8b:15:ed:04:ae:87:
                    4a:65:09:da:97:b6:14:6c:a7:4e:92:fe:67:b9:f7:
                    21:25:5c:11:45:76:40:91:95:c9:db:a1:17:49:74:
                    fc:c9:3b:fb:09:86:25:98:d4:22:a3:f0:50:5d:8e:
                    4f:88:2c:1d:5e:dc:4d:d2:f4:3d:da:bb:22:ef:e9:
                    5e:81:eb:01:21:d3:6f:eb:e3:ec:7c:91:5e:a9:3a:
                    2a:93:3d:56:da:8d:c6:19:57:d3:63:46:0a:49:6d:
                    ce:d5:a3:c7:9d:91:5b:ca:b7:fe:56:ec:ec:e5:c3:
                    65:5f:3f:97:67:a6:1f:fe:00:3e:31:cf:42:43:bd:
                    0f:dc:d7:aa:e3:53:55:f2:f5:c0:3c:4d:6d:41:0f:
                    82:b0:99:2c:c0:a6:bd:f0:77:86:ba:76:29:bb:e4:
                    c1:02:bc:99:09:b9:ed:02:0e:78:e1:d9:75:02:71:
                    9d:ab:13:de:b1:ef:c6:59:1d:2f:04:73:3c:3d:85:
                    60:14:0b:3a:f4:c6:7b:0e:92:89:95:e6:27:da:89:
                    63:74:a6:5e:47:f4:e9:12:28:f9:18:f4:58:07:99:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:26:8F:F4:A9:02:8E:18:4C:26:41:0B:B1:0D:EC:A8:5C:47:0E
            X509v3 Authority Key Identifier:
                keyid:FC:EB:E7:BD:1B:88:EB:15:20:DA:98:D5:69:2E:67:3E:0A:4D:D2:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/_OvnvRuI6xUg2pjVaS5nPgpN0q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_OvnvRuI6xUg2pjVaS5nPgpN0q8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/514/lmMmj_SpAo4YTCZBC7EN7KhcRw4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.253.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:29:63:86:5d:7c:30:6f:50:92:f8:ad:fd:a1:bf:14:2c:
         81:35:0d:c2:20:a8:a8:96:6b:9f:40:55:78:11:0e:e1:93:7d:
         c0:9b:c5:45:11:47:61:a4:ca:a6:d3:75:03:3d:0d:da:a8:f8:
         38:f6:5f:ea:2d:84:c9:72:fd:bc:19:af:46:9d:fc:c3:d2:4f:
         5e:7e:6b:67:35:40:ee:94:81:13:56:03:6d:b6:67:7c:97:83:
         88:c3:a1:77:b6:b6:bb:a4:6f:a9:7a:75:57:0d:e4:67:ee:21:
         75:d3:0b:53:2f:9b:55:e1:85:22:f5:f4:49:0b:1e:68:63:58:
         d9:a9:21:d8:bc:93:d4:d9:37:ab:3c:a2:27:f9:61:40:06:4e:
         ed:95:dd:3c:3c:b2:61:a0:5c:f1:e6:5b:7e:19:45:36:d9:5a:
         00:1e:41:9c:b8:f6:60:b1:80:ee:ec:af:23:7a:f3:f2:5d:71:
         44:bc:2d:b3:e8:32:2f:f9:7e:06:94:17:8b:98:db:eb:09:8d:
         92:ab:ea:2c:94:8d:38:fd:31:ef:83:f1:51:4c:95:b5:3c:14:
         41:e8:14:17:14:a7:26:1b:e4:6c:0f:7a:c1:81:95:04:32:25:
         ad:50:d8:92:51:29:83:01:2f:ac:0d:d6:e0:ca:26:d4:48:fc:
         54:11:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:44:41 2026 by rpki-client