Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/lkbqSSYkAPci6IcHJCOoHqYvYGI.roa
File:                     lkbqSSYkAPci6IcHJCOoHqYvYGI.roa (raw, json)
Hash identifier:          bRr6JZcR+MRhCW6RRbYCyXU1hEiHmFWsjJlEl0PXLac=
Subject key identifier:   96:46:EA:49:26:24:00:F7:22:E8:87:07:24:23:A8:1E:A6:2F:60:62
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       026D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/lkbqSSYkAPci6IcHJCOoHqYvYGI.roa
Signing time:             Sun 01 Feb 2026 01:38:22 +0000
ROA not before:           Sun 01 Feb 2026 01:38:22 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        27.132.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:38:22 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=9646EA49262400F722E887072423A81EA62F6062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:99:2f:6d:ef:c3:0f:15:a8:9b:9a:7d:71:
                    d2:da:86:6f:38:2f:6a:4b:e8:2b:37:69:9a:d4:ff:
                    97:00:84:30:fe:7f:6d:8c:19:50:d8:bd:75:fe:9a:
                    a5:ba:43:f5:3b:6f:ff:a0:c5:b4:2b:5f:1b:38:96:
                    48:c5:4a:e1:37:ea:de:89:08:25:26:5d:48:7e:60:
                    7f:fc:02:ca:d7:b1:16:7c:ef:1c:52:16:51:be:a2:
                    40:16:34:98:af:bc:a8:3b:49:74:23:d5:13:f8:83:
                    a5:92:0a:ab:59:27:14:23:85:59:81:5b:84:f6:4f:
                    9b:ad:e8:00:c7:85:70:c8:38:e1:87:e3:b1:5e:45:
                    c9:26:3f:b9:43:ad:29:a1:d2:1d:e4:70:30:64:c0:
                    f0:d0:30:8f:04:51:d2:7a:96:0b:0c:e5:9b:c5:9d:
                    da:2f:85:c7:3a:82:19:44:13:28:3f:15:68:83:79:
                    b5:6c:22:0c:02:65:70:8e:a8:6e:8b:1e:60:00:37:
                    a6:ae:29:e5:81:9c:ba:c0:f1:f7:6a:03:d7:53:4d:
                    26:d0:7f:ad:b1:3a:3e:a0:39:10:98:e8:5a:54:c9:
                    a7:e2:90:ec:7f:4d:e8:8a:c9:e2:4e:b5:74:27:c7:
                    17:99:81:3a:00:03:f1:4b:c4:62:f7:84:9a:45:ce:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:EA:49:26:24:00:F7:22:E8:87:07:24:23:A8:1E:A6:2F:60:62
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/lkbqSSYkAPci6IcHJCOoHqYvYGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:92:de:2f:4b:40:0e:b4:46:98:aa:fe:48:82:8d:9a:62:
         15:4c:80:c4:03:a8:36:96:d2:f1:f2:88:14:37:a7:a3:0a:05:
         8b:44:f8:e1:29:6a:48:f7:53:b3:b4:a9:5d:e6:3e:d4:0e:f8:
         8a:07:1a:f1:c2:a1:c6:74:7e:e2:ab:ee:42:1c:f3:11:84:75:
         36:1b:1f:18:e0:3b:ac:19:aa:68:a6:ad:ba:0a:e0:a2:cc:32:
         9a:35:82:2e:8f:45:4f:38:fa:97:36:9c:84:51:c0:e1:79:93:
         e3:b6:8b:3d:cf:dd:c8:a6:fd:16:fe:e5:8a:4e:a1:b0:e0:84:
         78:c8:aa:07:ee:c8:2b:1b:93:a2:ba:98:d5:8d:15:f7:b2:3f:
         94:26:f4:73:0a:07:08:01:7a:65:52:b6:d2:0e:68:55:ca:1c:
         2a:2c:84:95:b9:24:81:10:c6:e8:9f:70:a0:1a:fc:75:22:99:
         69:57:09:10:6e:04:12:f7:ee:70:d5:9d:d5:97:bc:7b:a5:c7:
         b2:5c:eb:1f:48:12:97:cf:e8:54:55:68:4c:54:cc:d8:38:11:
         ec:e3:6e:a2:5a:c3:a9:e2:99:d4:30:09:90:ed:b8:3f:48:1d:
         91:a2:34:20:93:11:40:54:ab:f0:2f:69:78:32:b5:fe:1c:ff:
         3f:d7:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:16 2026 by rpki-client