Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/luMK2p3VmG0AdwQdB6JX5CtCcBY.roa
File:                     luMK2p3VmG0AdwQdB6JX5CtCcBY.roa (raw, json)
Hash identifier:          DzB3diLA9F8CNSzhTrX+V30KzGxFkuzWhLHnih7dduQ=
Subject key identifier:   96:E3:0A:DA:9D:D5:98:6D:00:77:04:1D:07:A2:57:E4:2B:42:70:16
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       97
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/luMK2p3VmG0AdwQdB6JX5CtCcBY.roa
Signing time:             Tue 10 Feb 2026 07:43:04 +0000
ROA not before:           Tue 10 Feb 2026 07:43:04 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        210.193.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 21:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Feb 10 07:43:04 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=96E30ADA9DD5986D0077041D07A257E42B427016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:e7:32:43:63:1c:28:97:ae:25:df:16:bf:
                    c1:f3:ba:2c:8c:f3:e9:82:84:6d:98:df:0a:16:64:
                    86:37:c5:79:34:8f:f6:92:e3:f1:38:83:ce:72:27:
                    23:79:a1:45:f5:8f:41:73:38:b5:3a:3d:b2:cb:32:
                    83:a6:a9:f6:83:a9:b9:74:03:43:b6:78:b7:6d:f5:
                    f0:47:3f:10:78:64:6d:d9:e4:ce:3c:b2:40:c7:53:
                    47:a0:da:05:40:07:e6:13:7c:ae:80:b6:f7:82:5a:
                    24:94:00:11:9d:a3:6e:9b:f1:43:a0:38:32:92:a7:
                    6f:08:c0:95:72:04:c0:84:5a:15:48:f8:d5:6e:14:
                    77:b9:09:de:d5:69:9a:25:b3:a5:e2:67:ae:6d:4f:
                    e0:bb:ed:f0:33:71:55:ec:e6:5d:23:78:db:44:cc:
                    fe:52:39:fd:44:fb:4f:66:9e:12:02:23:5a:c6:c5:
                    19:98:11:f8:47:90:bf:05:dd:c8:df:a1:bc:6b:cc:
                    13:9d:5c:68:86:aa:b3:5f:65:51:26:45:37:00:0d:
                    28:a5:92:7f:40:9b:6c:b2:ee:8f:ee:6f:42:1f:67:
                    0d:0d:3b:5c:23:c6:99:3e:3a:19:67:d1:38:d1:97:
                    f3:a0:1c:2e:15:f8:4c:47:98:0a:6a:d7:0d:e1:3f:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E3:0A:DA:9D:D5:98:6D:00:77:04:1D:07:A2:57:E4:2B:42:70:16
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/luMK2p3VmG0AdwQdB6JX5CtCcBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:4d:79:dc:20:98:c2:8c:5e:fb:f1:b1:4f:46:c3:3c:3f:
         ba:3b:54:d3:49:25:56:47:1a:da:98:15:55:1c:05:55:d1:fe:
         58:0a:4a:88:93:47:c5:1a:11:aa:93:ff:a5:ba:38:1b:84:88:
         d6:05:f2:ad:5a:ab:c5:e8:22:60:a2:94:78:eb:69:58:c0:af:
         1f:28:bc:97:cf:4b:45:ce:c7:56:f4:e7:b9:76:86:23:ea:fa:
         6c:fe:44:40:50:74:76:c9:c0:2b:f7:0a:f0:a7:14:5b:33:12:
         7e:38:a5:7e:63:8b:15:66:5e:37:05:97:e0:2c:90:53:58:23:
         36:9f:5b:18:8a:0c:46:6b:ea:2e:5a:18:3a:b1:b5:50:a0:fa:
         72:0c:a1:78:4d:e2:65:f5:58:d7:aa:3e:b8:e9:b3:f3:a5:85:
         52:30:bd:8b:fd:c4:8a:73:44:2f:95:6b:aa:7d:8b:fe:64:42:
         d9:c1:cd:f8:97:0b:e9:a7:b6:98:6b:4d:f4:8c:66:36:91:34:
         fa:da:5e:4a:21:92:f5:ca:a4:f0:78:b6:78:b3:a4:33:bc:61:
         7b:23:84:28:30:23:20:76:b0:61:2e:81:3b:26:69:46:94:a0:
         db:05:20:d5:7e:de:0c:ec:95:f7:a0:4e:fa:52:18:ee:22:ba:
         ca:30:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:45:45 2026 by rpki-client