Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rMctFItnQ14KrdW3V8gUodkewRk.roa
File:                     rMctFItnQ14KrdW3V8gUodkewRk.roa (raw, json)
Hash identifier:          ACgm9klrIS3wb7m0bZOiMXreEkJdmLf94Eli0Ze8Wmg=
Subject key identifier:   AC:C7:2D:14:8B:67:43:5E:0A:AD:D5:B7:57:C8:14:A1:D9:1E:C1:19
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       6C
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rMctFItnQ14KrdW3V8gUodkewRk.roa
Signing time:             Tue 31 Mar 2026 07:34:18 +0000
ROA not before:           Tue 31 Mar 2026 07:34:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        160.27.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 12:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Mar 31 07:34:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ACC72D148B67435E0AADD5B757C814A1D91EC119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:86:89:09:62:b5:c4:82:c4:61:4a:44:08:
                    89:cb:3a:25:fc:f5:49:d4:ee:0b:2e:be:54:46:b7:
                    53:0a:3f:cd:da:2e:6c:b1:87:d8:e2:ca:85:d0:be:
                    ad:3e:b7:63:0f:62:3f:7b:55:ad:fc:62:12:94:7e:
                    3d:7b:9e:01:3c:b5:9d:c3:e9:7d:18:ee:a7:de:74:
                    7e:a8:49:99:aa:fb:d3:c7:40:b0:e9:72:0b:5b:8b:
                    9f:7c:81:03:37:9b:25:8e:9b:cb:3f:d5:9f:24:87:
                    63:01:fe:63:0e:68:13:30:bb:f4:6e:60:62:00:97:
                    42:29:62:68:2c:dd:f8:b6:b1:3e:5a:7f:94:be:69:
                    51:4b:99:22:ac:f3:a8:6d:83:40:63:2f:6d:86:e4:
                    e1:fb:aa:a1:37:71:1b:f6:c2:5b:4b:41:cb:eb:b3:
                    d0:77:ad:a4:dc:f4:73:83:53:42:ad:1c:b9:c1:ae:
                    75:49:cb:eb:b6:95:22:af:6e:45:23:45:fb:f5:c0:
                    bb:d5:c1:39:4b:cc:1a:10:65:50:30:46:66:6b:f7:
                    e1:93:55:df:37:b6:94:67:b6:6d:22:15:a5:58:87:
                    e7:01:1f:f5:ba:ba:89:8a:5f:b4:12:78:55:9f:c9:
                    2e:a1:a7:b7:19:ae:80:94:a0:56:1a:c5:b2:4d:ae:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:2D:14:8B:67:43:5E:0A:AD:D5:B7:57:C8:14:A1:D9:1E:C1:19
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rMctFItnQ14KrdW3V8gUodkewRk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:9a:92:98:c4:0a:70:d2:a2:bf:d3:f6:7c:c0:b0:1e:78:
         ca:23:87:90:db:79:b8:cb:8a:96:b0:60:10:55:de:80:1f:8a:
         0b:a1:e8:72:74:43:72:3b:25:25:57:19:a8:a9:7b:04:9a:fb:
         ad:ae:47:f3:f8:b2:fa:b0:ec:b4:fc:42:74:3a:15:2f:47:a0:
         27:c3:35:be:ca:4f:48:54:ad:05:f5:1d:9b:45:42:0b:60:de:
         88:b1:9b:0a:d3:35:16:d4:e1:ab:91:72:b5:15:73:95:e1:0d:
         d5:cc:96:57:0f:43:60:8f:10:3f:a1:38:5e:17:76:ec:70:a3:
         72:83:0b:6a:51:91:ba:c0:ac:b0:98:ca:ed:7b:88:cf:45:eb:
         d3:0e:13:23:d1:76:29:02:1d:b4:87:00:95:ac:93:b3:54:77:
         de:b3:74:16:3b:6f:22:41:06:05:f7:6c:ed:4c:a2:0d:94:d2:
         db:ca:a9:d6:35:39:e5:f5:0e:a3:25:42:8c:6b:dc:42:b8:64:
         af:cb:92:c5:29:fe:73:fe:21:e0:05:d6:fd:eb:c5:ce:89:62:
         b4:eb:e0:a1:2b:e1:cf:94:d2:d8:32:90:4b:d8:d0:a9:17:82:
         9d:e1:dd:17:60:70:d9:d5:8c:4a:58:b1:59:6d:3a:fb:ae:26:
         91:73:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:31 2026 by rpki-client