Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa
File:                     XaXXlOUMhQT6ePtKKR_EMyIABzk.roa (raw, json)
Hash identifier:          CQ0JS7zOwGpTD7YMI5nL7apkRGzrSkatScOru8O89RM=
Subject key identifier:   5D:A5:D7:94:E5:0C:85:04:FA:78:FB:4A:29:1F:C4:33:22:00:07:39
Certificate issuer:       /CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
Certificate serial:       05
Authority key identifier: D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa
Signing time:             Tue 31 Mar 2026 08:48:26 +0000
ROA not before:           Tue 31 Mar 2026 08:48:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38649
IP address blocks:        192.50.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 12:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
        Validity
            Not Before: Mar 31 08:48:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5DA5D794E50C8504FA78FB4A291FC43322000739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:20:71:a1:2b:d5:38:1d:40:e1:f0:90:5d:
                    e2:04:25:57:7c:49:b2:46:f5:73:b8:55:ea:63:15:
                    20:cb:b3:58:94:29:d5:0d:15:51:a6:0e:68:22:05:
                    9a:e6:db:1a:6b:7f:f0:69:6f:72:8b:0b:02:83:63:
                    47:6d:2b:b9:a0:f3:c6:46:97:cb:42:86:31:a2:26:
                    85:28:b1:05:bd:b0:d2:e4:ee:e8:5d:8a:ce:b8:bc:
                    f5:cb:6c:1c:14:86:92:80:6e:d7:5b:49:fe:d3:85:
                    80:d2:8e:00:b0:62:cd:61:5c:e8:69:80:3d:6b:94:
                    06:38:b8:26:6b:2f:1d:23:62:cf:f7:d0:da:2c:ff:
                    fa:79:b7:36:bd:d3:7c:80:f6:d5:65:f7:53:1b:be:
                    7d:53:43:de:73:c4:ee:7d:5e:dd:70:85:93:22:30:
                    56:58:c6:9e:e5:2f:58:ef:7d:95:70:a1:33:b7:03:
                    76:c2:ae:4a:df:8d:5b:5c:aa:f9:ad:c8:30:02:33:
                    98:bb:29:78:77:8c:a6:6c:2d:20:8e:c5:b7:df:50:
                    c4:4d:78:62:76:ae:2d:df:6a:74:d0:b6:33:73:d7:
                    d2:ab:2d:90:f5:ea:e6:45:cd:75:6c:ec:a5:d6:be:
                    e4:71:5e:86:2c:ea:21:7f:fe:5b:34:8f:58:b3:4d:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A5:D7:94:E5:0C:85:04:FA:78:FB:4A:29:1F:C4:33:22:00:07:39
            X509v3 Authority Key Identifier:
                keyid:D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:5c:9b:82:cb:1b:fd:a2:34:5b:fd:ac:30:f1:e2:7a:c5:
         0b:cf:81:a9:3c:61:a2:56:46:02:39:7c:94:a7:b0:fe:c3:a1:
         e0:d5:6e:5d:7c:46:85:30:0f:d2:94:42:04:c9:63:7c:1a:fc:
         c9:20:c8:4f:27:18:bd:2c:60:ac:de:29:37:51:2a:0d:de:ee:
         26:cb:80:cb:f1:0c:a9:b6:b7:d0:3a:6f:33:fc:a0:ab:a3:6e:
         94:9b:c3:0f:ac:09:5c:cd:24:b9:dc:de:95:a1:c8:36:49:4b:
         64:92:bc:b5:ea:84:84:10:1b:e2:bb:dd:ec:e6:72:30:d7:43:
         bf:37:41:7c:f6:22:d5:03:3d:f4:47:16:f1:72:38:88:38:79:
         26:c8:b4:1e:3a:eb:4f:c4:2f:d7:b0:d3:8d:cf:0f:f2:67:74:
         31:28:df:04:1d:91:a6:bc:3c:5a:57:5c:a8:f4:17:95:94:fc:
         12:10:6a:a3:2b:e5:42:88:f2:57:be:77:fd:b9:61:9c:79:b3:
         6f:d7:bd:4e:29:50:7a:5a:13:4b:32:d1:45:85:f6:73:1b:eb:
         7d:1d:e0:89:00:da:e1:87:19:01:88:9f:a2:62:ac:da:cd:ae:
         95:f1:8d:42:55:5e:2b:2e:d7:8c:5b:a5:61:3e:cc:a0:1d:dc:
         73:60:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:52 2026 by rpki-client