Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/pZ77215qjtq6SrENgwxv8ve8cE0.roa
File:                     pZ77215qjtq6SrENgwxv8ve8cE0.roa (raw, json)
Hash identifier:          8oZDFzUB5dDuBRCDCta9zrR084Ogr9giLwf3fGM22e0=
Subject key identifier:   A5:9E:FB:DB:5E:6A:8E:DA:BA:4A:B1:0D:83:0C:6F:F2:F7:BC:70:4D
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       5C
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/pZ77215qjtq6SrENgwxv8ve8cE0.roa
Signing time:             Tue 31 Mar 2026 08:34:07 +0000
ROA not before:           Tue 31 Mar 2026 08:34:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        27.34.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A59EFBDB5E6A8EDABA4AB10D830C6FF2F7BC704D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:6b:f9:28:dc:7f:1c:2d:bf:b1:e3:6c:79:
                    7f:d3:99:11:19:48:0b:2d:a4:c3:3d:4c:8d:0e:3b:
                    37:41:81:63:34:dd:87:34:4f:fd:4e:9f:24:9c:27:
                    54:14:dc:14:4b:48:68:a4:8c:a1:a9:89:55:f1:8f:
                    8f:6f:6f:c9:ef:54:ce:a8:61:36:d2:93:a0:94:dc:
                    a4:80:f9:f1:63:a2:7f:1e:74:b7:3c:b8:82:0f:6e:
                    18:1d:5c:e4:8a:d5:ee:b3:b8:a9:0d:1e:61:96:2c:
                    f2:c8:19:90:f0:79:6d:2c:b0:a9:51:45:70:c9:f6:
                    b8:b7:60:1b:af:4d:00:89:76:30:d3:99:c4:bd:53:
                    79:09:de:13:ec:2a:1e:77:1c:83:89:e8:a8:0c:24:
                    0f:38:c9:cc:4e:02:2f:bb:56:6d:90:c0:80:06:73:
                    4b:e5:5d:f9:3b:dc:e6:cd:36:a0:41:fa:cd:74:51:
                    5a:32:98:f8:36:a6:f9:eb:dc:ff:0f:c0:4f:e7:b6:
                    78:81:4a:d6:bb:d1:04:db:3f:e0:ba:1a:0c:61:94:
                    f1:4f:14:df:0e:8a:01:fb:8e:ce:9e:a2:b9:eb:fd:
                    27:5d:6e:38:e4:79:3b:81:12:64:a7:55:b9:e0:a9:
                    74:3e:73:9a:4d:16:b3:fe:08:c2:a0:c8:72:78:7a:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:FB:DB:5E:6A:8E:DA:BA:4A:B1:0D:83:0C:6F:F2:F7:BC:70:4D
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/pZ77215qjtq6SrENgwxv8ve8cE0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:18:89:20:d4:06:77:23:d6:40:21:c5:c1:73:a9:93:5c:
         6d:35:d4:9b:3c:ac:a0:8d:a9:47:41:d2:12:ea:39:7b:18:68:
         43:60:89:b9:2e:78:db:98:4c:6e:43:b4:5b:68:a1:20:50:82:
         6b:99:48:af:68:50:36:9c:a8:be:c2:23:36:d7:a1:45:de:55:
         4a:55:bc:e8:6c:fe:fa:76:fd:a7:59:4d:22:05:dc:43:40:b3:
         4f:6b:3a:b6:aa:63:06:27:54:7a:98:56:45:f7:36:da:1d:3c:
         ae:5a:e5:de:1a:b6:6b:90:d9:12:fc:cd:26:98:c9:2a:e8:99:
         06:45:7e:ec:d5:fa:5f:33:68:c7:e7:7b:5d:12:04:41:5f:fc:
         92:7c:54:ef:e1:49:31:34:52:8f:12:93:4b:d0:71:dc:39:fd:
         fb:80:66:16:c7:40:93:8c:2e:73:ea:cc:30:e7:7a:ba:08:b9:
         e8:ae:74:a6:47:0d:9e:75:c4:10:a3:c5:af:fa:c4:1e:fb:38:
         86:2a:6d:34:24:26:15:91:ce:cf:a5:bd:82:e4:24:bc:1b:ed:
         f3:50:68:35:22:07:f4:73:df:8b:e3:24:c0:2a:c9:28:76:31:
         ea:e3:a7:4f:d5:8c:ae:26:11:35:d1:f8:b7:07:51:a1:4e:ed:
         aa:9f:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:46 2026 by rpki-client