Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/tBWJdz21G8ZEdyb30M8yp9NORl4.roa
File:                     tBWJdz21G8ZEdyb30M8yp9NORl4.roa (raw, json)
Hash identifier:          Zlo0LqcIPkOUe+A0iqVWBeubj6zYxwW13WnwssScsd4=
Subject key identifier:   B4:15:89:77:3D:B5:1B:C6:44:77:26:F7:D0:CF:32:A7:D3:4E:46:5E
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0132
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tBWJdz21G8ZEdyb30M8yp9NORl4.roa
Signing time:             Tue 31 Mar 2026 07:36:45 +0000
ROA not before:           Tue 31 Mar 2026 07:36:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        27.133.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B41589773DB51BC6447726F7D0CF32A7D34E465E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:00:b4:9f:74:0f:4f:c3:59:d4:04:a6:71:
                    f0:10:2d:4f:cd:0d:e1:f8:0b:63:86:34:1f:2a:f4:
                    1d:39:7a:47:53:82:7d:c5:44:0e:87:f0:85:3b:40:
                    8b:dd:dd:d9:7c:33:32:83:52:f1:4c:b7:c1:c7:0d:
                    f7:eb:29:0e:7f:f4:d6:1e:a2:6b:d3:1f:96:1d:cc:
                    f3:47:fa:c3:90:43:5f:d5:8f:92:17:82:55:9d:4b:
                    44:b6:98:ae:97:6f:0f:a0:77:ea:39:dd:31:cf:c2:
                    f2:61:3b:b3:85:97:ae:0d:e9:66:cc:68:e6:d2:4a:
                    a9:9c:c2:2d:3c:a0:1e:cc:39:c0:3d:cf:56:dc:83:
                    73:fb:b2:eb:5d:f2:2e:3a:96:4d:3b:7a:01:0e:15:
                    75:15:58:4b:4e:2e:40:66:ea:65:ed:d6:a2:c0:df:
                    ba:0c:59:7d:23:c1:8f:0f:ab:d1:ef:c1:ca:a0:88:
                    ab:48:2d:ba:30:8b:13:55:c2:ff:27:36:1b:71:88:
                    e4:3f:23:8f:92:57:4f:bd:e3:bc:dd:f8:51:30:3e:
                    04:6b:35:28:a8:dd:e9:ac:a9:38:f7:bc:cc:03:1d:
                    c5:f0:1d:55:0c:e0:b5:46:b7:c5:91:f5:43:b4:1f:
                    70:2c:b2:79:31:92:84:76:95:7e:28:26:6e:4a:a8:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:89:77:3D:B5:1B:C6:44:77:26:F7:D0:CF:32:A7:D3:4E:46:5E
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/tBWJdz21G8ZEdyb30M8yp9NORl4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:89:31:81:73:69:05:44:6e:3e:a1:70:03:22:00:b1:fe:
         9b:9f:00:bf:7b:6b:e6:04:b4:c9:d6:46:e4:a5:3f:ed:e5:ed:
         4d:bb:75:2c:f3:e7:f7:7b:f6:c8:ff:cf:f3:4f:de:5e:33:6a:
         59:09:1c:eb:dc:c9:bf:44:b2:02:04:a0:20:7f:b0:c7:d3:b0:
         93:56:bf:00:d8:67:d9:78:65:1f:83:71:61:1a:c1:f4:10:9b:
         ec:44:ce:6a:7a:d3:a9:a6:37:0b:ff:5f:04:e7:60:e0:ad:5c:
         1e:3e:38:ba:92:65:c9:d5:62:c1:04:91:2c:85:23:0c:fd:65:
         31:bc:9a:35:b6:ee:cc:55:5b:7e:f2:9a:32:a9:5c:30:4d:0e:
         06:71:eb:ea:8d:5d:04:64:95:c2:33:50:57:1d:3a:67:13:62:
         83:be:1e:cd:29:19:8b:44:ac:dd:75:a9:bd:e2:0c:86:12:0c:
         be:43:4c:5f:71:65:ed:e1:0c:1d:2c:71:9d:28:b6:43:64:0b:
         4f:65:db:7d:16:e7:aa:35:c6:45:23:24:0e:3a:b1:1a:76:c1:
         ec:01:ff:58:c2:fa:61:2b:c6:79:09:d6:e2:6f:2b:52:a5:de:
         d9:63:9d:b3:a9:81:37:75:67:b0:3e:eb:16:1e:3c:04:84:bd:
         63:61:a5:5f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICATIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNjAzMzEw
NzM2NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI0MTU4OTc3M0RCNTFC
QzY0NDc3MjZGN0QwQ0YzMkE3RDM0RTQ2NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg0QC0n3QPT8NZ1ASmcfAQLU/NDeH4C2OGNB8q9B05ekdTgn3F
RA6H8IU7QIvd3dl8MzKDUvFMt8HHDffrKQ5/9NYeomvTH5YdzPNH+sOQQ1/Vj5IX
glWdS0S2mK6Xbw+gd+o53THPwvJhO7OFl64N6WbMaObSSqmcwi08oB7MOcA9z1bc
g3P7sutd8i46lk07egEOFXUVWEtOLkBm6mXt1qLA37oMWX0jwY8Pq9HvwcqgiKtI
LbowixNVwv8nNhtxiOQ/I4+SV0+947zd+FEwPgRrNSio3emsqTj3vMwDHcXwHVUM
4LVGt8WR9UO0H3AssnkxkoR2lX4oJm5KqA3FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUtBWJdz21G8ZEdyb30M8yp9NORl4wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ3L3RCV0pkejIxRzhaRWR5YjMwTTh5cDlOT1JsNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUbhYAwDQYJKoZIhvcNAQELBQADggEB
AA3ZiTGBc2kFRG4+oXADIgCx/pufAL97a+YEtMnWRuSlP+3l7U27dSzz5/d79sj/
z/NP3l4zalkJHOvcyb9EsgIEoCB/sMfTsJNWvwDYZ9l4ZR+DcWEawfQQm+xEzmp6
06mmNwv/XwTnYOCtXB4+OLqSZcnVYsEEkSyFIwz9ZTG8mjW27sxVW37ymjKpXDBN
DgZx6+qNXQRklcIzUFcdOmcTYoO+Hs0pGYtErN11qb3iDIYSDL5DTF9xZe3hDB0s
cZ0otkNkC09l230W56o1xkUjJA46sRp2wewB/1jC+mErxnkJ1uJvK1Kl3tljnbOp
gTd1Z7A+6xYePASEvWNhpV8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:51 2026 by rpki-client