Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/D-izf2OOYVCgVaOBPLfQH_j8fvo.roa
File:                     D-izf2OOYVCgVaOBPLfQH_j8fvo.roa (raw, json)
Hash identifier:          KQtjpdPOf6aJdthoMRdBC1Wj105Fy4k/R9PIddDqU3Q=
Subject key identifier:   0F:E8:B3:7F:63:8E:61:50:A0:55:A3:81:3C:B7:D0:1F:F8:FC:7E:FA
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       018A
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/D-izf2OOYVCgVaOBPLfQH_j8fvo.roa
Signing time:             Tue 31 Mar 2026 07:38:16 +0000
ROA not before:           Tue 31 Mar 2026 07:38:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.48.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0FE8B37F638E6150A055A3813CB7D01FF8FC7EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:06:3d:99:f7:3f:3d:b7:55:bd:df:ff:3b:
                    fb:7c:9e:56:10:5f:57:95:7b:5e:ed:c6:be:11:e0:
                    8e:3e:7f:cd:6f:bd:53:09:91:43:33:da:fc:0b:05:
                    61:b5:59:02:d1:55:eb:55:dd:d3:2d:58:4a:7e:77:
                    45:c4:b3:7a:21:8e:7d:ff:a4:9c:1d:aa:35:57:bc:
                    7e:22:f9:96:27:a6:91:b2:57:54:c7:ee:c6:29:c4:
                    a0:12:92:5f:0b:b9:e6:3d:d7:2a:21:cf:be:5d:56:
                    58:4d:d9:f4:bd:83:0a:67:30:2e:39:ab:47:be:82:
                    33:38:cc:6b:6f:75:e8:ee:b7:2b:18:37:1e:a0:3b:
                    2c:b0:77:4d:35:78:13:d3:66:1c:23:20:06:95:82:
                    3c:d8:59:bf:3f:88:0b:3c:8d:39:2d:e7:e8:20:38:
                    77:5d:f5:76:b2:1d:af:d0:cc:71:1e:48:b3:d5:f2:
                    d1:27:11:7e:9d:66:9e:71:48:48:75:bf:f5:c1:00:
                    24:35:69:f7:c4:fa:10:a9:14:ee:64:1a:f0:12:16:
                    d0:4b:40:15:8e:d1:02:a9:ca:ce:86:94:51:2c:1b:
                    88:57:04:9f:22:30:72:52:a0:c9:6d:9e:08:cb:43:
                    6b:7b:f9:4e:8b:d0:cb:36:9b:df:0b:82:bd:83:2a:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:B3:7F:63:8E:61:50:A0:55:A3:81:3C:B7:D0:1F:F8:FC:7E:FA
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/D-izf2OOYVCgVaOBPLfQH_j8fvo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:2c:c6:85:9d:f8:37:7a:55:83:79:df:0a:03:1e:68:04:
         2f:b7:3d:0e:6e:e2:c5:0d:e4:19:53:50:ff:7e:a8:03:8d:a8:
         57:04:1e:c0:89:34:ff:67:d2:cd:e8:94:91:f4:89:e1:af:ab:
         14:19:32:86:d9:10:ae:fb:36:26:85:bb:80:72:47:24:32:bb:
         a2:7d:80:2e:b9:43:4f:dd:9c:b1:1a:72:1b:21:9e:7c:e9:90:
         78:56:30:ea:41:61:4e:21:ec:6f:54:26:82:2e:90:c6:49:4e:
         72:80:ba:64:13:4b:db:4a:fe:96:c7:0e:a2:21:34:ee:62:c3:
         c1:b2:5e:b7:58:32:78:dd:d2:a3:17:9e:5c:49:75:e2:e9:2a:
         2a:c2:bc:13:82:4d:63:81:e5:31:d6:1d:10:41:68:b4:73:27:
         d0:ce:1b:ab:dc:53:b3:c3:d5:bb:39:61:80:d8:c9:37:cb:ee:
         f0:b6:fb:51:f8:45:55:96:1f:90:fc:c9:70:73:f2:50:49:8a:
         29:9b:12:f8:e7:c9:c8:66:e7:0a:95:b8:9a:c6:3e:b7:4b:78:
         71:c6:e5:c6:cb:6c:6a:c1:e8:38:4d:e9:4e:46:2c:19:27:d8:
         99:ca:d1:42:e6:ed:80:b5:8d:6c:bd:d5:d7:c2:94:79:53:3b:
         8f:a4:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:35 2026 by rpki-client