Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Nc8CkEf7Wzd2fLZzdTz5it2KtI8.roa
File:                     Nc8CkEf7Wzd2fLZzdTz5it2KtI8.roa (raw, json)
Hash identifier:          GD8DYL0su1/r/OHji4/B7D/DrBp2pzn+PZp1udepatY=
Subject key identifier:   35:CF:02:90:47:FB:5B:37:76:7C:B6:73:75:3C:F9:8A:DD:8A:B4:8F
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       017A
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Nc8CkEf7Wzd2fLZzdTz5it2KtI8.roa
Signing time:             Tue 31 Mar 2026 07:38:09 +0000
ROA not before:           Tue 31 Mar 2026 07:38:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35CF029047FB5B37767CB673753CF98ADD8AB48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:07:a2:4c:6f:4a:e6:21:cb:b3:dc:4a:bd:
                    26:8d:0f:4f:c8:bd:3b:b0:ce:62:3b:bf:de:ce:a3:
                    02:87:0d:81:ae:9a:cf:1d:6f:b8:a6:16:3a:6c:62:
                    92:a5:60:7e:19:7e:fb:8f:71:ab:2c:d5:59:5f:1f:
                    b7:3d:5d:04:94:d7:ac:f8:c6:75:81:20:77:2f:85:
                    2d:2f:82:6a:b8:74:3d:65:70:7d:0b:06:df:8c:e3:
                    0c:12:2c:ee:2b:36:81:49:2b:c0:05:b3:ee:9f:81:
                    af:ee:71:8d:db:32:76:b0:70:34:18:d7:fc:db:60:
                    5b:68:be:e1:c4:7d:28:03:c4:df:6a:a3:ab:f3:73:
                    33:40:6a:ae:67:d1:2c:e2:90:3d:75:41:30:d9:98:
                    17:aa:c0:c9:8b:6f:0b:13:f5:a0:49:30:dd:ce:0d:
                    c8:8f:ad:47:56:ed:16:fe:aa:89:1f:e4:98:33:24:
                    45:60:30:bd:d6:e7:0a:9f:af:63:82:92:38:e8:4e:
                    fa:db:19:a5:0d:7f:54:52:5f:2c:a7:59:23:21:fe:
                    18:ef:2a:54:87:ff:58:b0:f4:01:2f:65:d1:51:e1:
                    31:42:fe:0a:7d:55:cb:62:32:89:88:1c:b9:04:4f:
                    00:7e:87:62:c1:dc:f8:b4:11:26:61:48:6b:9b:61:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:02:90:47:FB:5B:37:76:7C:B6:73:75:3C:F9:8A:DD:8A:B4:8F
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Nc8CkEf7Wzd2fLZzdTz5it2KtI8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:97:9e:ac:a4:03:26:29:5a:d4:27:cd:c0:92:19:57:fe:dc:
         07:54:3f:04:d6:92:f5:80:ec:43:2f:ba:a6:40:6c:63:9e:44:
         a4:0a:2e:8c:ea:8e:ba:35:a0:5a:38:f3:0b:07:74:0c:8b:3f:
         fd:8d:42:cd:b1:2d:09:cc:b3:19:b5:be:1d:63:e7:b4:69:87:
         2d:d8:74:68:e5:30:f0:14:ba:cd:91:23:6d:4e:34:7b:3e:f1:
         b3:4a:19:47:23:29:2c:c0:b2:dd:de:44:68:45:5c:32:d3:5d:
         67:77:02:a6:89:8a:21:83:40:71:1d:e4:6c:00:19:55:e9:1b:
         a6:78:ff:9e:40:e3:db:e8:e5:02:3e:a8:7a:ef:20:96:1b:b2:
         73:6d:99:b6:76:51:87:13:b7:74:76:73:89:cb:68:86:35:37:
         49:4b:e8:d0:b1:ed:8d:16:ac:0b:2d:12:7e:5d:ab:8c:c4:2a:
         89:38:1a:15:37:ca:60:f8:b7:cd:ef:7a:66:54:d8:66:96:a0:
         57:a5:b9:49:de:c8:85:38:da:58:01:ce:e2:80:5b:f8:1e:f4:
         57:d4:e0:45:ea:a8:af:80:68:8d:34:1f:9a:37:8b:b5:22:c7:
         84:bb:30:8a:23:57:a1:17:f2:25:f6:a0:6d:d7:ed:67:11:17:
         dd:6f:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:31 2026 by rpki-client