Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Tct17lw4pAElot9T2qX2xeiSeBQ.roa
File:                     Tct17lw4pAElot9T2qX2xeiSeBQ.roa (raw, json)
Hash identifier:          d2JSODG8jMOO7qga7iGCuSLAw/ctt6FON485NYMnCh0=
Subject key identifier:   4D:CB:75:EE:5C:38:A4:01:25:A2:DF:53:DA:A5:F6:C5:E8:92:78:14
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       017B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Tct17lw4pAElot9T2qX2xeiSeBQ.roa
Signing time:             Tue 31 Mar 2026 07:38:09 +0000
ROA not before:           Tue 31 Mar 2026 07:38:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4DCB75EE5C38A40125A2DF53DAA5F6C5E8927814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:ac:a3:ae:7a:1f:27:af:11:2d:f0:6e:1e:
                    5b:eb:f3:e4:17:45:48:d5:a4:2e:ad:a8:e5:1b:cb:
                    e1:3d:41:5b:e6:5a:eb:9e:e2:45:5d:bc:68:56:0b:
                    79:2e:93:d3:91:03:be:d0:cb:ef:15:93:27:e2:cb:
                    58:b3:f4:33:6a:52:87:e0:24:20:13:53:ab:1f:0f:
                    c1:5c:ee:f0:12:61:20:99:c0:66:d0:f9:2a:91:8c:
                    f0:b0:9c:5e:02:d8:a0:11:3a:e6:35:9f:5c:e3:dc:
                    ee:65:e5:77:48:f4:08:d7:d9:77:77:f2:40:5c:83:
                    f3:a2:57:2b:92:cb:ff:5e:36:af:dc:09:96:d3:fc:
                    d8:ee:ad:2b:31:38:06:53:bd:fd:8b:d6:ea:bc:d0:
                    77:d3:54:7f:c4:62:6f:dd:77:c3:c6:9e:51:fc:27:
                    86:a3:41:df:b9:ba:6a:16:58:ee:b0:1a:a2:88:3a:
                    f2:c5:06:ae:16:a5:ac:5b:f7:fb:ef:42:d0:fe:35:
                    19:44:2f:f9:5a:c6:92:f9:5a:03:8c:f4:eb:14:82:
                    1b:17:d7:55:7e:6c:79:6c:bd:a5:2e:c0:cb:40:06:
                    7e:dd:a3:81:3c:ad:38:6d:e6:eb:38:38:68:87:29:
                    27:31:ff:1f:03:2f:ef:dc:a5:7e:fe:2e:42:ff:90:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:75:EE:5C:38:A4:01:25:A2:DF:53:DA:A5:F6:C5:E8:92:78:14
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Tct17lw4pAElot9T2qX2xeiSeBQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:99:11:71:1b:d6:8e:18:b8:23:d8:91:ab:8c:4c:19:43:
         a4:27:f1:99:fb:40:47:41:1b:86:df:44:a9:e6:b2:e2:1e:83:
         94:1e:81:e1:38:07:fc:6c:57:06:7f:ef:1f:62:4e:3e:fa:d5:
         8b:8a:cb:19:f1:5d:2f:f4:26:b3:aa:45:85:50:32:0e:4f:11:
         96:6e:23:38:68:e7:68:02:76:ba:0a:83:39:14:44:39:00:d3:
         3e:f1:78:44:a7:e8:20:ce:20:eb:3e:d8:70:0a:6f:55:31:13:
         58:41:5d:73:db:9a:61:5a:e6:4f:75:92:2a:27:77:14:b0:43:
         20:d3:02:09:97:06:45:bb:3f:3a:51:1f:8f:c3:38:eb:f2:d7:
         2b:ec:a3:18:ae:dd:08:ed:ac:a9:86:b5:12:18:75:a6:f6:26:
         b7:56:97:21:d3:65:39:d4:c9:80:4c:cc:f4:a0:7c:9e:f9:e9:
         a0:14:7f:8a:a0:81:a1:70:e5:22:dc:ab:a6:a1:96:49:4d:05:
         91:47:16:92:3f:db:f9:e8:53:32:8e:d6:15:a4:bc:fd:c1:f9:
         1c:25:e7:c0:ff:f7:5a:a8:85:03:29:a3:4a:78:02:54:fa:25:
         0b:31:71:ca:4b:ab:85:4a:ae:ea:bd:b6:36:30:57:53:67:09:
         10:25:b5:e6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNjAzMzEw
NzM4MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREQ0I3NUVFNUMzOEE0
MDEyNUEyREY1M0RBQTVGNkM1RTg5Mjc4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk36yjrnofJ68RLfBuHlvr8+QXRUjVpC6tqOUby+E9QVvmWuue
4kVdvGhWC3kuk9ORA77Qy+8Vkyfiy1iz9DNqUofgJCATU6sfD8Fc7vASYSCZwGbQ
+SqRjPCwnF4C2KAROuY1n1zj3O5l5XdI9AjX2Xd38kBcg/OiVyuSy/9eNq/cCZbT
/NjurSsxOAZTvf2L1uq80HfTVH/EYm/dd8PGnlH8J4ajQd+5umoWWO6wGqKIOvLF
Bq4Wpaxb9/vvQtD+NRlEL/laxpL5WgOM9OsUghsX11V+bHlsvaUuwMtABn7do4E8
rTht5us4OGiHKScx/x8DL+/cpX7+LkL/kFQzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTct17lw4pAElot9T2qX2xeiSeBQwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDY5L1RjdDE3bHc0cEFFbG90OVQycVgyeGVpU2VCUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbbhwwDQYJKoZIhvcNAQELBQADggEB
AISLmRFxG9aOGLgj2JGrjEwZQ6Qn8Zn7QEdBG4bfRKnmsuIeg5QegeE4B/xsVwZ/
7x9iTj761YuKyxnxXS/0JrOqRYVQMg5PEZZuIzho52gCdroKgzkURDkA0z7xeESn
6CDOIOs+2HAKb1UxE1hBXXPbmmFa5k91kiondxSwQyDTAgmXBkW7PzpRH4/DOOvy
1yvsoxiu3QjtrKmGtRIYdab2JrdWlyHTZTnUyYBMzPSgfJ756aAUf4qggaFw5SLc
q6ahlklNBZFHFpI/2/noUzKO1hWkvP3B+Rwl58D/91qohQMpo0p4AlT6JQsxccpL
q4VKruq9tjYwV1NnCRAlteY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:18 2026 by rpki-client