Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/qs5eOI_H61u-sJd9swcTwxtkI1M.roa
File:                     qs5eOI_H61u-sJd9swcTwxtkI1M.roa (raw, json)
Hash identifier:          n+CP7lk+vU3EYO5CAru0d+jEABxVIhv8Qqz/m7fA30I=
Subject key identifier:   AA:CE:5E:38:8F:C7:EB:5B:BE:B0:97:7D:B3:07:13:C3:1B:64:23:53
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       4B
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/qs5eOI_H61u-sJd9swcTwxtkI1M.roa
Signing time:             Tue 31 Mar 2026 08:43:39 +0000
ROA not before:           Tue 31 Mar 2026 08:43:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        27.113.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AACE5E388FC7EB5BBEB0977DB30713C31B642353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:9e:37:f0:ca:fe:a1:03:52:fd:c6:fa:27:
                    67:5a:cc:83:a2:e6:bf:03:46:e5:60:18:cf:10:94:
                    0c:fe:66:ef:26:58:c9:2c:f0:e7:1b:90:79:b1:7d:
                    14:10:9b:51:6b:0d:d9:f6:c9:d0:9a:aa:c3:61:e7:
                    f9:66:8c:ca:2e:e4:cf:45:5f:0b:0e:b9:66:2d:42:
                    bf:04:60:8a:8b:f9:fd:44:db:9a:24:5f:73:e5:9a:
                    de:be:87:43:23:4b:4a:fb:1d:0b:7e:f9:8b:56:98:
                    3c:a5:a6:73:c3:9f:1e:a9:e7:66:85:9c:c7:f7:1f:
                    d1:c6:bb:23:ec:0e:13:26:fc:e1:98:bc:3f:8e:f7:
                    7a:76:f5:d0:1e:26:fd:49:8d:f4:b7:2a:7f:93:83:
                    77:fc:55:14:1b:91:18:cc:6a:eb:89:48:1d:02:a2:
                    fc:c7:bc:e0:f8:6b:ed:ec:b8:ed:ce:ce:50:5b:4b:
                    cc:c8:79:c6:51:e0:ae:93:6d:ae:cb:48:54:28:b6:
                    93:a7:13:71:fe:8f:f4:75:a0:c6:9f:28:7f:24:83:
                    21:e4:fc:b1:3e:e1:28:e4:e8:54:92:43:02:28:9c:
                    99:35:42:dd:6c:2b:17:8f:4f:59:be:dc:24:4b:46:
                    a4:86:4e:31:49:9f:7b:c7:2a:9c:e2:60:5c:4a:89:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:5E:38:8F:C7:EB:5B:BE:B0:97:7D:B3:07:13:C3:1B:64:23:53
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/qs5eOI_H61u-sJd9swcTwxtkI1M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d3:c7:a0:57:bd:35:d2:19:1d:1a:d3:46:54:d0:37:cf:9c:ab:
         e9:0c:d1:dd:5e:6b:95:fa:96:dd:3e:8a:81:9f:f2:70:b4:20:
         28:0c:65:30:fd:3b:fc:7f:32:a7:d5:31:9d:87:c0:e2:9c:8c:
         ed:3a:2d:86:a9:cf:eb:b9:86:b7:b7:be:4e:d0:80:f4:ba:8d:
         fc:92:6c:8f:ea:3f:a8:9a:91:25:7c:f4:7d:aa:07:65:f1:e4:
         bb:ef:27:eb:19:b2:cc:fd:99:bf:a6:29:76:1b:2e:bc:77:78:
         52:b5:94:49:ed:2c:81:f5:c7:68:ba:1d:f9:50:ed:4b:51:2d:
         82:f9:ac:ee:74:0d:3d:e9:02:d5:59:56:0d:f1:17:aa:c7:b6:
         da:a5:bd:b0:53:37:e1:1e:c9:6a:95:f2:c1:3b:9c:60:76:33:
         02:43:b7:1d:25:29:71:36:40:fc:dc:80:14:2e:6f:41:ac:30:
         c2:27:f1:39:78:ae:ab:2d:93:cb:6a:d7:8f:2a:6b:41:17:e5:
         81:cd:54:cf:00:82:8f:9b:a9:5b:13:d3:81:c9:f7:8b:e7:94:
         d1:9a:d0:5a:89:c6:5a:c2:83:9b:3b:f5:dd:7f:8d:39:1d:22:
         a2:75:59:10:70:91:c2:4d:d6:1b:9f:0b:74:20:e4:8f:44:99:
         44:7a:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:51 2026 by rpki-client