Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/C3g6tOpzhWqCnMlv7OdioUCz0hk.roa
File:                     C3g6tOpzhWqCnMlv7OdioUCz0hk.roa (raw, json)
Hash identifier:          BTXm03By4Qw9nIEAAxPmVGmbqW2lZSSx3lIdPDDDpDA=
Subject key identifier:   0B:78:3A:B4:EA:73:85:6A:82:9C:C9:6F:EC:E7:62:A1:40:B3:D2:19
Certificate issuer:       /CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Certificate serial:       05
Authority key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/C3g6tOpzhWqCnMlv7OdioUCz0hk.roa
Signing time:             Tue 31 Mar 2026 08:49:14 +0000
ROA not before:           Tue 31 Mar 2026 08:49:14 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        128.27.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51164DDCE7F388F8244C452190F6964F1AF0685D
        Validity
            Not Before: Mar 31 08:49:14 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=0B783AB4EA73856A829CC96FECE762A140B3D219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:ee:d2:62:6b:96:e9:1b:6f:11:ac:e9:00:
                    d7:41:66:b4:51:22:96:ad:33:3d:41:c9:16:c2:4d:
                    14:c5:c5:24:19:05:d2:b1:3e:61:06:cb:65:9d:c7:
                    e4:48:07:13:0b:df:f9:05:fe:02:43:a1:65:7e:3a:
                    a8:24:65:d1:98:cc:4b:e2:dd:4d:f3:3f:eb:63:e7:
                    a8:b9:0b:91:18:2f:10:bc:1a:98:cd:56:8f:2d:d8:
                    8c:26:bd:78:c9:37:61:7c:1a:e4:25:93:53:99:cb:
                    76:e3:ca:bc:b0:9f:f1:c4:8c:44:af:02:a2:51:4d:
                    3f:65:69:e8:a7:c1:69:65:7a:34:28:dd:e9:df:a0:
                    7a:2c:f5:1a:2f:99:2c:2d:c7:61:eb:5c:bb:47:de:
                    02:92:3c:dd:f1:b4:c8:f9:06:0d:67:df:31:64:3c:
                    9e:6f:55:64:fe:ff:e8:4b:38:97:a3:d0:10:29:e7:
                    dd:d8:a7:08:28:60:b2:45:f1:f2:0e:c2:f0:bf:b1:
                    3b:9b:f4:ad:a3:fe:e3:d4:e4:50:75:ca:6d:a8:20:
                    aa:66:9f:72:9e:0e:64:de:3c:78:ef:db:ad:2b:c3:
                    41:e5:05:15:b3:d2:f7:ee:6f:45:fd:25:81:26:b2:
                    81:bd:58:a6:4d:1e:25:88:c0:93:07:7b:e2:97:9e:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:3A:B4:EA:73:85:6A:82:9C:C9:6F:EC:E7:62:A1:40:B3:D2:19
            X509v3 Authority Key Identifier:
                keyid:51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/C3g6tOpzhWqCnMlv7OdioUCz0hk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:92:51:12:a4:13:49:1b:e1:4a:ce:de:12:30:1b:60:df:
         3c:dc:05:cd:31:ac:b7:e3:e8:de:2c:18:7b:76:f6:e1:32:1b:
         ee:be:52:87:34:b1:94:c5:b4:5b:56:ac:6a:9d:df:7d:f2:81:
         16:da:bb:99:d3:d9:ed:7d:4d:58:99:e8:79:48:71:e0:05:45:
         6d:7b:56:f8:62:79:eb:8e:59:3e:31:e4:cb:ec:06:26:1d:ee:
         80:58:cb:38:c2:14:28:7e:0f:b4:67:2e:ea:11:8a:01:87:b7:
         0b:fb:58:ca:03:ff:8f:22:34:b1:1f:6d:b0:e7:19:51:93:b5:
         e8:9a:15:1a:1b:f4:e6:f2:f9:16:56:32:60:73:95:c1:ad:a3:
         cd:f4:fb:5c:78:63:48:41:5e:e9:89:48:33:c7:e7:0e:1f:6a:
         08:08:fd:53:42:72:6b:9e:89:29:ce:8f:b7:8e:1f:f8:a3:78:
         d3:50:9c:df:5f:1f:73:5b:38:50:cc:ca:1b:22:e2:6b:c8:e5:
         12:e4:01:12:d0:97:7b:c1:1b:e7:fd:15:36:01:b0:eb:d8:72:
         a0:86:83:3e:7f:e4:8c:c4:8e:0c:2b:77:1f:5a:57:f5:f6:75:
         6c:aa:70:34:43:34:95:29:a9:ae:4e:b7:82:23:8b:22:13:c6:
         94:4a:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:08 2026 by rpki-client