Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa
File:                     -Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa (raw, json)
Hash identifier:          R8iODMDANf6tIiDP2ObSlIHJbhSAidG9P+QF0RtNIG4=
Subject key identifier:   F8:97:31:F2:B3:F4:1A:FD:B4:5B:E3:97:69:35:C5:C3:F1:0B:04:BC
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       7F
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa
Signing time:             Tue 31 Mar 2026 07:30:58 +0000
ROA not before:           Tue 31 Mar 2026 07:30:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38636
IP address blocks:        27.131.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F89731F2B3F41AFDB45BE3976935C5C3F10B04BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:7b:f6:9f:07:bb:2a:7c:b0:af:23:5d:24:
                    7b:92:f4:fd:fe:b2:87:33:7f:d4:64:19:e9:80:51:
                    24:82:63:3f:f1:a3:96:57:e5:c2:e5:b3:23:47:6b:
                    17:51:21:94:f9:a9:16:ab:b3:eb:71:14:7b:dc:0a:
                    a3:1a:39:3a:8d:b9:4c:4d:77:1a:df:9f:00:a3:9e:
                    8a:dc:3a:1e:3b:99:6a:f3:82:a7:94:f8:12:4a:5d:
                    4d:a7:01:f5:e2:a0:cf:21:01:6e:98:26:c7:b0:d7:
                    12:ae:71:b8:56:6a:97:42:ab:06:6f:28:b1:7e:f4:
                    16:c8:e1:06:78:48:88:d0:2e:a7:ab:83:cc:4e:41:
                    a2:d3:9c:db:4a:58:9c:74:73:d7:8f:a9:fe:14:d3:
                    8e:b4:81:26:d1:fc:a0:a3:8c:17:1c:50:11:0b:3e:
                    2b:60:ed:cb:33:ab:5a:2c:2d:f3:a9:0f:e6:af:65:
                    bf:f0:64:67:66:83:29:e1:ab:b0:90:34:12:54:2f:
                    28:cd:e1:87:ec:b7:1b:3f:04:45:d5:9e:ae:41:ef:
                    07:ca:6c:f6:73:a0:7b:37:74:2c:f2:b3:3c:f0:07:
                    d7:f8:f9:37:fd:59:61:43:e0:29:67:7c:d9:54:7c:
                    e0:1f:b9:9f:b8:2a:57:e5:ed:5b:cb:b6:d5:65:98:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:31:F2:B3:F4:1A:FD:B4:5B:E3:97:69:35:C5:C3:F1:0B:04:BC
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/-Jcx8rP0Gv20W-OXaTXFw_ELBLw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:b9:9e:3e:05:75:59:55:9a:04:0a:c8:ea:01:73:0c:c6:
         81:e2:6e:98:91:9d:24:39:99:b9:ab:88:67:c0:f4:4e:b3:97:
         16:36:3b:30:77:9d:a9:1a:ef:e9:20:ab:36:c2:3e:9a:9e:4e:
         b4:23:cb:77:b8:6d:08:c2:95:53:a6:eb:98:1d:d4:87:9c:ae:
         77:a5:5f:eb:b9:ee:3a:a7:09:93:36:48:3d:38:02:f5:61:87:
         3a:1f:74:10:3a:a2:d6:38:bb:cb:ee:35:b0:98:30:c1:ae:b6:
         40:df:93:b0:c0:84:f0:af:30:06:8b:68:5b:39:4a:ab:8d:a7:
         d9:09:34:36:27:61:3f:eb:68:ed:c3:ba:5f:ec:be:84:56:6d:
         ad:47:3c:16:fd:84:cf:d1:fd:63:4b:37:e3:da:80:17:6f:9f:
         ae:2a:1a:08:7a:12:89:db:e6:a6:ab:03:bb:ee:8f:3e:86:3c:
         fa:51:17:26:a8:07:19:47:f6:de:05:63:b3:8e:b2:41:0a:6d:
         0f:bf:02:a4:5b:7b:4d:04:81:65:cd:8b:12:0a:58:96:d4:fe:
         0b:5f:cd:2f:87:47:30:8e:35:30:ee:3a:6d:ed:74:10:47:68:
         a8:b9:7f:42:43:c6:37:86:c8:cd:18:da:15:e4:be:78:6a:c8:
         b2:28:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:34 2026 by rpki-client