Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa
File:                     8DbqdOJF-kDXjCliosjSNYL-zls.roa (raw, json)
Hash identifier:          v+V2pfs4YmMN5+il920VSUBBJv2eDXjn04zeDB0YO7Q=
Subject key identifier:   F0:36:EA:74:E2:45:FA:40:D7:8C:29:62:A2:C8:D2:35:82:FE:CE:5B
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       77
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa
Signing time:             Tue 31 Mar 2026 07:30:54 +0000
ROA not before:           Tue 31 Mar 2026 07:30:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38636
IP address blocks:        27.131.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F036EA74E245FA40D78C2962A2C8D23582FECE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:a1:f0:14:96:ff:f3:ab:83:b8:9a:af:a9:
                    e8:20:5f:55:d2:fb:4d:2d:61:48:ce:28:55:e1:e5:
                    8e:fb:3a:e0:0f:bc:0b:e9:9f:91:ac:1d:6f:b8:92:
                    cd:8b:4e:a8:1f:c9:ca:17:87:aa:52:40:88:59:a5:
                    e8:6b:4d:39:1b:60:c2:a3:a4:53:a6:51:1f:0b:62:
                    27:24:cd:55:5c:c3:10:15:92:2d:fb:82:71:0a:22:
                    cc:c3:77:b8:64:ac:df:f1:76:1c:ce:25:44:52:9a:
                    10:2d:10:38:66:c1:54:85:48:52:d9:16:7a:32:13:
                    c5:63:7d:fe:f1:fb:d1:66:45:a1:0b:f0:22:d9:6d:
                    3f:46:cf:03:55:d9:77:a2:86:12:8f:3f:02:69:b8:
                    23:98:96:6a:df:d0:08:87:aa:ac:04:3f:18:50:1c:
                    73:53:06:8b:67:e3:78:5f:48:55:3c:f9:78:38:c9:
                    50:5c:68:b4:58:75:91:2b:22:53:41:fb:c5:65:77:
                    12:1e:c9:f9:a2:a0:e5:d0:26:21:a0:6c:2f:bc:e7:
                    70:94:8d:bc:fe:71:7e:01:7d:5e:24:97:f0:b8:7d:
                    dd:6e:ea:de:46:c0:a2:1b:97:6f:b6:8e:02:d3:0d:
                    d0:9c:37:53:98:59:5a:fc:22:b4:01:75:7c:77:a2:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:36:EA:74:E2:45:FA:40:D7:8C:29:62:A2:C8:D2:35:82:FE:CE:5B
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:6a:6f:bf:32:d5:db:89:99:0e:30:ac:5c:ee:06:fc:a1:
         fe:46:d7:46:0e:61:be:69:d6:f9:b4:e3:13:28:e5:da:2e:44:
         4d:3c:ce:d0:79:c9:e0:75:da:27:d0:31:95:77:0f:c8:0c:6f:
         63:fe:aa:33:e8:7a:8e:85:d5:6e:fc:c4:bc:af:3b:b9:70:ab:
         2c:66:5a:eb:36:45:a2:99:e8:13:4f:fb:ee:20:94:8c:bb:5d:
         e0:5b:a9:98:99:40:e5:77:a3:19:fa:1c:08:26:78:58:3a:c3:
         0b:52:a7:7b:06:ee:d8:df:94:1a:d2:9d:4a:1a:e1:41:89:37:
         ac:fe:36:36:c3:18:f5:43:82:12:ed:0f:f9:cd:17:bc:db:f1:
         fa:e1:48:5f:18:3c:61:9c:d1:f4:92:8e:7b:1d:08:77:6d:18:
         6b:5a:00:91:cd:22:34:c0:4f:cd:a0:3e:da:ea:f5:3e:89:42:
         2f:2d:aa:9f:1a:f4:74:8c:de:3a:d3:9f:96:00:31:31:ff:11:
         1a:44:b7:d4:fc:d1:06:81:2d:96:42:a7:2d:2d:22:74:c7:e9:
         50:27:01:36:14:bc:dc:07:fe:85:21:73:59:43:85:1d:22:76:
         10:7a:48:dd:08:3b:30:6c:dc:bb:f1:55:69:f7:38:6a:c6:39:
         23:23:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:55 2026 by rpki-client