Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/Pk8M5tg7OAadwCsYk_7blX9PDMU.roa
File:                     Pk8M5tg7OAadwCsYk_7blX9PDMU.roa (raw, json)
Hash identifier:          fjmEeHvq6Dp/TzAtAbE9ne/oRvkikgn1nx2Mc9CVX3U=
Subject key identifier:   3E:4F:0C:E6:D8:3B:38:06:9D:C0:2B:18:93:FE:DB:95:7F:4F:0C:C5
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       74
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/Pk8M5tg7OAadwCsYk_7blX9PDMU.roa
Signing time:             Tue 31 Mar 2026 07:30:54 +0000
ROA not before:           Tue 31 Mar 2026 07:30:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        27.131.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E4F0CE6D83B38069DC02B1893FEDB957F4F0CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:95:be:c7:58:c8:fa:59:58:6a:9e:79:8a:
                    fa:78:d2:62:af:ca:bd:44:c9:71:eb:2e:7c:42:18:
                    44:85:40:be:b1:3c:4e:9c:75:0d:82:f6:55:03:72:
                    90:86:a2:16:60:55:04:95:53:c2:16:e8:a5:b8:7d:
                    88:12:ce:80:ee:10:27:ce:85:15:18:e7:61:0a:58:
                    3d:9e:92:f8:a1:15:c8:de:f8:d9:14:a4:8b:5a:dd:
                    94:c8:5b:c8:b8:60:7d:8b:b7:19:58:13:af:d6:5b:
                    1a:0b:34:22:73:1b:74:aa:85:76:79:14:04:46:08:
                    cb:4c:6b:ca:cd:90:21:aa:72:63:43:2c:30:1b:6a:
                    e3:5d:9d:fb:4a:5b:e4:b1:7b:af:98:85:3e:0e:64:
                    27:58:fd:8b:4d:54:49:1c:3c:85:e3:6f:72:05:a1:
                    f6:09:22:84:0d:e0:27:18:f1:ee:6b:fb:c2:d6:34:
                    47:cf:d8:bc:b9:94:fb:d4:9f:df:7c:f2:65:b8:e4:
                    44:5a:25:fc:f2:39:66:3c:5e:88:64:f5:6d:ab:5c:
                    8c:05:b6:d1:66:e1:c4:dc:a0:bc:9c:d2:00:89:ea:
                    91:ad:5b:65:e4:25:8a:6b:e2:62:59:9c:39:84:6a:
                    e3:0a:c0:66:3f:e5:b3:08:1a:07:67:4f:aa:42:fd:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:0C:E6:D8:3B:38:06:9D:C0:2B:18:93:FE:DB:95:7F:4F:0C:C5
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/Pk8M5tg7OAadwCsYk_7blX9PDMU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:7a:83:82:6c:3b:78:d6:3b:ba:19:e2:e0:e4:50:fd:95:
         1f:7f:37:ed:09:3c:00:af:6b:33:f5:22:81:36:ec:57:f8:0d:
         01:ff:ae:8f:d3:6a:78:4d:81:dd:cc:7c:fc:4d:29:ae:63:57:
         42:6a:bd:b3:40:c8:76:38:d0:26:65:9c:ce:7c:10:1f:a9:52:
         64:ed:b8:1f:eb:4a:79:6a:8d:b4:ec:1a:68:5a:c8:72:b5:cb:
         83:e7:f6:d6:e5:84:f1:9d:3d:1b:75:ce:16:1a:0c:f8:07:bf:
         ab:18:b4:b9:f4:03:a4:ff:30:b5:b7:1f:8c:3f:da:9e:d7:2e:
         09:af:a0:62:69:38:39:10:e8:3f:52:67:03:c8:18:62:46:75:
         ca:65:78:fe:fa:21:4b:24:06:22:a4:f3:df:31:c5:3e:98:e0:
         52:34:12:fc:fc:8c:19:eb:59:2f:5e:86:17:c7:1c:33:4d:be:
         db:49:b7:e7:cc:23:9b:5f:98:c4:67:b1:22:8e:14:db:2f:2b:
         9c:fc:f6:b1:6b:95:5b:45:48:14:2b:f0:f2:e2:a3:42:bb:db:
         61:77:1e:b6:8a:74:25:8a:e4:65:ac:52:18:52:e7:40:ff:bc:
         47:88:64:8c:45:c1:5a:22:7a:48:db:b8:9e:31:49:1a:d4:57:
         ad:3d:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:02 2026 by rpki-client