Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa
File:                     aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa (raw, json)
Hash identifier:          e49wC5CwEuNtcv9E2pDRUSK730KqAJCIMgNlJNojnY8=
Subject key identifier:   6A:2C:E1:18:39:A8:4F:88:C4:27:78:C5:25:5A:FC:47:E3:69:79:E1
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       72
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa
Signing time:             Tue 31 Mar 2026 07:30:53 +0000
ROA not before:           Tue 31 Mar 2026 07:30:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        27.131.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6A2CE11839A84F88C42778C5255AFC47E36979E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:c4:d9:71:4f:2e:2f:75:f2:58:d6:84:6f:
                    85:a4:b8:7d:a3:23:8d:1d:34:93:27:4a:32:8a:24:
                    f8:aa:dc:35:46:f8:d0:b4:c7:c3:ed:ad:77:2e:65:
                    1e:82:83:c1:5a:30:80:f7:83:d9:01:8d:14:b3:80:
                    5b:62:79:e0:92:ed:03:2a:f4:85:f6:d5:6f:ed:50:
                    70:6a:39:9d:64:1f:00:ac:76:d7:42:f3:6e:1d:7f:
                    72:88:ae:e5:fd:b5:3a:7e:59:ff:d5:4c:cb:5b:84:
                    ff:8c:66:85:28:c7:f2:04:19:87:aa:23:85:a8:18:
                    c6:a5:1c:5e:50:fb:71:da:46:6b:99:0f:86:24:34:
                    05:33:c4:af:00:c9:75:5e:2d:41:b8:10:70:26:43:
                    35:3a:7b:9b:d3:36:f8:c9:6e:25:34:6f:dd:63:7c:
                    83:0c:bb:03:41:38:91:c0:f8:8e:ec:a3:5e:42:80:
                    49:71:34:38:1d:b9:48:86:eb:41:d8:72:22:5c:df:
                    59:d3:76:7f:c7:32:04:19:fe:7c:8d:86:22:61:2e:
                    f9:a3:85:1b:12:98:a3:b1:8a:86:5f:50:d7:e1:c8:
                    36:44:da:67:31:45:60:ee:24:93:e9:5b:00:b9:4a:
                    5c:b7:23:50:77:37:f3:18:81:45:cb:96:9f:05:5e:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:E1:18:39:A8:4F:88:C4:27:78:C5:25:5A:FC:47:E3:69:79:E1
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:dd:07:42:42:97:07:fa:0d:30:b4:a3:d5:34:66:bc:47:
         32:12:d9:0a:96:c8:1f:af:df:41:70:1e:67:8d:02:39:98:a5:
         a8:81:45:e4:c7:d8:9c:5b:13:51:42:2c:e9:8e:c4:c0:b0:4c:
         91:79:89:50:77:47:11:9f:a2:cf:e2:2a:47:e2:25:44:6c:32:
         28:b5:da:80:fd:d8:31:ed:e8:62:05:d0:6b:d6:79:f4:1f:fa:
         11:db:16:55:4a:c1:cd:c4:ba:df:ad:dd:5e:03:4c:11:9d:ca:
         eb:aa:35:a8:24:18:a9:6d:a1:20:b5:f9:d5:fd:30:5f:d3:99:
         27:19:be:ec:4b:60:98:a2:13:db:8f:0b:2f:ce:19:cc:65:d5:
         ed:54:94:f3:03:60:1b:f9:9f:71:0b:b3:af:f4:ca:ad:f5:84:
         ef:0f:b4:b8:6f:be:4b:2e:d3:c9:c4:2a:15:da:46:d2:0b:f6:
         93:02:34:9d:ae:b3:10:37:e4:c6:52:d2:f7:19:38:31:47:16:
         7a:c0:99:27:a6:35:34:94:7b:a7:a4:13:d9:e5:11:a6:86:9e:
         60:57:8e:72:47:3b:7c:d9:e5:c2:65:03:57:9d:73:88:a5:b1:
         26:c8:75:16:03:78:14:18:b7:f7:5e:62:73:a3:46:bb:17:8a:
         66:6d:ff:02
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI2MDMzMTA3
MzA1M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNkEyQ0UxMTgzOUE4NEY4
OEM0Mjc3OEM1MjU1QUZDNDdFMzY5NzlFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALkoxNlxTy4vdfJY1oRvhaS4faMjjR00kydKMook+KrcNUb40LTH
w+2tdy5lHoKDwVowgPeD2QGNFLOAW2J54JLtAyr0hfbVb+1QcGo5nWQfAKx210Lz
bh1/coiu5f21On5Z/9VMy1uE/4xmhSjH8gQZh6ojhagYxqUcXlD7cdpGa5kPhiQ0
BTPErwDJdV4tQbgQcCZDNTp7m9M2+MluJTRv3WN8gwy7A0E4kcD4juyjXkKASXE0
OB25SIbrQdhyIlzfWdN2f8cyBBn+fI2GImEu+aOFGxKYo7GKhl9Q1+HINkTaZzFF
YO4kk+lbALlKXLcjUHc38xiBRcuWnwVePOcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRqLOEYOahPiMQneMUlWvxH42l54TAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MDYvYWl6aEdEbW9UNGpFSjNqRkpWcjhSLU5wZWVFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABuDCDANBgkqhkiG9w0BAQsFAAOCAQEA
Rn7dB0JClwf6DTC0o9U0ZrxHMhLZCpbIH6/fQXAeZ40COZilqIFF5MfYnFsTUUIs
6Y7EwLBMkXmJUHdHEZ+iz+IqR+IlRGwyKLXagP3YMe3oYgXQa9Z59B/6EdsWVUrB
zcS6363dXgNMEZ3K66o1qCQYqW2hILX51f0wX9OZJxm+7EtgmKIT248LL84ZzGXV
7VSU8wNgG/mfcQuzr/TKrfWE7w+0uG++Sy7TycQqFdpG0gv2kwI0na6zEDfkxlLS
9xk4MUcWesCZJ6Y1NJR7p6QT2eURpoaeYFeOckc7fNnlwmUDV51ziKWxJsh1FgN4
FBi3915ic6NGuxeKZm3/Ag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:54 2026 by rpki-client