Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/mt_PBO4wAbnfFgzTYMs_YptBovg.roa
File:                     mt_PBO4wAbnfFgzTYMs_YptBovg.roa (raw, json)
Hash identifier:          nKwcG/HcZlHLIRdOX2/zWUoVI0aSNb7B0uZcv+4N5Sc=
Subject key identifier:   9A:DF:CF:04:EE:30:01:B9:DF:16:0C:D3:60:CB:3F:62:9B:41:A2:F8
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       76
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/mt_PBO4wAbnfFgzTYMs_YptBovg.roa
Signing time:             Tue 31 Mar 2026 07:30:54 +0000
ROA not before:           Tue 31 Mar 2026 07:30:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        27.131.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9ADFCF04EE3001B9DF160CD360CB3F629B41A2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:25:89:b2:25:db:86:3b:25:92:cb:97:63:
                    46:1d:48:ec:86:5a:e8:15:87:79:c8:43:fe:c6:5d:
                    f5:50:68:c9:80:a8:79:0f:52:33:c6:e0:3c:9b:aa:
                    4a:ea:c6:6e:ab:d9:27:06:ec:a6:06:46:4a:45:14:
                    f9:cb:cf:e0:54:c4:53:40:7e:e2:a7:15:a4:64:64:
                    45:d5:03:3a:d3:d5:27:bf:11:14:c7:7b:f8:ad:9d:
                    4f:28:98:67:a7:03:d4:37:33:d9:ea:aa:e2:1e:83:
                    3a:e9:7a:8f:3c:1c:f3:dd:0e:d5:64:d2:92:44:65:
                    d9:71:38:43:72:db:35:ef:68:32:5e:1a:62:0b:12:
                    fe:a9:13:3c:04:5e:e4:e5:6c:41:58:5b:37:eb:8e:
                    cf:2e:e8:b1:18:c8:54:b3:4f:1d:e7:63:2e:45:14:
                    c7:81:fe:07:10:2a:c5:13:4c:b6:95:12:b0:24:da:
                    46:67:77:9f:78:19:5e:bb:13:71:12:3c:f1:a9:53:
                    9f:a1:8b:06:9c:39:f0:ee:51:50:ac:af:78:70:b5:
                    b2:3d:27:b8:1e:ab:72:c5:49:15:46:df:22:09:b4:
                    8c:4e:1b:2f:33:2f:ab:bb:dc:6b:b8:db:00:2a:1b:
                    cd:c4:9d:38:e2:cb:5e:aa:db:6d:ff:9b:91:24:94:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:CF:04:EE:30:01:B9:DF:16:0C:D3:60:CB:3F:62:9B:41:A2:F8
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/mt_PBO4wAbnfFgzTYMs_YptBovg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:06:1e:19:fa:2b:96:58:6f:34:57:32:d3:0d:e8:88:8c:19:
         73:6e:23:28:c4:6e:bb:51:e3:26:13:6e:f7:c3:8f:61:3d:8c:
         e5:07:90:f6:ae:17:ec:ba:54:6a:47:24:9e:f1:dc:62:72:99:
         d6:4d:c6:5e:c7:0b:c1:26:25:b4:00:bd:80:92:72:42:81:ee:
         bb:da:a8:92:6a:89:1b:6a:23:3a:bb:27:1c:38:ee:57:1c:63:
         17:50:bf:6b:3f:c1:1a:a3:14:c0:cd:6d:62:ae:9d:8a:64:dd:
         45:5c:ac:dc:a7:70:72:7b:b7:8c:54:16:52:99:83:59:60:60:
         d8:be:52:a2:24:5b:c3:0e:79:ae:12:ee:1c:b4:60:4d:2f:46:
         54:ca:5b:16:65:89:e9:45:a3:c2:f5:43:cb:9f:3e:73:08:2a:
         c2:cf:cd:64:40:0f:8e:9a:6a:4e:6c:8f:30:94:01:d2:ec:3e:
         de:c5:d3:62:54:5f:f4:b8:a6:8c:b9:f1:8f:f7:78:df:e2:0f:
         46:6a:1d:6a:7e:63:25:83:48:f1:e5:dd:20:b1:f9:50:4a:ac:
         39:a9:88:25:64:dc:bf:4f:81:d6:b5:e7:5e:fa:fc:cc:75:4c:
         68:ab:19:12:f9:0c:c9:94:af:72:9b:c5:37:4a:84:f8:f3:d8:
         87:6f:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:45 2026 by rpki-client