Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MdVL28xMgqHFWZVL5qHNrik4cl4.roa
File:                     MdVL28xMgqHFWZVL5qHNrik4cl4.roa (raw, json)
Hash identifier:          pDRszscUO80YKK8/a9QnuqVFTWWS31hwKgfzMAIIlhU=
Subject key identifier:   31:D5:4B:DB:CC:4C:82:A1:C5:59:95:4B:E6:A1:CD:AE:29:38:72:5E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0678
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MdVL28xMgqHFWZVL5qHNrik4cl4.roa
Signing time:             Tue 31 Mar 2026 07:27:56 +0000
ROA not before:           Tue 31 Mar 2026 07:27:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=31D54BDBCC4C82A1C559954BE6A1CDAE2938725E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:e8:ee:3d:81:9b:10:d0:91:b7:df:e3:85:
                    85:b0:3d:bf:13:74:60:46:8f:b2:b9:fa:13:d4:d9:
                    35:83:0b:30:03:4f:11:30:53:32:8c:d6:22:22:97:
                    a8:1a:ae:0f:69:e9:70:78:13:e6:ee:87:6a:60:84:
                    f3:f4:1b:cf:8e:d7:91:09:0b:34:d3:4a:d3:55:59:
                    e5:05:6d:22:df:03:30:c2:8a:f1:21:c9:f1:26:10:
                    45:7d:a8:41:d6:00:9f:98:7a:08:a2:9c:6c:50:ea:
                    38:59:4e:13:81:f6:a3:bf:1f:16:87:b0:fb:4a:23:
                    45:68:74:e6:9a:b9:81:46:0c:7e:c4:36:c7:46:2f:
                    04:ed:d4:a3:b4:cb:94:c5:6c:f9:71:38:93:d1:99:
                    e8:8a:e9:89:fe:ad:e8:5c:d8:d3:01:4c:1f:5a:d2:
                    46:a0:ce:e7:98:ef:54:f0:34:b8:4b:a2:30:83:4a:
                    eb:3f:c4:69:fb:5a:44:3b:c1:f3:99:10:96:91:81:
                    68:32:f4:7e:bf:c6:26:51:47:fc:7e:db:5e:21:35:
                    7f:71:15:b3:84:75:7b:ad:3f:70:12:bb:b5:9b:c7:
                    65:6a:e8:d9:fe:69:7f:d5:6a:46:2f:43:f6:28:8b:
                    60:a7:4e:58:83:70:36:28:61:4b:83:30:61:b4:99:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:4B:DB:CC:4C:82:A1:C5:59:95:4B:E6:A1:CD:AE:29:38:72:5E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MdVL28xMgqHFWZVL5qHNrik4cl4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:7d:c1:fb:39:35:b5:55:aa:1c:c5:21:22:17:ac:44:c0:
         4a:59:10:49:e0:a6:64:ca:42:7e:24:53:f0:88:d8:18:c4:91:
         9d:df:5f:29:b5:5a:a5:7c:bf:a4:7d:fc:e5:12:bb:30:48:b3:
         72:ad:4f:af:17:f8:4b:47:b3:c4:4f:c5:4b:28:43:2a:95:4b:
         19:f5:b7:43:a4:b2:d9:24:33:82:12:00:bd:65:d0:c5:d6:01:
         d7:c1:e5:24:b0:8b:03:d4:ff:4e:8d:df:81:7e:af:e4:e0:58:
         2a:f3:1d:c5:15:db:8d:d6:16:b1:01:a4:e9:91:08:98:1e:7f:
         13:f8:75:7f:ff:62:11:00:e3:2e:14:d4:57:b2:0c:38:08:19:
         06:3e:13:a1:2d:55:e1:9e:46:d0:d0:2d:3e:23:a0:d4:0b:ae:
         50:d7:25:1f:66:38:a4:4e:da:14:3d:1e:f2:41:36:8c:b2:c1:
         60:c8:14:da:fd:fa:fe:b7:d9:be:f2:6a:1b:b2:94:00:e6:f6:
         4d:5c:ef:ae:8e:d3:16:16:8e:ad:b5:a2:76:7c:c9:fe:8a:ff:
         6d:c8:a0:d2:cd:a2:c8:db:2c:6a:97:d6:61:a5:3b:4d:29:d7:
         ea:03:93:25:41:6e:b1:fb:1e:93:bd:be:78:e7:55:7c:d7:68:
         2d:20:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:38 2026 by rpki-client