Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/C66YeuWpk15eT3zDxE_JxfAAoQk.roa
File:                     C66YeuWpk15eT3zDxE_JxfAAoQk.roa (raw, json)
Hash identifier:          8VSHWIVrb/qqPG8od6OYe0Q15hygI/DPwBH6qtX5rfs=
Subject key identifier:   0B:AE:98:7A:E5:A9:93:5E:5E:4F:7C:C3:C4:4F:C9:C5:F0:00:A1:09
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       32
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/C66YeuWpk15eT3zDxE_JxfAAoQk.roa
Signing time:             Sun 01 Mar 2026 01:35:51 +0000
ROA not before:           Sun 01 Mar 2026 01:35:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        27.109.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar  1 01:35:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0BAE987AE5A9935E5E4F7CC3C44FC9C5F000A109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:b6:20:bb:52:c9:72:81:69:e6:f5:4c:67:
                    8c:6c:08:b3:80:6e:5a:10:41:2b:3e:4f:19:86:47:
                    c1:3d:b6:e8:c0:0c:f0:7f:03:39:5c:16:ce:71:84:
                    32:18:39:da:b6:81:a4:f0:66:39:a9:31:98:9a:ad:
                    f8:99:86:98:1d:b2:6d:d9:0b:bb:f0:5e:71:3f:76:
                    6b:90:58:b2:a5:85:4a:f7:9c:07:85:79:cb:49:3f:
                    ec:a6:db:22:c7:69:33:21:61:6f:a5:30:ed:8e:96:
                    0c:83:28:b0:8c:cf:d4:20:d4:c9:df:84:8a:7e:24:
                    96:9b:fd:04:4a:65:40:4d:bc:f1:c7:98:73:45:0b:
                    c9:fa:c8:bb:44:29:5f:07:36:26:f9:7b:a2:6b:d9:
                    a4:2b:35:da:42:bb:92:bb:28:6d:6e:b8:68:d0:97:
                    6d:38:92:15:99:d5:36:ff:1f:eb:0f:06:b9:be:54:
                    6b:a8:29:98:de:54:dd:b2:35:c6:87:19:40:38:a1:
                    77:7f:ed:09:66:9a:59:56:0a:25:e8:00:0c:39:5c:
                    f6:44:53:b4:02:da:72:64:d5:e3:07:20:fd:25:3e:
                    43:ce:b2:27:c2:50:90:b7:ed:74:95:96:7f:3a:10:
                    29:33:6d:10:39:39:2d:e1:19:4a:9f:5b:e1:07:ca:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:98:7A:E5:A9:93:5E:5E:4F:7C:C3:C4:4F:C9:C5:F0:00:A1:09
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/C66YeuWpk15eT3zDxE_JxfAAoQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.109.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:23:39:fa:55:33:b0:44:fc:bb:3d:65:70:dd:4a:e5:5f:
         41:3e:8e:f4:b4:37:3b:49:ed:50:69:59:33:99:b8:f1:03:8b:
         12:85:f7:e5:7b:13:1b:a8:c6:19:c4:7d:ee:15:f0:fe:70:cb:
         e0:8b:2a:ad:50:03:70:a1:b3:1a:bc:c0:60:82:c6:6a:bb:b1:
         88:ff:77:6f:9f:cb:4c:b3:e1:08:f6:29:f2:b3:23:88:d8:2f:
         7b:2a:2e:c8:24:5f:96:d2:87:88:b7:7f:3c:3a:71:23:2b:32:
         7f:32:d2:fb:e4:bb:ae:38:6a:44:8e:60:66:04:da:56:ed:b6:
         ae:bb:4b:26:48:85:0d:67:4a:52:72:92:11:ae:27:de:e4:88:
         db:ff:7d:9d:a2:d6:84:88:99:10:e6:af:39:25:27:7d:aa:50:
         5d:17:76:ec:91:8c:3a:c2:fc:8e:59:aa:e8:c5:26:f9:92:9f:
         22:09:87:7a:dd:0c:ce:c9:ef:ab:ad:d5:2e:f4:4f:34:e0:35:
         5d:93:8c:64:b4:0b:cc:79:9a:1c:75:80:d6:cc:8e:77:48:dd:
         ec:94:83:7f:60:52:6f:eb:39:88:23:35:23:8b:fd:b0:ee:2a:
         33:27:8f:bb:4d:0d:f7:e8:78:db:69:28:38:f7:e7:ea:74:32:
         f6:63:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:11 2026 by rpki-client