Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/833/NgSVaBc1RS_el3NRayLivLubavw.roa
File:                     NgSVaBc1RS_el3NRayLivLubavw.roa (raw, json)
Hash identifier:          A0SHrFminmP0/Y5ldjiHPfeGkbAepGANpuCHIw4yhSU=
Subject key identifier:   36:04:95:68:17:35:45:2F:DE:97:73:51:6B:22:E2:BC:BB:9B:6A:FC
Certificate issuer:       /CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
Certificate serial:       2B
Authority key identifier: 0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/NgSVaBc1RS_el3NRayLivLubavw.roa
Signing time:             Tue 25 Aug 2026 01:19:44 +0000
ROA not before:           Tue 25 Aug 2026 01:19:44 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     23629
IP address blocks:        27.131.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 16:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
        Validity
            Not Before: Aug 25 01:19:44 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=360495681735452FDE9773516B22E2BCBB9B6AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:29:3c:06:66:f0:00:71:ea:64:89:5a:bd:
                    3a:49:b7:0e:94:ec:15:f9:0c:fa:07:a3:8a:4c:95:
                    20:59:56:36:3b:42:cd:16:36:25:30:85:8d:4a:19:
                    f6:d4:bf:76:e8:7f:d1:4c:29:01:78:eb:8e:96:f9:
                    44:49:92:53:29:ee:b2:0b:a8:12:06:63:ea:93:37:
                    c1:b6:d1:b8:e9:47:1d:04:a3:92:b0:db:ea:20:c3:
                    b3:df:20:38:9f:9e:ca:02:09:56:7a:a7:b3:ea:ba:
                    78:0f:df:df:0a:65:22:9f:59:dd:f4:84:b1:eb:a8:
                    a1:49:a5:2e:8d:02:09:42:ec:3b:21:17:05:fc:84:
                    fe:93:62:23:8f:17:45:9f:24:f9:37:4b:43:85:bc:
                    fd:e5:c2:22:76:17:75:e3:47:bc:61:87:9d:e9:8d:
                    d3:44:05:91:7a:9b:8f:a5:1c:55:f9:31:d4:f7:2f:
                    e4:e5:8d:46:86:71:f1:81:ff:56:a3:bc:90:f1:1f:
                    27:0d:86:c6:95:c8:24:40:c9:29:1d:e5:d1:6b:d5:
                    2d:6d:b5:6d:df:97:6e:19:a7:8e:e9:d3:fd:60:70:
                    85:4c:9d:cb:db:e7:83:6b:e3:4e:3c:dc:96:a2:89:
                    2f:a4:1a:96:69:cc:f8:4a:b2:41:0e:d6:ae:be:b0:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:95:68:17:35:45:2F:DE:97:73:51:6B:22:E2:BC:BB:9B:6A:FC
            X509v3 Authority Key Identifier:
                keyid:0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/NgSVaBc1RS_el3NRayLivLubavw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:93:83:c2:36:08:08:c2:a8:5d:74:92:9e:7c:00:16:cd:
         63:93:55:60:bd:45:29:4e:3d:1d:a9:5b:e3:c9:5e:92:73:44:
         f8:66:4f:40:e9:57:d2:23:d7:75:ae:c3:4c:37:a3:35:60:8b:
         8a:5f:5a:26:f0:9d:5b:db:8c:46:19:9d:3d:93:d7:34:34:bc:
         65:4e:a8:ad:95:3c:8d:2d:04:65:63:74:e0:75:06:65:51:f8:
         fe:1c:1e:dc:a1:eb:0e:70:0f:fb:a5:e7:b9:97:a1:01:12:b0:
         5b:b0:92:c9:a3:c2:bb:a2:8d:5d:d9:07:68:8e:04:bb:aa:4d:
         1d:1c:94:58:a6:0d:4f:63:da:70:25:85:a9:1b:8d:90:2b:cc:
         ce:2b:73:91:72:53:c2:8d:87:69:88:1d:d2:f8:4e:76:80:d3:
         ef:2e:09:47:dd:f4:30:40:1a:73:34:f1:2c:a5:d6:2b:68:d2:
         07:01:85:a3:e2:17:8d:67:62:9f:6a:13:02:b5:24:a3:11:6f:
         27:cb:a8:70:e6:40:2b:76:d5:2b:8b:fd:c0:b4:97:e4:cb:ff:
         1e:fe:6c:46:37:a6:09:05:5b:59:ab:4c:e0:58:ae:c5:9c:65:
         9c:20:47:77:f7:b4:a7:42:76:8f:23:cf:de:ae:ff:ad:f2:9c:
         7d:cb:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:58 2026 by rpki-client