Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/XbZ7gxvwHh6lkBw4GScee8uCVA0.roa
File:                     XbZ7gxvwHh6lkBw4GScee8uCVA0.roa (raw, json)
Hash identifier:          PvA+LKuu609JFX7K0r/27WjL7f2zzNUFPPPAXXAhG0w=
Subject key identifier:   5D:B6:7B:83:1B:F0:1E:1E:A5:90:1C:38:19:27:1E:7B:CB:82:54:0D
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       73
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/XbZ7gxvwHh6lkBw4GScee8uCVA0.roa
Signing time:             Tue 31 Mar 2026 07:30:53 +0000
ROA not before:           Tue 31 Mar 2026 07:30:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        27.131.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5DB67B831BF01E1EA5901C3819271E7BCB82540D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b3:bd:b2:71:7f:4c:93:62:ec:49:8c:c4:4a:
                    9a:9c:f2:24:77:cd:d4:00:35:a5:93:d3:78:a8:eb:
                    73:0a:ef:a9:44:3a:08:79:61:2c:03:3f:5a:66:fa:
                    46:e5:e3:d6:d8:51:d3:3b:89:18:18:41:63:bf:38:
                    2f:73:8b:44:51:64:3d:c3:7c:c8:16:d6:42:fb:5a:
                    0a:b4:41:b0:d7:84:9a:4f:48:5c:07:3d:ea:eb:70:
                    91:8c:46:ed:51:de:61:80:4d:93:c9:7e:e6:1d:2c:
                    2c:da:a4:66:c9:b3:3a:1b:ce:11:5d:3f:41:d5:14:
                    59:2c:aa:d3:f0:94:34:df:0d:c0:b6:11:c1:b3:ed:
                    fb:68:12:51:76:d7:fa:59:7b:4e:f4:43:dc:74:b1:
                    4a:18:60:4a:a9:e3:e6:25:36:6e:19:e8:78:5e:91:
                    88:67:25:f1:5f:f9:95:b7:4d:9b:84:6c:c4:ad:2a:
                    c1:bf:c6:e4:54:3f:8b:2a:35:5d:e9:80:9d:a2:7e:
                    7e:bf:03:08:83:bf:27:b7:77:b1:c2:ed:87:a1:da:
                    ba:4f:be:36:53:26:b6:63:d9:00:cb:38:e1:b6:c5:
                    3d:81:4a:98:68:74:f2:cc:ed:a6:21:b4:d7:13:1e:
                    2d:fe:5e:61:f4:85:47:7a:74:aa:84:77:65:c2:a3:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:7B:83:1B:F0:1E:1E:A5:90:1C:38:19:27:1E:7B:CB:82:54:0D
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/XbZ7gxvwHh6lkBw4GScee8uCVA0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:80:5e:0d:d3:ee:78:a0:03:54:34:0c:0a:80:2b:32:15:38:
         e8:61:8b:ec:87:94:44:c2:b7:3c:51:7c:7a:72:38:10:bd:b4:
         ee:6e:f2:fc:12:1c:82:85:54:a2:68:07:19:6d:48:fa:99:47:
         79:5a:26:e6:c0:66:fb:db:fe:e1:eb:1c:23:71:55:d1:43:34:
         5c:4e:67:4d:26:75:d8:b3:eb:7c:66:d3:e3:09:ef:0d:65:51:
         93:49:74:38:82:fe:fa:8d:07:c2:c2:dd:26:35:7f:cf:3a:b0:
         eb:f1:bb:4d:14:08:a9:06:42:50:0a:e4:da:a2:10:9a:b5:be:
         5c:85:fd:88:c2:91:ca:c3:e0:5f:90:df:67:7a:4e:b8:6f:24:
         23:79:4d:11:fc:24:e3:c9:52:e9:32:6d:eb:02:47:4b:bb:1f:
         72:2e:d0:e5:9a:97:fd:8f:80:59:23:0f:c3:32:62:5a:55:21:
         ce:ea:08:1a:0c:e6:ef:a8:ee:d0:ab:18:60:2a:d6:0d:ac:0c:
         0c:06:b8:ed:01:c9:2a:8b:0b:1a:75:d3:51:d6:36:85:e2:58:
         dc:29:b5:47:b4:8c:b5:c9:75:2c:18:f8:68:32:66:fe:9f:d0:
         c0:70:e7:8f:34:8b:97:e1:24:2a:15:e7:9f:8a:43:d4:ec:c9:
         21:bb:f3:c5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI2MDMzMTA3
MzA1M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNURCNjdCODMxQkYwMUUx
RUE1OTAxQzM4MTkyNzFFN0JDQjgyNTQwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOqzvbJxf0yTYuxJjMRKmpzyJHfN1AA1pZPTeKjrcwrvqUQ6CHlh
LAM/Wmb6RuXj1thR0zuJGBhBY784L3OLRFFkPcN8yBbWQvtaCrRBsNeEmk9IXAc9
6utwkYxG7VHeYYBNk8l+5h0sLNqkZsmzOhvOEV0/QdUUWSyq0/CUNN8NwLYRwbPt
+2gSUXbX+ll7TvRD3HSxShhgSqnj5iU2bhnoeF6RiGcl8V/5lbdNm4RsxK0qwb/G
5FQ/iyo1XemAnaJ+fr8DCIO/J7d3scLth6Hauk++NlMmtmPZAMs44bbFPYFKmGh0
8sztpiG01xMeLf5eYfSFR3p0qoR3ZcKjoVcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRdtnuDG/AeHqWQHDgZJx57y4JUDTAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MDYvWGJaN2d4dndIaDZsa0J3NEdTY2VlOHVDVkEwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABuDCTANBgkqhkiG9w0BAQsFAAOCAQEA
g4BeDdPueKADVDQMCoArMhU46GGL7IeURMK3PFF8enI4EL207m7y/BIcgoVUomgH
GW1I+plHeVom5sBm+9v+4escI3FV0UM0XE5nTSZ12LPrfGbT4wnvDWVRk0l0OIL+
+o0HwsLdJjV/zzqw6/G7TRQIqQZCUArk2qIQmrW+XIX9iMKRysPgX5DfZ3pOuG8k
I3lNEfwk48lS6TJt6wJHS7sfci7Q5ZqX/Y+AWSMPwzJiWlUhzuoIGgzm76ju0KsY
YCrWDawMDAa47QHJKosLGnXTUdY2heJY3Cm1R7SMtcl1LBj4aDJm/p/QwHDnjzSL
l+EkKhXnn4pD1OzJIbvzxQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:03 2026 by rpki-client