Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa
File:                     zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa (raw, json)
Hash identifier:          mv+24F/QCPSHd6oyafGK9PD54YcgaXOo2JYuHDygqjs=
Subject key identifier:   CD:02:A1:97:8D:92:20:34:98:6F:A4:A1:8C:01:98:4E:05:CD:E8:FC
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       33
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa
Signing time:             Tue 31 Mar 2026 08:40:13 +0000
ROA not before:           Tue 31 Mar 2026 08:40:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        27.54.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar 31 08:40:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD02A1978D922034986FA4A18C01984E05CDE8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:de:de:c6:01:86:12:5a:b6:c7:fa:fd:61:
                    e2:34:e1:d5:63:79:b4:54:9d:27:f8:1c:f0:a6:c8:
                    f0:9b:71:01:2d:58:25:39:d8:f8:23:c7:fe:76:65:
                    a7:c2:76:4f:46:c3:81:a2:32:95:49:d3:e3:5a:5f:
                    8e:a1:97:84:d4:41:aa:c5:1a:70:b2:18:87:1b:b6:
                    47:16:fb:b1:35:2a:99:65:d9:88:8e:27:4b:de:76:
                    79:63:5c:86:a5:4e:ec:a7:52:5d:87:be:5e:d7:ca:
                    6a:4f:73:00:81:61:19:dd:b5:d8:7f:d8:06:cb:fe:
                    aa:de:ba:6c:d3:a2:36:1e:18:be:53:6e:09:1d:3e:
                    47:5b:8b:c6:8d:e1:4e:27:9b:c3:ce:a2:ce:e6:f9:
                    a3:4f:e6:61:1d:4e:9b:76:1c:b1:ff:db:86:b8:d1:
                    ba:aa:4f:10:67:2c:fc:af:81:d3:27:a5:75:b4:eb:
                    09:4c:36:a0:b0:54:ad:92:c9:80:20:09:a6:8e:a5:
                    64:db:50:51:96:8e:24:8f:3e:e0:0f:76:4c:2a:b6:
                    5a:bc:89:ae:34:7c:2d:19:a7:49:d8:a9:40:78:8d:
                    ca:0d:44:a1:1e:74:ad:08:49:56:32:b6:0a:fc:04:
                    90:da:a0:1c:3a:61:87:6f:de:00:62:60:18:3b:9b:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:A1:97:8D:92:20:34:98:6F:A4:A1:8C:01:98:4E:05:CD:E8:FC
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/zQKhl42SIDSYb6ShjAGYTgXN6Pw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:4b:93:44:83:f6:db:cc:cd:e1:d8:8f:cd:df:dc:17:6f:
         a4:93:0c:4e:20:75:6b:51:a1:c6:d0:3d:65:ee:39:63:4f:e8:
         fb:f3:28:35:72:ff:21:43:a2:94:60:34:c1:1d:dd:9b:6b:54:
         99:5f:cc:eb:6b:11:ac:9e:ee:28:bc:95:63:aa:c3:01:d5:fd:
         02:8e:3c:1d:bc:28:f6:37:d1:d5:ac:0c:51:dd:07:ab:8d:98:
         cf:cd:8d:ad:f1:2f:ad:c8:d7:b2:11:d3:64:e3:38:b5:5b:7f:
         d1:a2:b1:54:de:a0:48:a5:bf:e9:2f:6c:28:ec:f7:63:3b:3e:
         00:a9:d7:9b:db:b4:83:48:dc:be:a1:63:82:62:4b:6d:91:a1:
         9e:67:06:68:08:22:89:4b:59:94:b9:50:06:95:1f:da:79:85:
         de:9c:de:0d:24:f2:0c:fb:2f:01:de:e3:4e:6e:de:16:1e:4e:
         db:5f:60:a2:6f:fe:06:52:8f:67:f1:be:f1:78:06:c3:9a:02:
         1e:69:c6:cc:6b:4a:4c:86:f2:3d:2a:75:4d:72:9b:63:97:25:
         35:f0:a3:10:29:78:25:3b:5d:85:75:f0:64:e5:ed:44:90:08:
         5f:0e:33:55:22:76:6c:f7:48:0b:e1:74:d1:4d:5d:95:f9:de:
         4e:a9:3f:e9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjYw
NTc3NTY2RTQ3RURBMEY1ODY2Q0UwRjQ3MTRBOTE5OEZBNUY1MB4XDTI2MDMzMTA4
NDAxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0QwMkExOTc4RDkyMjAz
NDk4NkZBNEExOEMwMTk4NEUwNUNERThGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBg3t7GAYYSWrbH+v1h4jTh1WN5tFSdJ/gc8KbI8JtxAS1YJTnY
+CPH/nZlp8J2T0bDgaIylUnT41pfjqGXhNRBqsUacLIYhxu2Rxb7sTUqmWXZiI4n
S952eWNchqVO7KdSXYe+XtfKak9zAIFhGd212H/YBsv+qt66bNOiNh4YvlNuCR0+
R1uLxo3hTiebw86izub5o0/mYR1Om3Ycsf/bhrjRuqpPEGcs/K+B0yeldbTrCUw2
oLBUrZLJgCAJpo6lZNtQUZaOJI8+4A92TCq2WryJrjR8LRmnSdipQHiNyg1EoR50
rQhJVjK2CvwEkNqgHDphh2/eAGJgGDubW2UCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTNAqGXjZIgNJhvpKGMAZhOBc3o/DAfBgNVHSMEGDAWgBSSYFd1ZuR+2g9YZs4P
RxSpGY+l9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk2L2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJtUHBmVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJt
UHBmVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85OTYvelFLaGw0MlNJRFNZYjZTaGpBR1lUZ1hONlB3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBs2YDANBgkqhkiG9w0BAQsFAAOCAQEA
VedLk0SD9tvMzeHYj83f3BdvpJMMTiB1a1GhxtA9Ze45Y0/o+/MoNXL/IUOilGA0
wR3dm2tUmV/M62sRrJ7uKLyVY6rDAdX9Ao48Hbwo9jfR1awMUd0Hq42Yz82NrfEv
rcjXshHTZOM4tVt/0aKxVN6gSKW/6S9sKOz3Yzs+AKnXm9u0g0jcvqFjgmJLbZGh
nmcGaAgiiUtZlLlQBpUf2nmF3pzeDSTyDPsvAd7jTm7eFh5O219gom/+BlKPZ/G+
8XgGw5oCHmnGzGtKTIbyPSp1TXKbY5clNfCjECl4JTtdhXXwZOXtRJAIXw4zVSJ2
bPdIC+F00U1dlfneTqk/6Q==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:45 2026 by rpki-client