Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XbKM99P3Tqem-R74mgd-go88PfQ.roa
File:                     XbKM99P3Tqem-R74mgd-go88PfQ.roa (raw, json)
Hash identifier:          COpSb8/KZ+9Qhu9ma4FmJf/QYCSiXYIw1gm8/+1s4fY=
Subject key identifier:   5D:B2:8C:F7:D3:F7:4E:A7:A6:F9:1E:F8:9A:07:7E:82:8F:3C:3D:F4
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0176
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XbKM99P3Tqem-R74mgd-go88PfQ.roa
Signing time:             Tue 31 Mar 2026 07:48:18 +0000
ROA not before:           Tue 31 Mar 2026 07:48:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        27.50.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5DB28CF7D3F74EA7A6F91EF89A077E828F3C3DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:34:1f:0f:c0:5f:27:e8:8e:32:27:30:0b:
                    f6:2e:c4:db:0d:51:b3:45:d6:f1:47:76:05:f6:cc:
                    0e:64:65:72:20:a0:15:6f:da:21:63:61:db:af:b9:
                    e9:2b:34:23:02:e2:5f:c7:a8:82:e4:66:15:b3:ba:
                    58:26:ea:ec:8a:0a:94:16:ab:2e:a8:97:8d:d3:af:
                    70:3a:74:c0:07:34:d8:09:ca:96:38:f1:3e:05:cd:
                    93:bf:e5:9f:fe:6a:9e:45:b5:ad:00:75:6f:82:6c:
                    c3:f7:d1:d0:02:54:e5:ae:ae:bb:78:64:a4:21:12:
                    1b:1e:f9:8d:6a:5c:b2:20:da:8f:f5:e0:4e:ee:d1:
                    df:85:68:0c:e4:bb:64:a2:11:63:28:d3:d0:bc:41:
                    4e:b9:04:7b:e8:4c:12:57:c7:b0:25:62:62:07:62:
                    69:5d:e1:1f:3b:dc:24:6e:f6:80:f6:c7:f1:c4:66:
                    86:96:5c:c8:23:10:4f:4e:ef:60:93:4a:fa:03:bf:
                    70:64:50:36:60:4b:aa:57:04:3b:f0:ae:f5:98:e6:
                    66:c7:9a:8c:59:2d:de:c8:71:9f:dd:52:4f:00:fd:
                    c5:e4:37:1c:f7:6f:36:63:6b:ff:7c:3d:54:f1:4a:
                    2f:43:66:57:ac:f4:0c:04:31:20:5b:b2:1c:3c:23:
                    07:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:8C:F7:D3:F7:4E:A7:A6:F9:1E:F8:9A:07:7E:82:8F:3C:3D:F4
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XbKM99P3Tqem-R74mgd-go88PfQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:01:11:8e:9f:28:6d:a6:c3:06:0a:1e:be:e7:c0:45:4f:24:
         6d:e5:3b:dd:88:57:03:0a:53:15:1f:b3:19:73:5f:4e:41:11:
         57:cc:34:73:c1:ea:4d:90:08:a0:52:a5:3f:90:23:a5:5e:27:
         36:be:4e:2d:52:5a:db:f3:86:83:3a:8d:63:33:2e:86:49:f8:
         2d:19:7e:65:fb:81:7a:4c:1c:71:51:00:93:7a:ab:de:fc:fa:
         35:50:f6:be:a8:61:70:c9:10:56:d4:88:00:aa:74:fa:6b:b1:
         a9:25:26:af:f0:6f:bf:e9:b1:c6:4e:2f:6f:52:2c:b2:6f:ed:
         2f:33:1f:d6:0e:59:cb:24:f7:d6:fd:e0:f3:71:47:26:74:43:
         48:cb:0f:51:93:ff:10:92:29:df:ad:b3:4f:55:9d:1b:57:e6:
         d7:86:7b:b7:68:f4:bb:6d:79:53:cc:25:b0:1f:9f:34:f5:9f:
         23:bf:6b:53:53:6a:ac:4e:40:be:02:78:b8:c4:5a:76:c7:50:
         16:15:84:e2:98:71:9b:04:33:9b:56:9e:29:a6:b9:3a:01:c4:
         f7:24:38:25:1d:e3:7a:01:44:5a:bb:34:dc:8d:77:88:4b:e8:
         e4:74:53:97:c3:51:fc:8f:c8:27:fb:f9:b7:a2:46:c7:24:2e:
         1e:ff:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:16 2026 by rpki-client