Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/PtFOMg8L3bsKNAqShKuM9DdmWpQ.roa
File:                     PtFOMg8L3bsKNAqShKuM9DdmWpQ.roa (raw, json)
Hash identifier:          JAuqHbncfffvAwJExpwRPBs/R32uCm+bDOoFtKlQuyE=
Subject key identifier:   3E:D1:4E:32:0F:0B:DD:BB:0A:34:0A:92:84:AB:8C:F4:37:66:5A:94
Certificate issuer:       /CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Certificate serial:       03
Authority key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/PtFOMg8L3bsKNAqShKuM9DdmWpQ.roa
Signing time:             Wed 25 Mar 2026 05:53:42 +0000
ROA not before:           Wed 25 Mar 2026 05:53:42 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        128.27.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51164DDCE7F388F8244C452190F6964F1AF0685D
        Validity
            Not Before: Mar 25 05:53:42 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=3ED14E320F0BDDBB0A340A9284AB8CF437665A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:d3:b3:f3:5e:1f:10:c0:e6:c5:60:fb:a8:
                    16:7e:f5:d9:db:57:48:6b:a1:ed:e0:41:9d:c2:4f:
                    71:58:9f:4e:4b:02:c1:3d:f5:3f:c4:4c:b2:06:44:
                    5d:e5:1c:9a:db:d1:5d:aa:71:3d:f4:6f:a4:a2:72:
                    26:73:1a:cb:73:4d:21:72:53:6e:d1:f7:99:bf:dd:
                    a0:6f:5e:af:9f:70:fe:6a:d0:3b:3f:a4:d5:b1:11:
                    8b:26:63:10:c6:55:7b:5a:9e:ac:62:dd:70:26:3e:
                    17:3c:cf:dc:e7:ab:19:bc:13:f8:d2:64:91:c0:c3:
                    cd:97:00:38:55:85:3c:cf:b7:9c:f3:bf:28:65:c4:
                    15:75:5a:81:3d:22:96:a6:50:4c:a0:f7:82:10:d5:
                    92:7c:06:7b:1b:ae:e0:3e:b3:92:c8:2a:9a:c1:b5:
                    48:98:47:ca:a6:52:f5:97:c9:5b:99:ef:6d:1e:d6:
                    77:2a:3c:76:8b:86:af:af:c2:21:36:58:30:58:e5:
                    97:7f:76:ae:94:8d:10:7e:79:b9:09:04:f8:be:4d:
                    98:1c:ef:46:6c:c7:d5:74:b1:3b:68:8b:a8:0f:9b:
                    79:53:61:e1:f5:b9:e5:a3:d6:40:5c:0c:0d:9d:94:
                    aa:b3:7e:97:43:58:a5:1a:a2:1d:9e:d6:c9:98:24:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:4E:32:0F:0B:DD:BB:0A:34:0A:92:84:AB:8C:F4:37:66:5A:94
            X509v3 Authority Key Identifier:
                keyid:51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/PtFOMg8L3bsKNAqShKuM9DdmWpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:54:07:40:b9:50:38:fe:6e:cd:58:ef:98:dd:85:81:17:
         e7:a6:44:6b:98:21:24:c7:9d:6e:5f:58:e2:4c:05:08:85:69:
         8f:99:69:3b:f2:86:41:0d:c6:72:6a:8e:da:1e:73:73:fe:c8:
         fa:cf:67:98:6a:4c:f8:14:2d:8f:85:ae:a7:c4:44:07:1c:ec:
         64:48:da:12:ff:77:bf:5f:8e:80:8c:61:18:55:d6:33:81:03:
         1a:ad:ef:e2:19:3a:ae:ad:27:19:43:9d:92:ce:68:1c:c2:15:
         1c:45:48:4e:e3:78:e4:89:37:3a:38:ac:46:ea:31:30:69:55:
         90:5e:0a:64:9e:ec:bc:d9:f0:0e:c2:d9:7d:01:44:18:9b:23:
         f6:14:f7:9f:7a:a3:e4:3b:46:2f:9f:da:09:70:e3:e8:49:cb:
         2d:d8:7a:09:a4:52:83:76:ed:bc:40:0e:65:c1:7f:e7:68:6d:
         75:95:e0:49:5e:81:a8:64:59:4d:0e:83:d7:16:63:cb:a7:07:
         c3:6b:f4:40:7a:61:04:29:4b:3c:23:b0:8e:f0:0b:95:3a:7e:
         99:a5:d7:df:d5:87:d7:cb:de:39:24:ed:62:f2:88:71:2f:f5:
         77:b0:f3:aa:fa:cf:fe:71:db:06:ff:e1:31:5c:d4:ad:6f:f8:
         10:1f:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:09 2026 by rpki-client