Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/IZ0PgIIzqhST4Yerfss0ehOIiRY.roa
File:                     IZ0PgIIzqhST4Yerfss0ehOIiRY.roa (raw, json)
Hash identifier:          V6sK4CNwf804vK/WLS+mMjBvxaUNe+V/nFuLuKcfGzE=
Subject key identifier:   21:9D:0F:80:82:33:AA:14:93:E1:87:AB:7E:CB:34:7A:13:88:89:16
Certificate issuer:       /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
Certificate serial:       59
Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/IZ0PgIIzqhST4Yerfss0ehOIiRY.roa
Signing time:             Tue 31 Mar 2026 07:49:41 +0000
ROA not before:           Tue 31 Mar 2026 07:49:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        2001:fa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
        Validity
            Not Before: Mar 31 07:49:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=219D0F808233AA1493E187AB7ECB347A13888916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:34:96:b3:6d:9d:d9:1f:c7:80:19:02:93:
                    a1:bf:59:47:5c:f9:ca:3b:e0:50:60:74:fb:f3:91:
                    c0:95:6a:81:3a:d0:4b:0a:a4:e5:39:c2:e5:69:74:
                    f6:90:cf:45:eb:9c:7f:25:9d:14:cf:47:8a:14:9b:
                    a8:dd:ed:47:41:71:88:6c:18:25:3b:9f:33:56:08:
                    b8:fc:4d:6b:f7:57:9a:75:c6:08:d0:f8:57:38:6e:
                    9a:12:6a:fb:bc:a4:bf:c2:3d:3e:3b:8c:58:9b:a4:
                    0e:f2:f4:39:fe:e5:18:62:97:17:ec:5a:16:aa:f6:
                    f9:41:23:7b:12:7b:e9:61:0b:14:45:76:48:2c:4e:
                    6b:9c:bf:1a:2c:bb:72:5b:95:58:8e:7d:58:23:52:
                    dc:fe:47:ee:a1:f5:74:b6:57:39:c2:38:76:aa:5c:
                    f1:08:e2:8e:2a:d1:82:e7:01:4d:9f:70:ce:4b:e9:
                    85:e0:3f:58:d5:53:91:f1:9e:3d:22:35:71:d1:78:
                    7d:ae:5c:18:5a:84:d8:ec:c6:ea:5d:71:4b:68:8c:
                    87:87:46:0d:9a:4f:3c:cb:46:23:5f:a6:46:00:26:
                    12:c1:b5:ed:8e:e8:e9:92:5e:d2:8f:25:6d:be:45:
                    fd:dc:76:26:fd:ad:b8:d3:eb:58:4d:8a:5a:4a:6e:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9D:0F:80:82:33:AA:14:93:E1:87:AB:7E:CB:34:7A:13:88:89:16
            X509v3 Authority Key Identifier:
                keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/IZ0PgIIzqhST4Yerfss0ehOIiRY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:27:d4:52:cd:0b:6c:3e:c5:9f:a9:67:99:13:d6:37:55:
         3e:42:ea:6d:cb:a8:bf:58:11:f1:fc:e3:29:5f:83:63:c6:0d:
         80:a0:bf:5f:b4:bf:ed:69:d8:9c:20:f4:92:8e:9b:6b:35:5f:
         82:73:28:1d:9a:3c:16:56:55:83:05:db:77:3c:ca:bd:ab:d9:
         63:af:c7:a5:c5:ec:5f:75:a7:1a:96:de:dc:4d:29:c1:7d:ce:
         e4:1b:6a:54:b4:96:f7:fe:1d:9b:79:d8:ec:64:19:d6:2e:93:
         20:dd:65:d0:39:2e:bd:ae:50:23:b4:77:4d:be:43:0a:0e:18:
         3f:0d:a2:24:06:f8:df:f9:f9:30:a3:6a:40:6f:4f:5e:6e:5a:
         9c:37:09:a0:9a:79:93:91:a6:16:29:45:56:e6:e8:6a:91:6a:
         55:6a:cc:cb:e4:c7:f0:8d:2b:a6:6c:d3:54:ac:5f:1f:2b:11:
         64:9b:bd:32:c5:c1:bd:6c:c7:11:bc:51:73:2a:fc:5d:e7:7f:
         20:21:55:26:70:e4:e4:60:7f:ab:01:81:96:aa:e9:99:e7:a2:
         ab:46:36:1d:4c:9d:a3:2f:56:42:ae:5d:02:12:ee:d7:2c:e3:
         26:35:26:6b:5c:4d:9a:c7:d5:f1:5e:4e:52:c7:cb:02:9b:e8:
         d0:7b:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client