Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30013/5X6dbrFaPz_kjUrP1RNmFvH8dpM.roa
File:                     5X6dbrFaPz_kjUrP1RNmFvH8dpM.roa (raw, json)
Hash identifier:          hnGJW6BTqPtZ66AdLpqYyeZhxApGEMR0ewxMzsx1V2w=
Subject key identifier:   E5:7E:9D:6E:B1:5A:3F:3F:E4:8D:4A:CF:D5:13:66:16:F1:FC:76:93
Certificate issuer:       /CN=E251D339AB1EB6305AEB1493B4DA380011FA3329
Certificate serial:       27
Authority key identifier: E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/5X6dbrFaPz_kjUrP1RNmFvH8dpM.roa
Signing time:             Tue 31 Mar 2026 08:37:27 +0000
ROA not before:           Tue 31 Mar 2026 08:37:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        2001:348::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 23:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E251D339AB1EB6305AEB1493B4DA380011FA3329
        Validity
            Not Before: Mar 31 08:37:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E57E9D6EB15A3F3FE48D4ACFD5136616F1FC7693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b9:c6:be:84:b7:21:aa:e9:a5:3a:9f:45:81:
                    1e:cd:f8:e6:06:2e:ca:2f:83:47:0f:ee:1a:0b:52:
                    62:23:c9:d0:d9:cb:7b:5a:87:16:48:97:1c:bb:7a:
                    0b:63:49:1e:99:b2:00:4f:b3:68:ac:81:f5:17:04:
                    38:a7:8c:5d:cb:79:6e:1f:db:0f:20:33:21:e3:38:
                    24:0a:12:0d:50:f3:9b:4e:26:34:dd:cd:63:ec:d5:
                    33:01:91:43:21:60:5b:16:ac:b6:11:91:c2:fb:ea:
                    e0:1e:6c:9b:45:ac:80:73:55:88:3b:ec:d2:55:0e:
                    10:3c:84:88:a9:ae:46:9d:34:da:ae:1e:38:3e:c1:
                    86:5f:59:97:4e:2d:c3:f7:3b:79:cd:ec:c0:26:f5:
                    35:9b:d9:f5:a4:d4:0f:ea:a2:49:bd:b7:1b:5e:8c:
                    a6:17:f1:dc:7a:dd:2e:10:ad:3b:ae:52:1a:91:d4:
                    dd:fb:62:dc:a9:2e:c4:df:1c:af:70:28:45:3e:74:
                    76:4f:87:44:20:a0:0b:ad:4a:2d:18:02:72:bd:81:
                    98:7d:d9:80:93:dc:e6:17:47:df:d5:ee:6e:5c:2c:
                    ac:b5:40:d4:f3:e7:e1:1c:78:e6:72:44:2a:78:86:
                    d3:92:9f:6a:ef:50:64:73:a1:75:25:58:a5:8c:3b:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:9D:6E:B1:5A:3F:3F:E4:8D:4A:CF:D5:13:66:16:F1:FC:76:93
            X509v3 Authority Key Identifier:
                keyid:E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/5X6dbrFaPz_kjUrP1RNmFvH8dpM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:bf:6a:56:6b:5f:97:a1:87:71:01:2c:d9:b2:3d:33:5f:
         48:5d:4e:23:07:eb:5a:b2:d8:44:83:fa:33:e8:ed:35:47:16:
         2a:eb:b5:3b:b4:c0:0d:ce:58:85:a2:be:55:2c:35:71:e1:68:
         4c:cb:01:bc:44:27:ba:03:b7:09:bc:76:d9:4c:7f:b3:6a:e4:
         1d:93:75:60:d6:74:e6:73:4b:7b:de:dc:d8:88:94:4c:2f:2d:
         82:13:6e:a0:0a:22:0e:8b:a4:a3:4c:af:f8:54:32:66:7b:06:
         fb:15:f7:c1:df:7a:8a:c7:74:27:9a:45:55:c9:e0:2a:2e:3b:
         34:02:76:98:4c:c4:b3:a3:55:c1:9a:43:53:a5:55:dd:70:2f:
         af:7e:7c:6f:69:81:fc:dc:3f:3f:2e:40:44:4f:86:cd:34:0a:
         22:c5:66:9c:95:c2:c4:d2:55:99:96:51:bd:fc:2e:b8:93:7f:
         16:13:ca:04:6c:b1:25:43:7d:b2:30:b4:50:93:3b:09:ad:61:
         2b:15:64:12:1f:46:38:2c:a1:7c:7b:ec:62:78:ed:26:54:5b:
         60:b1:a9:c9:cb:99:fa:7c:35:3b:b3:99:9b:a8:0c:92:01:c2:
         ce:d6:ec:35:37:4d:80:4b:71:0c:bf:de:9d:f9:5a:7e:dc:5b:
         36:e2:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:18:21 2026 by rpki-client