Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/P14SvQGLQVNfz8RAmoGqQyUNtWw.roa
File:                     P14SvQGLQVNfz8RAmoGqQyUNtWw.roa (raw, json)
Hash identifier:          CmnBxmZQ+UIIfmbiM97GKICFkrN/V/gXMwTXYMlLv4M=
Subject key identifier:   3F:5E:12:BD:01:8B:41:53:5F:CF:C4:40:9A:81:AA:43:25:0D:B5:6C
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       75
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/P14SvQGLQVNfz8RAmoGqQyUNtWw.roa
Signing time:             Tue 31 Mar 2026 07:48:44 +0000
ROA not before:           Tue 31 Mar 2026 07:48:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        2001:300:fffb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Mar 31 07:48:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3F5E12BD018B41535FCFC4409A81AA43250DB56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:a5:b7:8a:47:f5:80:a3:b8:12:03:2d:eb:
                    71:52:e8:c2:a2:1f:c0:55:89:5b:4d:05:84:ab:d5:
                    87:c4:03:39:28:1d:15:47:01:77:1d:aa:30:4f:c0:
                    5e:da:64:2b:b8:8b:63:a3:d6:40:4f:f1:0f:b8:39:
                    03:6f:77:9d:07:22:79:24:84:f9:64:3e:a0:22:32:
                    62:d9:6d:dd:13:38:ab:68:31:ec:37:27:18:56:84:
                    69:84:ce:f4:8d:8a:9a:cd:7c:33:ec:94:63:37:f3:
                    0c:e4:e4:69:4b:39:30:b2:20:9c:1a:cb:0f:5d:4f:
                    70:21:0e:a4:b2:00:4b:e4:0e:bb:da:8b:d8:ad:06:
                    10:68:26:17:bb:d3:fe:27:8b:05:7c:6b:81:01:2f:
                    1e:d4:2d:11:a6:c4:28:4c:08:69:24:82:8f:05:90:
                    95:91:44:f3:d9:5b:b9:72:bc:3b:a4:85:91:c0:64:
                    66:f8:9b:d1:d6:30:87:c0:30:01:3a:85:a9:49:6b:
                    1f:67:ab:c6:5e:2c:3d:6e:e8:4f:85:8a:2d:51:3b:
                    23:eb:3a:e0:3d:8b:0f:15:45:f6:a0:2a:17:a2:6b:
                    4a:cb:99:54:0c:5e:59:ee:3b:67:a9:d1:d2:ec:9c:
                    6c:f4:bf:37:8f:92:63:66:77:27:68:a6:9f:17:80:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5E:12:BD:01:8B:41:53:5F:CF:C4:40:9A:81:AA:43:25:0D:B5:6C
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/P14SvQGLQVNfz8RAmoGqQyUNtWw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:3b:54:87:e8:6c:61:e2:5f:bd:71:73:17:31:44:e1:17:ec:
         88:4b:c0:70:f7:4a:29:a5:bb:56:da:32:05:3a:b6:5c:7c:8a:
         18:ff:f7:af:32:b2:54:04:15:1a:9e:cf:66:92:f0:df:c6:0c:
         d9:c2:ad:59:cb:58:34:41:e4:41:e4:38:28:cd:f5:48:61:e7:
         49:91:c9:89:76:56:48:28:40:62:31:d5:48:c9:68:44:cd:0f:
         1c:3d:b5:39:ee:3a:96:82:df:29:23:9b:39:62:63:ed:26:30:
         10:6c:4e:bb:6c:6e:dd:76:3e:b0:94:c2:3c:4d:87:0c:b9:78:
         dd:b6:4f:57:61:3a:a5:65:ea:35:c9:75:ec:4b:4e:47:7c:91:
         eb:ed:35:37:07:3c:d8:6b:33:ee:b3:23:12:a3:8e:d5:4b:01:
         be:b2:cd:b2:73:84:ff:b3:b7:da:a3:32:66:6b:32:8d:aa:05:
         02:bc:75:62:56:4c:d0:b7:b4:79:86:f7:6b:21:e2:f5:ea:f6:
         87:4c:4a:87:8a:92:6d:0e:5a:75:37:ab:cb:f0:a7:1b:67:a8:
         5b:11:42:09:3c:66:0d:37:88:c3:f1:20:67:45:3d:2d:69:03:
         d6:4c:c1:d7:53:ae:3a:f5:cf:25:47:1c:95:62:df:f8:3c:a7:
         26:8c:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:21 2026 by rpki-client