Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/U4ndh-vGiy_ffUDM3YNOwlLgTPI.roa
File:                     U4ndh-vGiy_ffUDM3YNOwlLgTPI.roa (raw, json)
Hash identifier:          0YQQ2CtEiYDEPeTXNsmjavh1y/uz3fsHvZY7LWfGV3Y=
Subject key identifier:   53:89:DD:87:EB:C6:8B:2F:DF:7D:40:CC:DD:83:4E:C2:52:E0:4C:F2
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       78
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/U4ndh-vGiy_ffUDM3YNOwlLgTPI.roa
Signing time:             Tue 31 Mar 2026 07:48:45 +0000
ROA not before:           Tue 31 Mar 2026 07:48:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        2001:300:fffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Mar 31 07:48:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5389DD87EBC68B2FDF7D40CCDD834EC252E04CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:2a:b4:1a:58:77:50:cb:09:48:42:50:36:
                    f0:1a:c1:b6:73:ae:44:bd:80:d4:e2:c7:7c:1b:8c:
                    6c:51:44:66:b0:21:c1:a7:af:5d:78:b9:3e:a6:0e:
                    5f:52:15:40:c0:39:1a:6c:e9:8b:89:0a:90:b5:27:
                    c6:61:2f:59:8e:0b:0c:2f:2a:bc:a0:71:e2:f1:a7:
                    45:ea:7c:2d:fe:31:03:2e:60:ca:0c:df:86:25:b3:
                    29:71:13:e1:66:75:c2:be:ea:4b:11:a9:a5:9d:c3:
                    71:cd:d0:dd:58:cc:fd:d0:07:5d:d9:15:22:97:4b:
                    1f:8d:47:0f:dd:da:b5:4d:f6:bd:46:b8:5f:21:94:
                    5e:45:bb:63:df:03:5e:05:f3:11:d6:64:52:55:f0:
                    91:20:e8:09:ef:4c:db:10:0a:4c:04:fc:4a:3d:33:
                    c4:95:46:59:ff:67:5c:bf:4e:15:43:db:b2:92:48:
                    1e:a7:5a:89:f1:17:e9:fe:a6:57:3b:76:62:58:1a:
                    fe:4d:54:fb:2f:4f:25:a6:9a:e3:89:51:0e:f5:51:
                    f1:35:74:a3:44:24:56:97:1f:32:08:d2:a8:53:38:
                    29:fa:31:a5:55:0d:45:ec:68:aa:13:b6:4d:3a:a4:
                    f2:69:6f:38:03:18:12:7f:ce:13:a8:39:c8:63:fc:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:DD:87:EB:C6:8B:2F:DF:7D:40:CC:DD:83:4E:C2:52:E0:4C:F2
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/U4ndh-vGiy_ffUDM3YNOwlLgTPI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:09:90:3a:e9:59:26:38:da:a1:b3:24:c5:40:6c:bc:87:
         da:3d:76:e7:76:9f:d9:41:02:8a:bb:da:73:c3:bb:f2:38:96:
         8f:19:55:63:7e:62:8f:c4:d4:18:7c:4a:d4:7d:3d:2b:66:a0:
         15:de:ad:9a:d7:86:d1:bb:ea:77:cf:6d:6d:f5:a7:7a:d2:ba:
         cb:cf:54:b2:ae:31:c8:47:07:e3:75:14:5b:2a:24:5c:dc:0e:
         e2:20:c4:41:b2:86:9c:70:42:29:fc:44:65:41:62:99:fd:e8:
         c6:8f:d6:c5:07:9a:70:f0:f0:b9:c5:0d:12:97:b4:89:8a:79:
         1b:3d:9d:56:4c:d8:17:d5:e6:ff:4b:8f:f5:a0:24:fa:e7:0c:
         d7:09:47:8f:03:64:e6:ec:9d:44:6f:02:b5:e0:6d:78:8d:ee:
         c8:08:5d:c3:62:88:14:ab:12:8a:b1:ed:63:61:00:e5:a7:dc:
         25:06:ec:09:92:7f:7e:b9:f3:53:87:7e:5f:1e:32:b0:04:38:
         1b:ec:5c:d6:55:ff:bc:da:2a:b4:e6:2f:76:36:dd:d0:30:18:
         db:ac:91:aa:37:f2:b2:c9:6f:16:21:02:97:35:e3:72:ed:59:
         2b:b1:56:2f:b2:f5:7c:67:aa:35:4f:51:da:07:db:3c:b1:6b:
         81:f6:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client