Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa
File:                     ZlDCDkGamCsUyoygG1irDUnjLRg.roa (raw, json)
Hash identifier:          XqG5evlM/mYDOTDSfWksnfe8kGR0CznZt7DestsqNT4=
Subject key identifier:   66:50:C2:0E:41:9A:98:2B:14:CA:8C:A0:1B:58:AB:0D:49:E3:2D:18
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       73
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa
Signing time:             Tue 31 Mar 2026 07:48:43 +0000
ROA not before:           Tue 31 Mar 2026 07:48:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        2001:240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Mar 31 07:48:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6650C20E419A982B14CA8CA01B58AB0D49E32D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:88:f6:6e:0a:6a:ee:e5:53:a6:60:67:9f:
                    9f:ea:fc:91:9d:fb:82:d1:5a:bf:7c:9f:a3:37:7a:
                    57:06:75:f8:02:e1:d2:f4:32:c2:64:3f:fc:0d:67:
                    9b:e5:7e:7c:6e:6c:bd:62:79:ee:7d:7d:d9:6d:48:
                    5b:6c:a2:d5:4e:eb:06:2e:a4:82:39:69:e8:44:53:
                    e7:c0:6e:32:ea:32:ce:8c:3c:15:b6:b7:2f:d3:b9:
                    3a:7b:a5:41:78:5b:7b:13:bb:14:e7:d0:e2:cf:35:
                    f9:37:f5:7e:db:3a:c5:be:5a:94:19:35:2e:a4:d5:
                    ea:42:78:52:20:22:6b:4c:8e:7c:5b:c0:0f:01:45:
                    67:41:04:a2:27:60:e0:0e:51:38:65:94:2e:34:b4:
                    1d:3d:be:cf:83:6b:e8:64:e8:6a:90:1a:ad:90:ef:
                    89:c8:52:8c:96:54:4a:80:43:23:1a:64:1c:a1:12:
                    41:cc:fd:a9:7d:6b:70:f4:a4:e9:c6:54:66:bd:21:
                    2c:03:1e:1b:1e:bf:a3:2b:12:e8:73:7a:ff:b3:c8:
                    3d:61:58:98:54:dd:aa:3e:68:c3:e6:28:63:96:54:
                    b3:18:0a:17:55:74:69:de:51:df:07:42:42:6b:ce:
                    c8:4f:62:e8:2f:f6:53:25:1f:47:78:11:6d:38:10:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:50:C2:0E:41:9A:98:2B:14:CA:8C:A0:1B:58:AB:0D:49:E3:2D:18
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:f4:86:e9:89:c2:ad:1e:3c:ed:0a:89:0c:e2:cc:fa:23:
         fb:e3:0c:dd:f9:e0:b4:29:9c:f4:25:76:4c:4a:a8:a4:8d:ad:
         58:73:bc:85:2b:9d:d5:a9:a1:a8:2a:89:a3:2a:66:94:d8:55:
         a5:1f:61:5c:c1:ca:58:1c:19:8e:dc:3e:fb:43:ab:06:94:c6:
         03:88:f7:e7:89:09:1d:5a:4f:f4:f8:87:2e:e0:02:74:3c:49:
         63:82:da:99:2d:2d:8d:06:0a:74:11:48:92:eb:a2:ff:3d:cd:
         09:55:df:e9:c0:75:40:16:f7:1a:e7:bd:fc:ec:cb:71:a1:82:
         3e:e8:ab:3d:3a:28:79:e5:60:0a:ec:db:18:ee:a6:53:5e:d5:
         35:28:d7:e7:94:0e:12:3f:e7:e8:08:d2:90:d6:98:51:e5:56:
         33:d0:04:69:73:d5:56:9d:30:13:8e:ac:b7:1c:9b:93:59:12:
         a2:4f:e8:37:4d:fa:cb:c5:5e:70:44:ab:28:be:d3:a8:0e:12:
         e3:6f:3b:ff:a8:70:91:c3:d8:75:b5:3c:ab:a6:e3:0d:c6:18:
         b2:99:aa:31:56:4b:d7:cb:77:ab:e9:63:97:f4:3c:5f:9f:00:
         46:1e:00:6d:0c:d7:59:91:97:2d:be:87:51:a3:01:2d:bc:7e:
         ec:66:fb:e7
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI2MDMzMTA3
NDg0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjY1MEMyMEU0MTlBOTgy
QjE0Q0E4Q0EwMUI1OEFCMEQ0OUUzMkQxODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKSgiPZuCmru5VOmYGefn+r8kZ37gtFav3yfozd6VwZ1+ALh0vQy
wmQ//A1nm+V+fG5svWJ57n192W1IW2yi1U7rBi6kgjlp6ERT58BuMuoyzow8Fba3
L9O5OnulQXhbexO7FOfQ4s81+Tf1fts6xb5alBk1LqTV6kJ4UiAia0yOfFvADwFF
Z0EEoidg4A5ROGWULjS0HT2+z4Nr6GToapAarZDvichSjJZUSoBDIxpkHKESQcz9
qX1rcPSk6cZUZr0hLAMeGx6/oysS6HN6/7PIPWFYmFTdqj5ow+YoY5ZUsxgKF1V0
ad5R3wdCQmvOyE9i6C/2UyUfR3gRbTgQAgsCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBRmUMIOQZqYKxTKjKAbWKsNSeMtGDAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE2L1psRENEa0dhbUNzVXlveWdHMWlyRFVuakxSZy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJAMA0GCSqGSIb3DQEBCwUA
A4IBAQCU1fSG6YnCrR487QqJDOLM+iP74wzd+eC0KZz0JXZMSqikja1Yc7yFK53V
qaGoKomjKmaU2FWlH2FcwcpYHBmO3D77Q6sGlMYDiPfniQkdWk/0+Icu4AJ0PElj
gtqZLS2NBgp0EUiS66L/Pc0JVd/pwHVAFvca57387MtxoYI+6Ks9Oih55WAK7NsY
7qZTXtU1KNfnlA4SP+foCNKQ1phR5VYz0ARpc9VWnTATjqy3HJuTWRKiT+g3TfrL
xV5wRKsovtOoDhLjbzv/qHCRw9h1tTyrpuMNxhiymaoxVkvXy3er6WOX9DxfnwBG
HgBtDNdZkZctvodRowEtvH7sZvvn
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:14 2026 by rpki-client