Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/bhoHltWtMMZeArwwtm-4go_yGM0.roa
File:                     bhoHltWtMMZeArwwtm-4go_yGM0.roa (raw, json)
Hash identifier:          Dc7s29N18W9NG5/rmdDqt4yYwRq8Ju02X8ZzV/qKhmw=
Subject key identifier:   6E:1A:07:96:D5:AD:30:C6:5E:02:BC:30:B6:6F:B8:82:8F:F2:18:CD
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       76
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/bhoHltWtMMZeArwwtm-4go_yGM0.roa
Signing time:             Tue 31 Mar 2026 07:48:44 +0000
ROA not before:           Tue 31 Mar 2026 07:48:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        2001:300:fffc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Mar 31 07:48:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E1A0796D5AD30C65E02BC30B66FB8828FF218CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:e5:cc:c6:c1:87:7f:3d:11:0d:0e:d1:50:
                    9a:77:ce:fd:26:92:9f:1b:8a:fb:78:a5:d8:e8:67:
                    7c:3f:f5:62:37:aa:79:d5:7b:de:e3:b3:cd:a3:f9:
                    3b:18:e7:5c:4a:fa:3b:c4:df:6d:fc:e4:fc:7a:56:
                    36:58:92:44:c6:61:99:21:1a:8e:b3:08:fd:10:4e:
                    23:85:0d:5f:be:c4:c7:af:b9:9c:9e:b3:ef:59:26:
                    3a:09:e6:8e:3b:c1:5a:74:ff:4f:64:18:4f:ab:fe:
                    87:31:3e:52:ae:9c:99:7b:7c:46:00:99:d8:32:ce:
                    1e:b3:2e:c0:b4:02:42:e2:fb:a4:74:78:cf:99:87:
                    cc:7d:1b:b0:0d:5c:ef:1e:fb:86:e5:b5:6f:09:71:
                    02:76:df:21:92:08:0f:97:7c:74:a8:29:0a:d5:fd:
                    6f:61:23:5c:53:ad:60:a2:d1:40:c9:84:4e:d3:fb:
                    a0:19:9f:12:98:51:25:15:3a:7b:3d:ed:e9:ec:2c:
                    19:3d:51:54:8c:db:94:03:d5:5d:4d:1a:31:9f:b7:
                    43:c2:a8:c6:a4:7a:68:a2:a9:02:84:27:ff:31:e8:
                    18:db:00:b0:94:65:a3:aa:f8:28:75:57:b4:a3:90:
                    0f:d3:77:fe:0d:5e:1e:c7:2d:fe:00:8f:bc:39:7d:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:07:96:D5:AD:30:C6:5E:02:BC:30:B6:6F:B8:82:8F:F2:18:CD
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/bhoHltWtMMZeArwwtm-4go_yGM0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:60:98:14:98:1b:5b:90:04:52:33:c2:1e:d3:01:24:67:15:
         c9:ae:6a:98:2d:d1:84:19:46:65:d9:ce:71:9b:da:e5:1e:d5:
         31:7f:d7:b6:57:1b:7d:5a:fc:11:22:2f:92:51:bf:b2:c8:30:
         d7:a5:b9:36:f4:e2:f5:72:67:20:c6:9e:5c:0b:c6:df:c6:3e:
         09:c2:be:4d:dc:7c:e6:3c:b4:f8:e2:74:46:af:0d:08:c1:20:
         33:66:03:65:b1:39:74:b1:a2:66:ce:39:4a:83:f2:c9:94:ed:
         94:85:e1:f9:93:ca:eb:20:08:c8:00:33:4a:b2:29:3c:62:22:
         b2:62:d7:dc:ab:e2:05:cb:63:52:e3:75:09:5b:39:2d:75:84:
         1d:28:ec:11:7c:d5:4d:41:78:cd:0b:38:b0:c0:2d:6c:66:4a:
         0e:b8:d5:9f:ad:c0:b2:75:6a:be:3b:e6:35:bc:0b:49:2d:33:
         cc:ea:ba:bc:bb:64:af:4a:d5:f1:87:a3:ab:63:a3:cd:69:4f:
         93:53:e5:cf:79:de:f0:c1:ed:01:39:e6:e0:b9:c6:8c:11:7e:
         46:23:1a:7a:6f:3a:31:00:c9:47:11:de:f2:66:7c:53:18:13:
         4f:a3:49:0f:d0:cc:c0:c8:58:0c:6f:c7:12:be:15:1b:52:d2:
         d1:16:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:13 2026 by rpki-client