Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/jnHo2ZwBs17yqVbCjeALf0EsWOs.roa
File:                     jnHo2ZwBs17yqVbCjeALf0EsWOs.roa (raw, json)
Hash identifier:          HndgML4LF86kLzTyo1xvjQa39w/j8ihNJN1feNvv+JE=
Subject key identifier:   8E:71:E8:D9:9C:01:B3:5E:F2:A9:56:C2:8D:E0:0B:7F:41:2C:58:EB
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       7A
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/jnHo2ZwBs17yqVbCjeALf0EsWOs.roa
Signing time:             Tue 31 Mar 2026 07:48:46 +0000
ROA not before:           Tue 31 Mar 2026 07:48:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4774
IP address blocks:        2001:300:fff5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Mar 31 07:48:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E71E8D99C01B35EF2A956C28DE00B7F412C58EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:26:79:b2:84:5c:97:69:92:b1:40:b4:55:
                    08:8c:c1:9a:83:a6:36:a4:7d:18:38:06:a5:82:02:
                    da:a6:e1:9e:fe:e8:6e:1c:13:13:f7:14:ae:e0:b5:
                    ae:84:a8:3c:b3:5f:75:1a:0e:ca:f5:e6:f6:76:20:
                    b2:2d:1a:ed:26:48:0d:53:1c:6d:d7:b4:18:12:2f:
                    0e:c0:98:88:e1:bd:e8:a5:39:5f:db:68:a9:a9:69:
                    ff:6e:7f:06:b0:d7:4d:c3:0b:34:c4:c3:95:43:2d:
                    d5:e0:8a:02:eb:99:5f:17:ac:cf:5d:6c:7a:06:ea:
                    32:07:3c:b5:6a:dd:79:61:64:dd:f7:f9:90:18:6d:
                    9b:39:cd:ca:de:1a:90:a2:a6:f4:8a:5b:ca:d4:e8:
                    a7:06:05:60:78:b6:73:ef:12:fd:83:82:db:5c:b0:
                    0c:43:32:50:f0:e5:68:0e:83:89:55:d6:66:4f:34:
                    f8:13:2c:49:c1:35:38:92:fa:ae:c2:52:a5:e3:5d:
                    8b:be:79:1a:1f:8a:e2:2f:24:72:28:30:5d:7a:cf:
                    d3:85:40:b4:58:50:7b:72:62:71:6b:66:4e:93:32:
                    49:4f:0e:5d:46:4c:c8:8b:ea:c5:f5:5a:f2:f1:d2:
                    df:f1:56:e9:6a:c4:39:73:aa:49:c3:f3:e3:5e:32:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:E8:D9:9C:01:B3:5E:F2:A9:56:C2:8D:E0:0B:7F:41:2C:58:EB
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/jnHo2ZwBs17yqVbCjeALf0EsWOs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fff5::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:f0:09:69:dd:b5:f6:c5:34:a2:06:38:84:dc:ca:c7:43:7b:
         bd:f2:58:aa:d7:46:6c:a4:3e:65:b5:67:0f:ee:9b:5d:9f:38:
         93:28:74:c6:9b:41:67:51:8b:24:f2:c2:04:01:6d:28:39:bc:
         80:ac:fd:98:22:c0:0f:47:e4:c4:cd:a6:79:77:72:85:fe:ee:
         49:25:33:f7:a0:0e:65:b1:89:41:b8:fe:21:4d:a3:90:19:bb:
         c2:42:51:63:cb:32:1c:33:3a:b6:fe:20:57:55:e7:b3:22:2c:
         de:46:86:24:b3:4e:9b:f8:e9:84:0a:58:9d:78:64:74:18:ed:
         1e:ea:23:08:cf:2c:4c:41:04:80:29:05:24:81:8c:8a:98:e1:
         f7:34:c5:34:1d:8f:ac:d9:62:88:94:e8:e9:d7:e1:00:d2:45:
         fb:fa:1f:1d:38:6e:6c:9c:e5:3b:c6:bb:ef:3b:f0:8e:ad:3f:
         e9:5c:34:2d:10:4d:e2:f5:fb:3e:76:12:76:22:e9:3f:5e:10:
         db:79:32:bd:5d:ac:a2:79:f4:cb:58:40:45:6e:07:58:8f:b6:
         a8:0d:1b:d0:2c:fd:69:d3:e5:85:1f:91:d3:47:db:aa:78:ec:
         14:22:1b:0d:c6:b9:ba:0c:48:2d:47:e3:0e:83:8e:bd:e2:dd:
         d3:ac:45:31
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI2MDMzMTA3
NDg0NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEU3MUU4RDk5QzAxQjM1
RUYyQTk1NkMyOERFMDBCN0Y0MTJDNThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOaEJnmyhFyXaZKxQLRVCIzBmoOmNqR9GDgGpYIC2qbhnv7obhwT
E/cUruC1roSoPLNfdRoOyvXm9nYgsi0a7SZIDVMcbde0GBIvDsCYiOG96KU5X9to
qalp/25/BrDXTcMLNMTDlUMt1eCKAuuZXxesz11segbqMgc8tWrdeWFk3ff5kBht
mznNyt4akKKm9IpbytTopwYFYHi2c+8S/YOC21ywDEMyUPDlaA6DiVXWZk80+BMs
ScE1OJL6rsJSpeNdi755Gh+K4i8kcigwXXrP04VAtFhQe3JicWtmTpMySU8OXUZM
yIvqxfVa8vHS3/FW6WrEOXOqScPz414yWRUCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBSOcejZnAGzXvKpVsKN4At/QSxY6zAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE2L2puSG8yWndCczE3eXFWYkNqZUFMZjBFc1dPcy5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQMA//UwDQYJKoZIhvcNAQEL
BQADggEBAJfwCWndtfbFNKIGOITcysdDe73yWKrXRmykPmW1Zw/um12fOJModMab
QWdRiyTywgQBbSg5vICs/ZgiwA9H5MTNpnl3coX+7kklM/egDmWxiUG4/iFNo5AZ
u8JCUWPLMhwzOrb+IFdV57MiLN5GhiSzTpv46YQKWJ14ZHQY7R7qIwjPLExBBIAp
BSSBjIqY4fc0xTQdj6zZYoiU6OnX4QDSRfv6Hx04bmyc5TvGu+878I6tP+lcNC0Q
TeL1+z52EnYi6T9eENt5Mr1drKJ59MtYQEVuB1iPtqgNG9As/WnT5YUfkdNH26p4
7BQiGw3GuboMSC1H4w6Djr3i3dOsRTE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:11 2026 by rpki-client