Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/QS5WtvuvDu_O1oWnE2eZMSIeAX4.roa
File:                     QS5WtvuvDu_O1oWnE2eZMSIeAX4.roa (raw, json)
Hash identifier:          d0MxaRVl+0ynKM7zKzQ08XT5MyowKOGx+Qpx4l4TBD8=
Subject key identifier:   41:2E:56:B6:FB:AF:0E:EF:CE:D6:85:A7:13:67:99:31:22:1E:01:7E
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       51
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/QS5WtvuvDu_O1oWnE2eZMSIeAX4.roa
Signing time:             Tue 31 Mar 2026 08:14:31 +0000
ROA not before:           Tue 31 Mar 2026 08:14:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2001:2c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Mar 31 08:14:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=412E56B6FBAF0EEFCED685A713679931221E017E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:df:95:4a:ec:a9:85:6a:b6:fb:75:07:2c:
                    42:84:43:9c:fc:19:28:e2:87:f9:56:1b:cd:d6:02:
                    04:03:c8:98:02:01:24:8d:4e:c1:48:94:13:04:43:
                    ee:66:1e:7d:c2:c8:1f:f2:93:c5:46:3a:73:d6:5d:
                    5d:3b:e2:de:bb:6e:bb:8e:26:1f:5e:bf:f0:80:63:
                    85:e2:17:b8:fc:d3:e1:52:36:7b:57:ae:db:72:90:
                    78:bf:27:00:d5:5c:8d:81:73:7a:0e:79:53:b6:27:
                    48:da:bb:36:af:cb:21:97:91:a4:b0:bb:22:a5:1d:
                    eb:ee:91:93:5a:4c:a1:80:40:81:04:a3:17:90:cb:
                    6a:38:7b:dd:00:55:09:27:7e:8c:35:ec:93:38:a6:
                    ca:65:4e:df:9c:1e:1c:56:34:7b:00:0b:73:fa:a4:
                    1d:3d:f0:1e:0e:09:12:10:12:8e:9f:8b:2b:d7:f2:
                    1c:4a:2b:33:a1:c3:82:46:b3:d5:c5:a1:49:fc:f8:
                    91:70:b4:34:25:a7:4d:e8:7b:c0:42:75:79:8c:d2:
                    4b:65:01:35:78:d7:33:49:cd:99:c4:14:c6:df:6f:
                    e1:e9:0a:20:20:26:04:80:36:08:8a:a6:28:07:b4:
                    57:6a:6f:6f:d0:8f:cb:ff:5f:e6:f6:74:8f:cc:08:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2E:56:B6:FB:AF:0E:EF:CE:D6:85:A7:13:67:99:31:22:1E:01:7E
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/QS5WtvuvDu_O1oWnE2eZMSIeAX4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:71:aa:15:56:cb:02:f4:79:86:b8:03:2c:46:b4:b7:55:53:
         2c:57:33:f5:4e:aa:f7:e7:e3:c4:69:88:0d:35:9f:59:cd:0e:
         e8:84:e7:4f:ea:42:3c:e0:6d:81:66:78:78:6d:bf:78:c4:1f:
         dd:e9:26:ea:4c:9a:9f:50:49:f3:0f:7f:92:29:27:f4:53:02:
         73:46:be:f1:73:1f:c3:57:45:51:dc:68:db:41:c9:d8:19:e9:
         d1:ff:1e:80:e0:6c:71:dc:26:0b:f0:db:d3:45:74:10:cd:bc:
         b4:96:cf:9c:d4:41:11:fb:7c:a3:20:28:27:52:b9:bb:bb:d7:
         b5:d9:be:02:42:8d:92:3a:d1:35:ea:74:c9:34:b7:ec:7c:c1:
         89:83:37:11:4f:62:96:41:fd:44:5a:06:88:cf:55:b5:fc:e7:
         2a:4f:d3:be:69:64:c9:af:32:c9:11:2e:39:89:4c:e4:08:40:
         30:39:5e:c4:6f:33:4a:3a:40:81:22:92:21:b3:1e:ab:0c:b7:
         02:ca:e7:06:ac:57:ae:d8:1c:6a:dc:a0:cb:fb:06:fe:d1:2c:
         9f:f9:2f:10:a4:c5:98:d3:33:24:b5:d3:4c:a3:0f:2b:40:0a:
         25:c4:64:71:b4:33:81:34:ad:05:09:06:24:2c:05:cc:9b:b9:
         6c:8d:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:24 2026 by rpki-client