Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A6V232dFcUIt_1fYubvlsMH5K60.roa
File:                     A6V232dFcUIt_1fYubvlsMH5K60.roa (raw, json)
Hash identifier:          jiyK/RJS1v364K0VmpSCOg00yZEjY5ZgmRJyLtWHwLs=
Subject key identifier:   03:A5:76:DF:67:45:71:42:2D:FF:57:D8:B9:BB:E5:B0:C1:F9:2B:AD
Certificate issuer:       /CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
Certificate serial:       03
Authority key identifier: 03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A6V232dFcUIt_1fYubvlsMH5K60.roa
Signing time:             Tue 31 Mar 2026 08:49:43 +0000
ROA not before:           Tue 31 Mar 2026 08:49:43 +0000
ROA not after:            Wed 24 Mar 2027 02:46:29 +0000
asID:                     17511
IP address blocks:        2001:ce8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
        Validity
            Not Before: Mar 31 08:49:43 2026 GMT
            Not After : Mar 24 02:46:29 2027 GMT
        Subject: CN=03A576DF674571422DFF57D8B9BBE5B0C1F92BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:9f:56:35:71:8e:42:cd:b8:38:8a:e2:bf:
                    93:e4:be:34:da:96:aa:f0:c4:7b:20:a9:43:fb:db:
                    ab:96:cc:a2:46:d1:73:50:8a:33:a7:cf:a4:9f:f7:
                    dc:fd:7a:11:7b:8c:db:a6:c8:85:23:07:d3:75:d3:
                    4f:9c:40:99:cd:42:96:80:57:10:0b:3a:c3:f7:c7:
                    26:60:11:b7:d3:d4:e5:cd:4f:87:8c:52:06:d1:d5:
                    ae:22:46:13:a5:ac:71:81:1a:a2:49:69:3c:2c:8f:
                    ff:32:b3:59:90:bc:d7:63:85:bf:75:d4:60:16:b7:
                    13:0d:88:89:d1:fb:41:1f:10:60:f6:a0:a1:40:6a:
                    cc:d2:fc:12:5a:53:60:96:48:e7:0a:a0:d0:80:36:
                    e2:8b:fe:85:92:f7:00:26:4c:0e:e5:2e:d0:6f:7d:
                    48:c3:7c:43:9f:61:19:f1:4f:a2:e6:0a:2a:3b:f3:
                    0e:c6:ac:77:6c:ff:52:bc:be:3c:c7:b1:f0:30:fc:
                    46:e3:d3:4f:08:98:0c:73:55:90:6d:da:68:21:22:
                    73:98:e5:98:1f:df:5c:bc:71:b1:8c:b5:9c:3b:37:
                    57:75:ab:79:f9:0d:03:9a:02:f9:c5:5e:78:f5:e0:
                    70:90:7a:7b:c8:4b:52:25:21:a4:f4:97:0c:f5:9b:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:76:DF:67:45:71:42:2D:FF:57:D8:B9:BB:E5:B0:C1:F9:2B:AD
            X509v3 Authority Key Identifier:
                keyid:03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A6V232dFcUIt_1fYubvlsMH5K60.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:78:2e:dc:37:b5:2d:d0:0b:db:ec:0c:1e:ea:44:05:af:f9:
         11:dd:e9:cb:b4:61:8c:ba:60:a0:a0:61:04:e2:04:77:88:46:
         09:33:a7:fb:33:57:b4:eb:65:36:86:00:22:3a:9f:55:fd:78:
         af:cd:62:8c:e1:56:d1:4c:94:43:b7:6b:c3:16:05:f1:85:ea:
         ad:ee:9e:16:77:d0:19:78:0b:ba:70:8d:35:b5:51:06:73:4f:
         7e:52:4d:b0:b8:bc:7d:76:4f:3f:85:b1:81:e7:d4:ed:28:f5:
         36:6a:11:08:96:78:4f:88:3f:77:71:f6:c8:27:bd:eb:52:33:
         4f:71:38:d4:ae:ea:b4:08:19:9a:a4:0f:df:7e:96:6a:aa:0a:
         28:0f:a1:38:9a:ef:a9:0f:29:2f:55:67:a2:97:fb:87:42:81:
         3c:73:d3:dc:51:7c:4b:00:26:b0:54:a2:43:43:8c:30:13:5f:
         3e:7c:77:e2:3b:bb:17:fc:37:93:18:28:3d:e5:3c:2b:96:53:
         51:32:0c:56:36:3f:ad:b0:d8:15:72:15:95:ea:b0:d8:a9:a5:
         e5:8c:fa:5f:8a:f7:e0:1c:b0:ab:e5:1a:bd:06:8e:da:be:56:
         3c:87:3b:23:81:2a:75:d3:ec:0e:b7:b1:d2:02:b0:43:bb:f8:
         6f:9e:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:50 2026 by rpki-client