Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/8NQBv0hWRF6J1vUTAHFNcb6YCV8.roa
File:                     8NQBv0hWRF6J1vUTAHFNcb6YCV8.roa (raw, json)
Hash identifier:          GvKy5eHzS8hzZxPWjoIwwpgW6xJCltDposxVUDcASt0=
Subject key identifier:   F0:D4:01:BF:48:56:44:5E:89:D6:F5:13:00:71:4D:71:BE:98:09:5F
Certificate issuer:       /CN=395D892753C1595E076B5F10065A048661C3079E
Certificate serial:       73
Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/8NQBv0hWRF6J1vUTAHFNcb6YCV8.roa
Signing time:             Tue 31 Mar 2026 07:32:21 +0000
ROA not before:           Tue 31 Mar 2026 07:32:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        2001:c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395D892753C1595E076B5F10065A048661C3079E
        Validity
            Not Before: Mar 31 07:32:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F0D401BF4856445E89D6F51300714D71BE98095F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:3c:c3:75:10:b2:5d:ac:8c:bd:80:f9:5d:
                    7a:f2:58:4b:ce:ed:e6:06:4f:05:2c:e6:1c:7e:95:
                    06:a3:da:0b:02:db:6a:54:f9:0f:14:19:ca:97:e6:
                    d4:58:a4:cd:3f:68:62:c7:17:31:a9:c6:00:88:84:
                    d2:25:51:a9:99:ed:e6:7f:34:e5:a3:cc:a2:42:15:
                    ef:68:a0:03:d3:3c:72:6e:d3:b2:d4:aa:dd:c7:e7:
                    72:79:ea:a8:ec:cd:57:90:c6:42:35:03:ff:4c:17:
                    b3:8c:eb:f6:25:30:e6:1d:0d:22:7c:04:9c:79:c6:
                    1a:26:ab:07:2d:1c:1d:32:48:ee:28:0c:f9:c7:5e:
                    0b:cf:37:0b:40:19:66:12:59:56:f8:f8:06:b8:aa:
                    97:f2:65:90:2f:ad:39:ca:b0:d4:fb:5d:17:6e:27:
                    35:67:9e:03:9c:54:8c:3a:61:9e:61:37:ff:51:e4:
                    e6:e6:7b:57:ce:f8:88:3e:9c:82:d8:f0:53:3c:44:
                    a5:54:bc:26:f5:a2:c8:43:fe:48:e1:9b:df:c7:b0:
                    9a:88:38:a7:97:9a:ab:50:f2:dc:d7:99:25:e4:28:
                    af:8b:ee:32:10:9c:50:13:4c:dd:1b:29:5c:a3:59:
                    b9:fb:70:63:08:da:89:a8:ac:ad:2c:bb:7f:17:f9:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:01:BF:48:56:44:5E:89:D6:F5:13:00:71:4D:71:BE:98:09:5F
            X509v3 Authority Key Identifier:
                keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/8NQBv0hWRF6J1vUTAHFNcb6YCV8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:e5:01:2e:3f:a2:35:a4:8d:19:e5:e0:1b:82:6c:45:07:ae:
         25:3d:2b:15:52:88:3b:ba:84:95:ba:dc:a0:2e:0c:78:6c:86:
         38:da:79:68:23:9b:f4:be:4a:74:b5:35:3f:e4:ae:2d:a8:8a:
         80:f1:2f:32:ea:b9:77:bf:1a:3f:04:c9:d5:40:83:bc:11:8a:
         e0:cc:cd:85:d2:99:76:34:a4:d3:1c:a9:f1:1c:77:03:a6:60:
         fd:23:b4:16:11:26:2c:81:cd:56:22:7b:d7:01:e1:eb:3a:0b:
         96:50:f6:ba:01:48:45:e7:ce:ce:6a:e2:28:f1:6c:b8:52:a7:
         81:45:6a:de:1a:dc:95:7e:52:ae:31:e5:00:03:10:3a:de:77:
         92:24:60:2e:b9:68:10:37:25:3c:c5:07:a8:2e:87:78:9d:01:
         58:9c:5a:56:89:1e:4f:29:ff:98:97:b0:d0:1b:60:d7:72:cd:
         c5:cd:e2:11:6c:eb:dd:df:e7:fe:e4:e6:b8:02:7e:59:a4:6f:
         f6:3a:5d:21:89:4a:7f:fa:78:b4:c3:f1:a1:af:e5:d3:c6:f9:
         fb:86:5f:ef:bb:70:0f:47:35:84:74:e2:dd:0e:a8:65:9d:71:
         70:bf:42:24:30:fb:47:3c:4d:e9:12:d8:fc:a8:14:8c:56:c9:
         85:57:5a:10
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOTVE
ODkyNzUzQzE1OTVFMDc2QjVGMTAwNjVBMDQ4NjYxQzMwNzlFMB4XDTI2MDMzMTA3
MzIyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjBENDAxQkY0ODU2NDQ1
RTg5RDZGNTEzMDA3MTRENzFCRTk4MDk1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMqJPMN1ELJdrIy9gPldevJYS87t5gZPBSzmHH6VBqPaCwLbalT5
DxQZypfm1FikzT9oYscXManGAIiE0iVRqZnt5n805aPMokIV72igA9M8cm7TstSq
3cfncnnqqOzNV5DGQjUD/0wXs4zr9iUw5h0NInwEnHnGGiarBy0cHTJI7igM+cde
C883C0AZZhJZVvj4Briql/JlkC+tOcqw1PtdF24nNWeeA5xUjDphnmE3/1Hk5uZ7
V874iD6cgtjwUzxEpVS8JvWiyEP+SOGb38ewmog4p5eaq1Dy3NeZJeQor4vuMhCc
UBNM3RspXKNZuftwYwjaiaisrSy7fxf5l6kCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTw1AG/SFZEXonW9RMAcU1xvpgJXzAfBgNVHSMEGDAWgBQ5XYknU8FZXgdrXxAG
WgSGYcMHnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNDUvT1YySkoxUEJXVjRIYTE4UUJsb0VobUhEQjU0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT1YySkoxUEJXVjRIYTE4UUJsb0Vo
bUhEQjU0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDQ1LzhOUUJ2MGhXUkY2SjF2VVRBSEZOY2I2WUNWOC5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQxAMA0GCSqGSIb3DQEBCwUA
A4IBAQDG5QEuP6I1pI0Z5eAbgmxFB64lPSsVUog7uoSVutygLgx4bIY42nloI5v0
vkp0tTU/5K4tqIqA8S8y6rl3vxo/BMnVQIO8EYrgzM2F0pl2NKTTHKnxHHcDpmD9
I7QWESYsgc1WInvXAeHrOguWUPa6AUhF587OauIo8Wy4UqeBRWreGtyVflKuMeUA
AxA63neSJGAuuWgQNyU8xQeoLod4nQFYnFpWiR5PKf+Yl7DQG2DXcs3FzeIRbOvd
3+f+5Oa4An5ZpG/2Ol0hiUp/+ni0w/Ghr+XTxvn7hl/vu3APRzWEdOLdDqhlnXFw
v0IkMPtHPE3pEtj8qBSMVsmFV1oQ
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client