Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30055/tzlAeWsph_fySEX9jFU65tIQT3U.roa
File:                     tzlAeWsph_fySEX9jFU65tIQT3U.roa (raw, json)
Hash identifier:          f4ZXjqdzRZn+5G6wmg8hWJK0aVocIa/afPBoGrypzks=
Subject key identifier:   B7:39:40:79:6B:29:87:F7:F2:48:45:FD:8C:55:3A:E6:D2:10:4F:75
Certificate issuer:       /CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
Certificate serial:       2C
Authority key identifier: 10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/tzlAeWsph_fySEX9jFU65tIQT3U.roa
Signing time:             Tue 31 Mar 2026 08:34:47 +0000
ROA not before:           Tue 31 Mar 2026 08:34:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        2001:2a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
        Validity
            Not Before: Mar 31 08:34:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B73940796B2987F7F24845FD8C553AE6D2104F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:97:7f:a6:56:f3:eb:7e:b2:61:99:62:24:
                    7a:9f:db:bc:69:c1:14:07:2f:66:a2:c7:aa:b4:4c:
                    86:2d:ff:a9:2c:6f:d6:b5:bf:49:37:54:1d:ea:0c:
                    ee:27:c3:3a:a1:11:c8:4d:bb:c6:d2:6d:17:45:81:
                    09:0b:02:16:2a:67:ca:02:51:6e:a2:05:4f:31:6c:
                    85:34:2c:37:0e:a2:1a:df:1d:c3:14:6f:f8:1b:fe:
                    54:8d:83:b7:f6:a5:8f:1e:38:a5:ae:fd:b2:c9:1b:
                    20:1f:56:50:35:d1:98:55:07:92:26:66:24:4b:d9:
                    62:84:e7:a5:cd:bd:cc:f4:c1:47:95:c9:77:71:de:
                    fe:19:2d:5b:24:84:ee:4f:68:43:bd:68:6d:d3:92:
                    42:06:2e:d8:11:e9:d2:b2:aa:7f:ec:79:75:ef:4d:
                    9e:a6:3d:1d:a7:ee:5f:17:23:6d:38:53:0e:ff:78:
                    b3:32:32:17:5e:80:4c:49:5e:1d:0c:b6:a5:16:b4:
                    d4:85:00:df:91:df:e7:0c:cd:e2:c4:18:6c:c0:bb:
                    6d:74:c1:82:36:97:d3:5b:23:7e:a2:21:04:a8:62:
                    fb:ab:fd:5a:76:26:67:2c:39:b6:34:c0:b8:72:b4:
                    f9:88:83:7d:df:c7:a4:2e:d9:07:33:cc:7b:34:07:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:40:79:6B:29:87:F7:F2:48:45:FD:8C:55:3A:E6:D2:10:4F:75
            X509v3 Authority Key Identifier:
                keyid:10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/tzlAeWsph_fySEX9jFU65tIQT3U.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:a4:a0:d7:64:e1:ec:0a:53:3a:2c:a7:7f:09:f7:ed:3c:59:
         c9:13:59:7e:4a:c5:c4:d1:4d:e2:e3:9d:01:d6:92:a3:57:aa:
         b7:1b:35:d3:21:62:33:ea:e6:16:ee:2d:ad:94:95:67:f1:e7:
         a0:9d:2b:85:a2:ed:54:6b:5e:33:f3:dc:cf:7d:dd:a1:9a:be:
         4e:88:66:4f:61:d1:b2:ef:ef:10:85:7d:74:40:6e:86:2f:c4:
         0e:3b:27:0b:0f:3f:52:0b:df:96:0d:6b:39:a1:f0:9a:99:6e:
         f9:2c:89:97:36:48:2c:55:e3:8d:d0:24:a7:98:22:5b:12:24:
         25:14:0b:bd:db:f2:f3:b0:2d:6b:86:97:df:6e:b9:6d:66:62:
         37:ef:89:81:89:e7:d5:c6:5b:13:03:7c:c9:67:80:9c:f0:3e:
         34:cf:f9:fd:95:e0:52:4b:c7:3b:4d:69:7e:c3:7e:ac:1d:20:
         b6:c7:d2:25:bb:61:37:e3:f7:58:37:1d:af:34:b9:cd:ae:36:
         8d:43:7c:86:21:11:99:4f:e3:61:3b:0b:12:cb:6a:f8:ef:9b:
         4b:52:24:eb:6f:ca:9c:cd:b3:a3:15:af:82:06:54:0a:36:61:
         71:34:72:9f:e4:c6:c7:98:bd:41:b0:87:5f:79:66:89:e0:23:
         48:ae:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:09 2026 by rpki-client