Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30088/SAQyKu6j6_f-6U4a4tF57EO3nWo.roa
File:                     SAQyKu6j6_f-6U4a4tF57EO3nWo.roa (raw, json)
Hash identifier:          dUbNvp6/HcJsyM6wprr1o3Tf4Km1zqdZ/ETwtTbvj34=
Subject key identifier:   48:04:32:2A:EE:A3:EB:F7:FE:E9:4E:1A:E2:D1:79:EC:43:B7:9D:6A
Certificate issuer:       /CN=B2DC49A72F50455C57B65A31FB977695341668C3
Certificate serial:       05
Authority key identifier: B2:DC:49:A7:2F:50:45:5C:57:B6:5A:31:FB:97:76:95:34:16:68:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/stxJpy9QRVxXtlox-5d2lTQWaMM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30088/SAQyKu6j6_f-6U4a4tF57EO3nWo.roa
Signing time:             Tue 31 Mar 2026 08:48:30 +0000
ROA not before:           Tue 31 Mar 2026 08:48:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        2401:f800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30088/stxJpy9QRVxXtlox-5d2lTQWaMM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30088/stxJpy9QRVxXtlox-5d2lTQWaMM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/stxJpy9QRVxXtlox-5d2lTQWaMM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2DC49A72F50455C57B65A31FB977695341668C3
        Validity
            Not Before: Mar 31 08:48:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4804322AEEA3EBF7FEE94E1AE2D179EC43B79D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:f6:bc:07:f7:7e:2c:0a:b2:b4:86:0d:87:
                    e8:1b:01:b3:2d:87:39:d3:fa:04:01:2b:ba:fe:45:
                    b9:48:96:cc:ec:13:4c:2e:3d:ae:c3:be:28:84:65:
                    0f:b1:41:16:83:61:c0:03:e1:c5:6c:03:7e:bf:74:
                    48:78:87:ad:f9:65:2b:4b:31:df:1a:dc:65:69:94:
                    f1:08:af:14:2c:f4:65:95:a5:6c:4e:e2:79:38:e9:
                    aa:a4:1d:35:b3:e6:5e:d8:c4:79:27:a7:70:a1:14:
                    d5:5b:cd:0b:0c:e0:6e:97:74:b9:e3:63:82:66:ef:
                    bc:c0:2a:0d:2b:23:21:fc:66:9d:ed:1c:82:03:52:
                    46:05:e5:82:a1:1f:ba:8f:0f:b5:bd:78:9f:cb:6e:
                    87:b9:bc:81:e0:95:7b:f5:50:a0:61:08:47:ca:bb:
                    09:f4:ff:a6:9a:85:e3:6f:ef:f0:70:ce:f2:8a:a2:
                    a3:87:f9:3e:8d:c3:2b:f6:ce:1b:ac:4f:69:34:c3:
                    17:93:7c:1c:f8:a8:ce:a0:36:27:0c:38:b9:d7:23:
                    78:d2:fd:12:c1:ff:c5:c2:74:a4:6c:9e:be:91:57:
                    0a:67:4b:fb:b3:c3:62:90:8d:5f:b7:a4:2e:9f:39:
                    14:b5:3b:29:99:04:68:cd:34:b8:04:eb:01:42:ea:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:32:2A:EE:A3:EB:F7:FE:E9:4E:1A:E2:D1:79:EC:43:B7:9D:6A
            X509v3 Authority Key Identifier:
                keyid:B2:DC:49:A7:2F:50:45:5C:57:B6:5A:31:FB:97:76:95:34:16:68:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30088/stxJpy9QRVxXtlox-5d2lTQWaMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/stxJpy9QRVxXtlox-5d2lTQWaMM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30088/SAQyKu6j6_f-6U4a4tF57EO3nWo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f800::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:60:4a:f3:0c:54:14:5b:49:e0:30:9a:86:da:23:2d:e9:00:
         7b:27:73:cc:6a:d7:ed:91:a0:a7:14:77:89:c8:38:21:ba:e4:
         89:66:a1:cf:d4:53:33:fe:ed:b8:83:0a:f0:37:1e:f3:3b:bd:
         af:93:36:fc:cd:70:01:12:cc:10:38:5c:dc:cb:52:c6:22:e1:
         85:44:66:04:ce:55:5a:05:63:6b:91:47:3c:c4:ba:9f:fd:81:
         2d:25:bd:a5:42:14:a9:47:69:90:23:25:97:44:21:24:bc:a3:
         83:1e:97:1d:82:90:61:bf:af:51:83:a5:60:76:15:be:36:b4:
         0d:7a:ac:1c:cb:69:eb:0a:4e:c4:38:6d:fc:ac:12:db:bd:7d:
         7b:fc:b5:34:00:c6:bf:f1:8b:aa:ae:6d:10:08:b1:17:ba:80:
         c6:13:bb:a9:e6:88:20:1a:de:77:a6:d2:71:63:da:98:f7:82:
         6d:9e:3f:87:3e:a8:3b:27:8f:76:03:3d:c5:26:c0:08:65:01:
         25:92:fe:f1:09:75:35:bc:1b:bc:7f:69:0d:cc:74:b3:ce:b0:
         4f:97:68:fa:3c:0f:db:a3:6d:af:9a:e0:51:a6:3e:77:ba:7c:
         69:c2:dd:42:58:71:ba:24:31:c4:45:82:30:3f:44:91:4b:f0:
         d5:18:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:04 2026 by rpki-client