Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ri_ww_HykS1fson-wNxnBg7AksA.roa
File:                     ri_ww_HykS1fson-wNxnBg7AksA.roa (raw, json)
Hash identifier:          XY69wIxE8jQjT74aQja1mf6Xuy8WWQx/vk00oRH/6ng=
Subject key identifier:   AE:2F:F0:C3:F1:F2:91:2D:5F:B2:89:FE:C0:DC:67:06:0E:C0:92:C0
Certificate issuer:       /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial:       0A
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ri_ww_HykS1fson-wNxnBg7AksA.roa
Signing time:             Tue 31 Mar 2026 08:47:30 +0000
ROA not before:           Tue 31 Mar 2026 08:47:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7503
IP address blocks:        2402:3800:dc03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
        Validity
            Not Before: Mar 31 08:47:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AE2FF0C3F1F2912D5FB289FEC0DC67060EC092C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9b:e6:ab:1d:8d:63:a0:f0:41:c8:96:f3:d0:
                    77:2e:62:1b:ae:58:41:3a:b5:34:d1:6b:7e:34:90:
                    89:00:63:47:e5:3b:57:ae:4d:5e:ba:16:fa:d3:54:
                    91:1f:2c:d5:52:d3:4d:9f:8f:48:77:44:c1:b7:8f:
                    02:c4:81:c5:59:02:86:47:ad:b3:28:ed:36:b6:f3:
                    93:0e:57:c2:0c:80:ca:10:f7:33:fb:41:2a:13:40:
                    fe:a0:fd:84:ad:f2:e8:80:6d:66:81:32:4b:dd:3a:
                    56:83:03:20:a0:55:fa:1b:17:93:50:cf:8d:7f:74:
                    20:88:f8:4c:9c:f8:82:62:85:18:43:61:e2:a2:6d:
                    e4:c4:2f:29:13:c0:49:11:ea:0b:d9:ab:19:26:5b:
                    9e:da:3f:63:66:65:01:3c:69:ef:3c:d2:4c:b4:2e:
                    5f:bb:18:8c:65:75:3e:82:a6:00:54:01:9b:ee:9c:
                    9e:1f:8f:f1:d0:79:73:7a:43:c6:9b:9a:14:34:e2:
                    dc:6e:16:e4:9b:b8:61:e5:53:68:8c:a3:52:03:c9:
                    fe:f2:85:ef:79:86:c3:37:f6:6d:e1:4e:2c:a5:da:
                    9f:b2:09:bf:d4:85:5f:fb:f3:27:fc:3f:40:af:82:
                    93:8a:a0:67:c0:a1:9b:7a:7b:d8:f6:ca:54:38:f8:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:F0:C3:F1:F2:91:2D:5F:B2:89:FE:C0:DC:67:06:0E:C0:92:C0
            X509v3 Authority Key Identifier:
                keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ri_ww_HykS1fson-wNxnBg7AksA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3800:dc03::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:63:88:5d:9d:8d:69:0b:a4:2d:a5:c0:d6:85:f7:80:ca:
         ec:ba:5c:02:d6:99:a2:9c:f9:bb:13:11:c8:7a:05:5d:c5:82:
         60:7c:e4:49:7b:29:a2:7b:10:79:78:4b:25:3e:79:5e:61:37:
         bf:ce:fd:50:5e:5f:c1:17:4a:c6:e4:91:43:32:19:ca:87:82:
         15:64:ae:af:f9:6a:56:d4:61:26:73:03:c3:8f:44:ea:58:3f:
         e8:c0:da:fb:96:a1:73:d6:c3:cf:33:d0:ac:c9:9a:dd:e8:df:
         9c:d7:fb:8a:ec:9e:2d:a6:1f:3a:97:6b:44:35:53:8f:30:c8:
         45:9e:c4:78:7e:8e:3f:03:32:bd:ce:24:57:3b:37:be:cf:c0:
         f5:42:3b:59:52:e3:39:81:2e:38:75:89:44:3b:e5:f6:eb:4a:
         39:92:59:71:c8:ca:ff:6a:a5:19:27:bb:04:e6:0d:29:c3:7c:
         97:d4:bc:a6:53:5f:fd:25:f5:77:2c:aa:48:34:1d:ba:1c:6a:
         a3:b8:f9:6c:61:d8:03:6d:8e:83:a2:fe:f5:82:b4:dc:14:db:
         1c:51:ad:72:c4:fc:82:a8:69:3d:fd:6d:5a:7c:e2:6e:62:a3:
         2a:df:0e:62:4d:c5:11:35:a5:53:c4:8e:b7:dc:05:60:ab:b9:
         90:6d:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client