Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/sgBUlrje9N4gFtXPOInouobRKeA.roa
File:                     sgBUlrje9N4gFtXPOInouobRKeA.roa (raw, json)
Hash identifier:          bnoT7JoZrAw03Lid37ul54vOINqZYKRInjThquYb7+Q=
Subject key identifier:   B2:00:54:96:B8:DE:F4:DE:20:16:D5:CF:38:89:E8:BA:86:D1:29:E0
Certificate issuer:       /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial:       14
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/sgBUlrje9N4gFtXPOInouobRKeA.roa
Signing time:             Tue 31 Mar 2026 08:45:58 +0000
ROA not before:           Tue 31 Mar 2026 08:45:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55895
IP address blocks:        2400:e000:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
        Validity
            Not Before: Mar 31 08:45:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B2005496B8DEF4DE2016D5CF3889E8BA86D129E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:c4:37:9a:77:f8:9a:0e:c6:47:72:0a:d7:
                    8a:37:c9:22:b2:bb:14:0b:1b:27:63:19:22:c0:f3:
                    bb:9e:00:b7:31:95:0c:dd:dc:24:e4:44:14:7b:96:
                    7f:48:12:15:ca:24:60:ef:c5:60:5b:17:df:7a:0f:
                    0f:c2:72:b1:ce:34:f2:ab:f8:57:ba:e3:d5:bf:9e:
                    a4:a6:77:df:2f:e1:50:eb:fb:dd:18:2a:68:5d:cc:
                    db:2b:a3:ad:97:55:4b:55:4a:88:70:27:d8:3c:f4:
                    41:ee:1f:69:06:ec:f5:2b:a3:8b:73:b0:d6:c6:ca:
                    71:9c:41:87:74:6f:c9:b1:4b:db:ac:2c:30:6c:be:
                    1b:f8:5f:80:29:d9:e5:a5:52:ee:54:f7:12:7f:33:
                    36:9a:16:64:14:0d:6d:20:77:3c:19:4a:34:8a:bd:
                    0f:43:12:31:89:60:73:ae:3b:7f:91:4a:10:14:d3:
                    ca:ce:f1:0d:9f:87:37:cd:60:58:d1:f8:7b:ea:7c:
                    ac:45:b7:c5:f3:57:6b:a9:3c:be:f7:e1:18:8a:ad:
                    58:72:fe:52:c0:b2:01:b4:2b:32:9e:84:d5:79:5e:
                    5c:a6:2c:18:4b:85:24:bc:a8:b3:fc:e2:b0:92:8a:
                    47:8e:34:d8:f2:bb:8f:cc:68:cf:d9:1e:49:db:e0:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:00:54:96:B8:DE:F4:DE:20:16:D5:CF:38:89:E8:BA:86:D1:29:E0
            X509v3 Authority Key Identifier:
                keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/sgBUlrje9N4gFtXPOInouobRKeA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e000:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:7c:ed:e8:f4:f8:c5:e1:e2:97:67:d4:15:df:0a:36:11:
         ba:1a:64:97:cf:3b:fe:cd:2d:87:ae:ec:0d:4b:a9:be:8f:0f:
         46:cf:68:5a:ee:09:e6:52:92:45:01:42:5d:91:b0:65:b7:4a:
         88:42:e7:62:b7:43:8c:bc:47:f1:1a:c0:dd:21:a3:ac:6a:1a:
         73:53:20:af:0f:4a:6e:a7:6b:da:3d:d3:ee:94:1a:8f:35:18:
         d2:1e:1e:17:f6:b4:92:6f:44:fe:1f:2d:c7:6b:95:ee:e2:fc:
         aa:df:c6:64:72:3e:b6:da:55:44:68:6a:67:ab:48:a7:53:76:
         d6:95:45:c5:0f:ec:ac:df:b7:e1:26:93:1c:7f:ae:9c:fc:73:
         7f:67:47:f5:89:84:8c:76:96:b7:6d:01:04:ef:a6:b4:b5:08:
         9b:28:28:7b:d3:f8:24:14:79:47:a3:54:89:fe:a9:ff:06:0c:
         9d:b7:ca:79:ba:19:af:10:f8:4c:a9:bb:63:53:e4:e0:c8:82:
         79:7f:35:80:5a:7f:64:03:29:ea:a3:73:0d:f3:0a:15:67:4c:
         4b:e0:7b:5c:57:d5:bd:3a:09:e6:3a:26:bc:c2:8b:be:01:6f:
         26:7b:93:e9:35:f2:94:a7:26:f1:3f:f0:49:88:02:e8:9e:52:
         0b:3f:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:06 2026 by rpki-client