Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30099/tvBwF9WGE0FaFM6Xotxpb6dg2cs.roa
File:                     tvBwF9WGE0FaFM6Xotxpb6dg2cs.roa (raw, json)
Hash identifier:          wHkCDsrkuiKWW7TatuWPfC6vB7CXEEGzG8Vqtb5pDyI=
Subject key identifier:   B6:F0:70:17:D5:86:13:41:5A:14:CE:97:A2:DC:69:6F:A7:60:D9:CB
Certificate issuer:       /CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
Certificate serial:       5D
Authority key identifier: D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/tvBwF9WGE0FaFM6Xotxpb6dg2cs.roa
Signing time:             Tue 31 Mar 2026 07:38:38 +0000
ROA not before:           Tue 31 Mar 2026 07:38:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        2400:1000::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Apr 2026 07:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
        Validity
            Not Before: Mar 31 07:38:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6F07017D58613415A14CE97A2DC696FA760D9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:da:e9:74:ed:62:9b:5d:5d:eb:73:7b:3e:
                    0d:65:2f:61:d3:74:8e:c9:ee:6f:9d:c0:c5:24:90:
                    fa:1c:cb:5b:db:91:61:c2:93:2e:10:dc:81:c8:ba:
                    f6:c2:62:b8:62:84:c6:3a:f2:ac:ff:6b:d1:3f:6c:
                    cb:39:39:70:cc:e7:9d:9d:fb:32:a1:65:8a:c7:13:
                    bd:87:47:95:d9:ec:a0:8c:47:5d:13:ee:9d:a6:d0:
                    47:e9:2e:07:4e:18:9c:a0:43:49:70:59:f0:0c:5c:
                    0d:f1:1a:35:e7:23:c0:b2:4a:15:2f:0d:55:12:bd:
                    6b:c0:58:ac:69:d2:25:4a:6c:a3:66:e9:aa:c6:5d:
                    ca:94:64:17:86:77:a6:a5:75:95:e2:07:be:13:f5:
                    c5:9d:72:64:9f:34:3b:73:d8:88:e4:51:5c:16:5c:
                    f9:22:25:ad:4b:ec:01:12:3a:b6:39:88:d5:ca:58:
                    07:ad:92:c3:6a:97:74:ee:35:b2:88:75:8c:74:14:
                    17:6d:9a:2c:d4:a5:16:bc:6f:3c:31:8f:a1:0e:d9:
                    26:6e:69:98:48:c3:19:f5:a1:53:f5:a9:5a:ba:78:
                    27:9a:cb:6a:31:e7:61:6a:66:06:cd:60:a9:2a:ae:
                    e7:5c:3a:32:16:bb:68:fd:25:16:8f:d4:33:8e:aa:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:70:17:D5:86:13:41:5A:14:CE:97:A2:DC:69:6F:A7:60:D9:CB
            X509v3 Authority Key Identifier:
                keyid:D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/tvBwF9WGE0FaFM6Xotxpb6dg2cs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:f8:40:49:09:b6:c4:e2:00:e1:71:0d:ad:03:30:5a:47:2e:
         29:b6:da:ea:74:46:37:d6:c5:b8:fe:48:a9:72:80:59:aa:a1:
         dd:52:80:c1:8d:11:e9:0a:db:c4:83:1a:6e:39:3e:88:f3:00:
         cd:7d:da:ec:63:92:ec:b7:65:7c:07:19:bd:c5:d1:82:ca:46:
         42:2d:94:6d:1d:13:9e:77:8b:f0:bd:4c:96:17:f2:2b:a9:8a:
         95:0d:a7:c5:89:e9:22:a9:ef:4c:95:c2:8a:a2:8a:96:8b:32:
         eb:55:a6:8e:48:77:13:20:e3:cc:ac:2d:2d:15:c0:24:4e:f9:
         b9:8a:38:0c:c1:9b:f2:72:b7:4d:db:b6:42:02:f2:35:88:fc:
         74:18:b6:89:6b:2f:33:dc:a5:23:31:95:9f:f5:c6:c4:99:11:
         66:32:ac:ff:37:ae:17:5d:a6:61:75:55:a6:fe:3b:b2:fd:ba:
         4b:6f:9b:e7:52:1c:a1:ad:f7:0f:05:d4:51:23:06:a2:df:7e:
         d1:17:6e:60:a0:7a:c4:72:78:73:35:b6:b6:29:ec:40:69:88:
         1f:f5:f8:1d:f5:34:9f:66:ca:59:5b:8a:0a:0f:76:a8:bf:fb:
         84:57:70:d9:f2:83:19:66:fc:f4:2d:79:c1:2b:a5:ee:fa:8d:
         64:6f:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:56:36 2026 by rpki-client