Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/lKFnuHw1nis7qcjeNjFeOFss30Q.roa
File:                     lKFnuHw1nis7qcjeNjFeOFss30Q.roa (raw, json)
Hash identifier:          rtz4Wl62XuoGei2UY3Rt4pg7hFgtcMQiUpAUAkrOrwc=
Subject key identifier:   94:A1:67:B8:7C:35:9E:2B:3B:A9:C8:DE:36:31:5E:38:5B:2C:DF:44
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       24
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/lKFnuHw1nis7qcjeNjFeOFss30Q.roa
Signing time:             Tue 31 Mar 2026 08:45:08 +0000
ROA not before:           Tue 31 Mar 2026 08:45:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131971
IP address blocks:        2407:9900::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Mar 31 08:45:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=94A167B87C359E2B3BA9C8DE36315E385B2CDF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:c7:3f:07:29:a3:f5:2d:e8:17:93:b7:c3:
                    2b:fc:4e:df:54:04:e2:4b:ad:21:c0:6b:a5:24:e8:
                    7d:17:9f:bf:8c:2c:51:cd:77:43:0e:37:fd:fd:6c:
                    3a:b2:2d:8c:77:11:3a:bd:1f:9d:3f:41:fe:47:08:
                    d0:bd:49:dc:c0:a2:63:d1:e2:00:23:3c:35:7d:b3:
                    67:4f:c1:a8:00:22:60:27:b8:e6:77:3a:11:1f:8d:
                    0e:9f:c9:9d:eb:3e:bf:9d:63:4c:dd:22:69:79:bc:
                    13:b9:fe:13:28:20:32:96:16:2f:45:5a:93:c6:db:
                    8b:75:82:9c:0d:90:fd:3b:13:ca:8c:14:90:4e:e5:
                    f3:5b:24:98:a0:db:2e:c0:38:31:93:5c:ba:ee:8c:
                    05:05:ff:51:1a:d3:e5:39:07:03:71:0a:15:e1:25:
                    fc:d3:da:35:3a:92:03:ab:63:b1:e6:8f:03:ec:cf:
                    d3:50:6f:1f:b9:37:72:b0:83:e4:1e:32:9a:a4:ca:
                    75:2f:33:67:81:33:c6:cc:0c:21:6c:52:92:67:9f:
                    5c:37:06:a5:65:0e:d4:f3:2d:7e:d9:9b:e7:79:6e:
                    4b:cd:35:09:4d:75:53:3c:89:97:0b:c1:ee:e3:7a:
                    f2:4c:9b:c6:96:c1:39:d5:98:d0:a9:e1:6c:dc:97:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A1:67:B8:7C:35:9E:2B:3B:A9:C8:DE:36:31:5E:38:5B:2C:DF:44
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/lKFnuHw1nis7qcjeNjFeOFss30Q.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9900::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:75:2b:98:66:58:da:64:c5:3d:64:30:93:9b:c9:0e:19:
         df:cd:41:4c:40:fd:8b:2b:00:8c:7d:d6:ff:db:39:2a:36:20:
         90:cb:28:21:43:ea:ef:da:4b:af:19:ad:24:dc:2b:64:d8:cf:
         ce:b2:16:d7:9e:46:ea:8d:91:3b:f4:93:2f:fd:c2:51:72:f0:
         b5:ba:a7:78:58:2e:c7:a5:d3:d6:f5:91:56:d9:60:5a:37:5f:
         de:db:63:7b:04:66:5d:3f:d5:88:ff:e8:90:38:e1:06:75:c1:
         52:a9:6a:f7:3f:4b:72:44:50:b3:71:92:95:0c:81:3d:7c:c8:
         6a:d3:b6:9c:d5:01:aa:3d:df:26:86:58:ee:62:e8:11:53:c9:
         f9:72:f2:a0:53:ef:ad:88:62:b3:34:42:68:06:7f:30:08:7d:
         03:2d:45:99:20:7e:75:3d:4c:05:1f:b8:25:c3:49:6f:70:67:
         a8:6e:39:c2:11:be:de:42:82:54:df:45:cc:ad:7a:94:d3:eb:
         f1:78:f5:e0:19:2c:72:eb:68:df:da:a5:3c:4d:22:8c:56:32:
         25:5b:2a:2c:88:5b:fb:19:2d:72:08:e5:39:9c:7c:09:c3:d6:
         e2:91:71:18:4d:8a:ab:28:4f:8c:83:37:53:08:ef:34:7a:21:
         8e:36:c5:b3
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjI5
OTQ4NzlDMjU4MTIzRkZBMDk3RTg0RTA1Mzc1RjYwQTU5MUE1MB4XDTI2MDMzMTA4
NDUwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTRBMTY3Qjg3QzM1OUUy
QjNCQTlDOERFMzYzMTVFMzg1QjJDREY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMI/xz8HKaP1LegXk7fDK/xO31QE4kutIcBrpSTofRefv4wsUc13
Qw43/f1sOrItjHcROr0fnT9B/kcI0L1J3MCiY9HiACM8NX2zZ0/BqAAiYCe45nc6
ER+NDp/Jnes+v51jTN0iaXm8E7n+EyggMpYWL0Vak8bbi3WCnA2Q/TsTyowUkE7l
81skmKDbLsA4MZNcuu6MBQX/URrT5TkHA3EKFeEl/NPaNTqSA6tjseaPA+zP01Bv
H7k3crCD5B4ymqTKdS8zZ4EzxswMIWxSkmefXDcGpWUO1PMtftmb53luS801CU11
UzyJlwvB7uN68kybxpbBOdWY0KnhbNyX1HkCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBSUoWe4fDWeKzupyN42MV44WyzfRDAfBgNVHSMEGDAWgBTSKZSHnCWBI/+gl+hO
BTdfYKWRpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMTMvMGltVWg1d2xnU1Bfb0pmb1RnVTNYMkNsa2FVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMGltVWg1d2xnU1Bfb0pmb1RnVTNY
MkNsa2FVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTEzL2xLRm51SHcxbmlzN3FjamVOakZlT0ZzczMwUS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkB5kAADANBgkqhkiG9w0BAQsF
AAOCAQEADa91K5hmWNpkxT1kMJObyQ4Z381BTED9iysAjH3W/9s5KjYgkMsoIUPq
79pLrxmtJNwrZNjPzrIW155G6o2RO/STL/3CUXLwtbqneFgux6XT1vWRVtlgWjdf
3ttjewRmXT/ViP/okDjhBnXBUqlq9z9LckRQs3GSlQyBPXzIatO2nNUBqj3fJoZY
7mLoEVPJ+XLyoFPvrYhiszRCaAZ/MAh9Ay1FmSB+dT1MBR+4JcNJb3BnqG45whG+
3kKCVN9FzK16lNPr8Xj14Bkscuto39qlPE0ijFYyJVsqLIhb+xktcgjlOZx8CcPW
4pFxGE2KqyhPjIM3UwjvNHohjjbFsw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:11 2026 by rpki-client