Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/mPyd-BKvCKEzonmg7GB1BPLsMl8.roa
File:                     mPyd-BKvCKEzonmg7GB1BPLsMl8.roa (raw, json)
Hash identifier:          z7bjLYUTfBJYDXpCq+qqVwRKGrnVohpkyKUmqAvacPI=
Subject key identifier:   98:FC:9D:F8:12:AF:08:A1:33:A2:79:A0:EC:60:75:04:F2:EC:32:5F
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       28
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/mPyd-BKvCKEzonmg7GB1BPLsMl8.roa
Signing time:             Tue 31 Mar 2026 08:45:13 +0000
ROA not before:           Tue 31 Mar 2026 08:45:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131971
IP address blocks:        2407:9900:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Mar 31 08:45:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98FC9DF812AF08A133A279A0EC607504F2EC325F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:ae:cc:20:67:aa:d3:25:24:58:bb:72:4f:
                    a0:80:4c:80:8a:c6:7d:bc:e0:80:34:52:a8:11:db:
                    37:11:f8:2f:6c:e5:76:a3:ac:ab:b0:e5:c8:f1:6c:
                    bc:a6:b8:5a:61:e5:2b:b5:9f:0e:59:e0:5a:ed:94:
                    eb:38:fa:93:7c:af:6e:db:18:c6:25:0f:ad:d6:85:
                    b9:c8:30:c8:19:b9:72:72:ae:63:9f:db:1b:f1:f6:
                    db:3b:d4:75:37:b4:91:44:17:d2:c1:09:2f:b2:4b:
                    1d:54:db:67:09:28:98:42:64:e8:ff:bb:22:85:92:
                    fc:b3:58:a5:84:bd:7c:16:fb:b1:7e:96:2a:fc:5a:
                    ac:79:55:4a:fb:96:d6:fc:16:e0:71:e8:84:d7:54:
                    ef:32:c8:ff:4c:47:f7:6f:a9:b4:65:a6:ec:f4:84:
                    76:a9:b1:bb:a3:80:df:ab:b6:7f:86:f3:88:30:b9:
                    b6:a1:0e:c1:1a:cf:36:0d:8c:d5:db:3e:7f:83:c4:
                    6c:3e:ec:62:19:b1:5c:3a:c4:75:27:f8:f2:17:35:
                    9a:74:f1:66:1c:3e:d3:fd:10:bf:44:82:22:07:0d:
                    bf:a5:37:16:6b:4f:b6:dd:97:78:6b:1c:16:a1:e4:
                    b1:ff:94:9f:d8:81:a7:1a:c6:a3:e8:f5:97:0c:01:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FC:9D:F8:12:AF:08:A1:33:A2:79:A0:EC:60:75:04:F2:EC:32:5F
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/mPyd-BKvCKEzonmg7GB1BPLsMl8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9900:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:30:4b:48:9d:68:9b:83:db:a5:c7:72:3b:e3:ff:2a:9e:89:
         fc:0a:fe:84:2c:66:22:88:35:d2:9b:6d:05:bb:b6:37:3b:a0:
         c2:89:f1:7b:1a:91:76:6f:23:3a:a4:54:f6:14:0f:4d:18:57:
         75:03:85:ab:a1:bf:95:fd:b3:7b:c3:44:a7:34:a7:04:36:15:
         c7:5e:eb:27:b4:99:8c:a8:a0:80:06:93:03:3f:58:79:95:bb:
         7a:7a:5a:69:61:e3:3b:a2:1b:33:e8:49:d0:4c:a9:b1:d8:90:
         39:09:0e:2e:4e:32:b2:24:1c:ff:90:b2:7a:60:42:dd:af:86:
         09:83:54:15:7e:a2:30:af:17:6d:eb:4e:e4:9b:2d:7c:fb:5c:
         f5:5e:0a:ae:d1:f0:e1:9f:9b:8b:73:19:c7:4e:6b:d3:aa:12:
         0f:45:b0:2a:64:fe:00:55:97:bf:4f:01:bb:c7:2c:19:41:ff:
         67:53:84:d8:62:33:40:84:39:dc:cf:30:06:f5:93:db:53:74:
         98:74:00:7d:5c:79:4e:2c:0e:4a:c2:e6:81:8e:3a:00:fd:ff:
         ff:27:d2:a7:d3:b6:05:7d:e1:69:6a:df:40:c1:db:5a:a9:4b:
         59:b2:87:16:6f:4e:94:5e:b6:42:10:97:47:4f:d2:03:ba:b3:
         fe:4b:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:59 2026 by rpki-client