Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/rO_73jM4JzO0qmtCbCzui48rcyU.roa
File:                     rO_73jM4JzO0qmtCbCzui48rcyU.roa (raw, json)
Hash identifier:          m+r+XumAyZSI9MWujUVx+p9FnZ0CVnYRHSBroVYdWSQ=
Subject key identifier:   AC:EF:FB:DE:33:38:27:33:B4:AA:6B:42:6C:2C:EE:8B:8F:2B:73:25
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       26
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/rO_73jM4JzO0qmtCbCzui48rcyU.roa
Signing time:             Tue 31 Mar 2026 08:45:11 +0000
ROA not before:           Tue 31 Mar 2026 08:45:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131971
IP address blocks:        2407:9900:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Mar 31 08:45:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ACEFFBDE33382733B4AA6B426C2CEE8B8F2B7325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:de:ec:30:b2:d2:c7:8e:52:b9:4e:10:cb:
                    70:20:aa:47:d2:7e:cb:01:69:c8:43:ce:a5:0a:32:
                    a7:48:04:45:98:1a:bd:c1:e8:94:ac:65:13:6b:09:
                    d2:7f:19:3d:e3:0c:99:ac:ca:7b:5c:3f:9c:f5:81:
                    0c:11:2e:b9:15:89:e5:db:1b:3d:92:ee:20:0a:66:
                    54:b5:53:35:a5:a1:8b:2c:3c:7c:21:e9:d0:bc:f9:
                    8a:d8:e6:94:aa:24:38:8d:94:a3:60:8e:4b:37:d3:
                    0e:1d:fd:bc:1d:64:e8:20:c9:9e:6a:ab:37:e1:3b:
                    38:58:a3:7c:79:cc:f3:e0:38:f2:a7:37:74:39:f1:
                    46:22:77:8a:04:d1:ef:5a:ce:65:6d:42:fe:3f:32:
                    c1:31:57:55:e4:bb:4e:79:5d:42:9a:fb:83:96:09:
                    3c:58:bb:5d:42:12:77:85:93:85:2b:c7:38:db:ee:
                    11:1e:a0:8f:e7:81:80:1c:f4:08:ba:33:f3:75:da:
                    6d:a2:08:2d:7e:ea:f3:da:0c:1a:34:f2:8b:2b:8f:
                    22:f4:db:64:d3:06:ab:04:08:77:7f:fb:a7:7b:54:
                    ec:89:66:90:a9:e8:74:4d:3a:d5:6d:48:5a:c2:56:
                    8e:67:8f:44:3d:5f:c6:c5:64:b2:77:b4:43:64:13:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:FB:DE:33:38:27:33:B4:AA:6B:42:6C:2C:EE:8B:8F:2B:73:25
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/rO_73jM4JzO0qmtCbCzui48rcyU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9900:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:e5:c1:aa:0f:6d:72:5b:65:e9:ee:98:02:66:c6:aa:18:
         5d:db:89:9c:e3:7c:7f:f8:57:ff:be:bf:81:ad:28:8f:8c:d0:
         b8:74:aa:c9:bd:fb:06:72:02:94:70:b1:16:25:da:dd:5a:14:
         5f:2d:10:58:9d:3b:49:25:54:ee:18:94:45:75:95:68:6c:53:
         59:62:02:da:d7:d9:62:26:09:2b:ef:6e:55:7a:ee:cf:65:33:
         86:56:5c:9a:81:9a:1d:5e:1c:4d:df:d3:0f:77:aa:33:01:37:
         d4:d9:dc:9e:1e:94:3a:53:48:41:0b:3f:9a:9d:e1:51:09:37:
         a7:1a:f2:06:b0:5e:d1:da:47:0f:aa:1d:32:f9:5b:d3:b8:a9:
         3e:2a:73:78:93:d1:7b:3a:10:55:8f:c8:46:59:49:d7:bd:12:
         18:1c:14:9a:91:64:85:5e:91:e4:28:44:da:6c:88:73:42:f4:
         00:1f:45:a3:22:c5:af:c4:4a:b7:56:15:5b:c9:95:6a:87:2d:
         87:a0:ef:80:32:87:99:d2:85:c8:c8:7c:92:4d:c8:76:a9:4d:
         72:48:89:80:6d:f0:ff:df:94:57:bc:bc:20:a8:45:7e:2c:e0:
         ce:c6:82:a0:8b:2b:32:de:4d:3e:6c:db:22:2f:71:30:12:b1:
         3e:21:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client