Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30125/bj3jz1J_I0e6X4dc-7KIHF9Z8aw.roa
File:                     bj3jz1J_I0e6X4dc-7KIHF9Z8aw.roa (raw, json)
Hash identifier:          SKojEVe/PV6Xeh287auWXnQm7cujpikQbTRrc65QkGk=
Subject key identifier:   6E:3D:E3:CF:52:7F:23:47:BA:5F:87:5C:FB:B2:88:1C:5F:59:F1:AC
Certificate issuer:       /CN=0B2D0A15DBB326F93C6EAF1ECC457B21AD229CC0
Certificate serial:       03
Authority key identifier: 0B:2D:0A:15:DB:B3:26:F9:3C:6E:AF:1E:CC:45:7B:21:AD:22:9C:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Cy0KFduzJvk8bq8ezEV7Ia0inMA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30125/bj3jz1J_I0e6X4dc-7KIHF9Z8aw.roa
Signing time:             Tue 07 Apr 2026 00:11:09 +0000
ROA not before:           Tue 07 Apr 2026 00:11:09 +0000
ROA not after:            Tue 16 Mar 2027 03:50:46 +0000
asID:                     10001
IP address blocks:        2403:7c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30125/Cy0KFduzJvk8bq8ezEV7Ia0inMA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30125/Cy0KFduzJvk8bq8ezEV7Ia0inMA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Cy0KFduzJvk8bq8ezEV7Ia0inMA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B2D0A15DBB326F93C6EAF1ECC457B21AD229CC0
        Validity
            Not Before: Apr  7 00:11:09 2026 GMT
            Not After : Mar 16 03:50:46 2027 GMT
        Subject: CN=6E3DE3CF527F2347BA5F875CFBB2881C5F59F1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:df:5a:24:75:51:a6:22:7c:e2:25:28:36:
                    a5:b4:de:2b:46:37:ec:1a:db:e5:d4:74:e7:91:dd:
                    d5:9a:e6:f6:4c:29:cb:fb:c8:f1:28:a6:e3:29:35:
                    12:56:63:e6:94:62:5c:41:b9:a6:5b:88:22:70:7d:
                    98:65:0a:92:45:24:7c:c0:5a:67:e5:34:01:ce:76:
                    db:ba:b1:3f:7e:76:6a:c2:79:b2:ba:f3:d6:97:2d:
                    4a:5d:ba:30:f6:87:ba:f6:8c:07:d2:f4:37:60:11:
                    81:65:50:27:5c:f0:f9:7b:86:a5:1d:ce:24:4f:16:
                    ee:d6:b4:9f:aa:0d:25:4b:72:95:d5:88:83:35:d5:
                    b9:2c:a0:a3:32:6c:d3:16:67:d4:c9:45:3c:94:d4:
                    08:25:70:04:38:98:65:e8:21:0e:92:f1:c8:e4:86:
                    91:f8:95:b8:b9:8a:90:c5:9f:e7:84:f2:3c:d7:fc:
                    c4:96:d8:12:74:ad:13:a2:4b:98:f9:c8:4a:d1:23:
                    9f:8e:eb:15:63:62:33:a3:0b:93:2b:f2:2c:b0:26:
                    ce:c9:9d:b6:51:43:c7:9e:3b:57:20:ea:82:b8:f0:
                    24:d5:ed:4a:c2:ee:ca:a7:fa:b4:7c:a0:05:a2:bf:
                    37:8c:40:21:37:e9:9e:7d:a8:7c:13:6b:a7:bf:8e:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3D:E3:CF:52:7F:23:47:BA:5F:87:5C:FB:B2:88:1C:5F:59:F1:AC
            X509v3 Authority Key Identifier:
                keyid:0B:2D:0A:15:DB:B3:26:F9:3C:6E:AF:1E:CC:45:7B:21:AD:22:9C:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30125/Cy0KFduzJvk8bq8ezEV7Ia0inMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Cy0KFduzJvk8bq8ezEV7Ia0inMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30125/bj3jz1J_I0e6X4dc-7KIHF9Z8aw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:49:e3:0e:c9:e0:07:c7:91:d4:76:25:4d:38:03:7d:f1:fe:
         a2:36:80:66:cf:a3:b2:cc:14:68:ce:3f:f9:42:2c:40:d9:65:
         8a:7b:a4:97:2e:0b:6b:f1:3c:a2:e9:53:8f:bc:d2:8a:e4:60:
         63:be:ed:09:be:fc:c4:8d:c3:13:a0:fb:66:19:f7:f7:4a:b4:
         ee:23:4f:b3:18:72:f9:82:93:6f:00:8b:39:69:bc:b4:73:98:
         2d:93:c7:61:b3:5d:d2:fd:a2:82:ba:37:b7:e7:13:f3:af:90:
         b9:1c:b5:5a:69:60:69:18:b7:32:a5:15:7d:53:62:33:8f:f7:
         df:43:df:c5:02:d5:cd:dc:63:a2:ff:0f:d2:f1:7b:c1:c2:68:
         b8:1d:3a:d1:52:bc:52:93:ed:8d:47:39:b9:d6:58:62:87:26:
         65:a6:ac:71:aa:da:6b:2c:58:e4:7b:d7:48:d1:de:28:d6:d7:
         07:00:b1:99:65:e9:f0:33:94:5c:89:9b:75:4a:ad:e1:74:84:
         d3:0e:4e:00:6d:d2:c4:44:ff:a6:7d:21:7c:53:c6:6e:55:16:
         c0:81:87:44:ee:03:07:a7:28:d3:85:bd:e3:8a:33:06:62:cd:
         93:c1:e9:62:65:36:d6:9b:6e:ef:2e:57:5f:fd:e6:14:ec:e9:
         ee:67:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:03 2026 by rpki-client