Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa
File:                     3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa (raw, json)
Hash identifier:          c9T9esH5GGIETqEBcHA+SYoCIht+d1rnGhAHa46V7Uk=
Subject key identifier:   DE:8E:22:E8:AC:FF:76:C1:9A:79:7A:E9:15:98:E4:02:07:F3:C4:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       070A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa
Signing time:             Tue 31 Mar 2026 08:27:05 +0000
ROA not before:           Tue 31 Mar 2026 08:27:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:b90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE8E22E8ACFF76C19A797AE91598E40207F3C444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:af:bb:76:56:3c:68:3d:8d:85:f2:de:90:
                    ae:ac:49:7a:5e:cb:80:5c:47:8d:bf:9f:d3:22:bc:
                    c6:bf:df:ae:06:6b:ec:b5:fc:a2:73:38:c1:8b:68:
                    17:f0:9b:76:86:94:4b:7d:9a:d9:cd:54:4a:a0:61:
                    1a:15:5d:2f:c6:0b:a3:16:b2:3c:fe:f8:64:d2:55:
                    f2:55:7d:dd:3a:4c:b5:ed:a3:85:5c:e7:47:26:e8:
                    93:e1:c6:1a:2f:6d:9b:73:d8:32:37:44:1f:3b:5d:
                    75:96:50:93:94:2f:ad:79:82:07:5f:0f:54:88:25:
                    72:c5:d6:b8:98:ee:7c:d5:8c:d5:17:5a:d1:e8:4c:
                    8b:c6:89:d6:4e:f0:9e:7d:79:2c:9b:37:9f:b8:2e:
                    50:89:b7:24:9b:ed:8a:dd:f3:0b:f1:d7:99:bd:89:
                    59:07:1f:5e:0a:90:c1:72:95:5d:91:a0:46:23:0c:
                    87:be:bf:1d:ff:20:7d:40:6a:23:eb:67:15:82:68:
                    ce:e3:c1:31:dd:c4:4f:9f:d0:be:4e:b1:0c:2b:9b:
                    57:11:0b:df:31:6b:54:62:72:75:42:0b:d4:da:a8:
                    4d:35:5c:58:33:3a:c3:1b:74:f3:4e:7e:cc:35:70:
                    d0:bc:6a:84:04:02:09:a0:2f:be:7f:0b:9c:eb:d2:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:22:E8:AC:FF:76:C1:9A:79:7A:E9:15:98:E4:02:07:F3:C4:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3o4i6Kz_dsGaeXrpFZjkAgfzxEQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:76:f5:62:de:b1:1d:58:23:57:00:36:c8:51:4f:fa:4c:
         be:7e:02:57:b0:2f:1c:2f:6a:1e:e9:e9:72:72:c3:0a:43:8f:
         b1:bd:a5:cf:21:e6:11:fe:ba:4c:59:56:12:b3:99:db:ac:a7:
         df:2c:90:ff:69:f9:c6:6b:ad:d6:bb:c8:7d:2d:f7:34:b2:69:
         6b:e4:b1:58:99:dc:af:e3:38:9e:bd:ba:55:cf:98:82:13:d9:
         fb:f1:af:a6:ad:68:d9:f4:de:f8:c6:26:42:7b:7a:20:47:8f:
         79:e7:02:fd:6a:c0:24:13:f2:6a:d7:7e:d7:ae:5f:43:a6:c0:
         93:7e:63:e5:67:97:51:d5:d9:b3:0e:b7:3f:14:88:42:39:e6:
         fa:49:74:24:5b:2f:f7:da:d2:ad:a8:c7:36:79:49:ae:a4:f4:
         4d:3a:ef:0a:37:e8:e8:4e:03:30:c5:a7:95:66:4f:57:fa:60:
         e4:df:cc:3b:e5:54:b2:df:ac:e5:78:1a:ad:4c:ff:5e:5e:c6:
         01:cb:23:60:7c:d5:51:c4:b3:53:e0:dd:8c:e7:eb:da:1e:7a:
         64:a9:ec:97:56:3d:2b:0d:4c:d6:a6:74:77:4c:00:e8:de:18:
         52:b6:29:47:f3:d2:46:06:6d:91:69:2a:4d:28:f7:0e:40:1e:
         cd:6a:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client