Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa
File:                     i67bohZvhtzwiFLY2AmxcyzmeBM.roa (raw, json)
Hash identifier:          nSYbppFw+A2pDL3/py7yK1dgWXA0kzPeCg9p/TuL61U=
Subject key identifier:   8B:AE:DB:A2:16:6F:86:DC:F0:88:52:D8:D8:09:B1:73:2C:E6:78:13
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       37
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa
Signing time:             Tue 31 Mar 2026 08:25:17 +0000
ROA not before:           Tue 31 Mar 2026 08:25:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        2402:c200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Mar 31 08:25:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8BAEDBA2166F86DCF08852D8D809B1732CE67813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:c4:78:58:8d:ec:94:0f:f5:de:bd:43:8d:
                    be:1f:c6:e7:5c:f2:ac:c3:89:81:91:6e:00:c1:4b:
                    41:5e:ed:56:38:9a:e8:88:2e:62:24:2f:c0:31:50:
                    75:1e:22:0b:74:ac:b0:30:18:eb:47:05:67:f8:df:
                    3b:7d:a4:6a:c8:74:df:e2:e7:4d:e2:9e:a0:75:47:
                    4a:97:15:8d:0b:be:c3:a0:f3:71:2d:fb:30:95:fa:
                    b5:c3:96:8b:51:09:8d:5d:99:ee:4e:5f:0f:d0:15:
                    86:14:67:8e:1f:6a:5b:64:8d:16:6d:12:2f:0d:1c:
                    0e:b3:9a:97:31:8a:82:c2:dc:bd:04:80:a5:9a:64:
                    eb:fe:04:6c:35:10:a7:3a:04:51:4d:f4:cb:86:6e:
                    83:98:6b:e1:d8:bb:55:18:6f:1f:12:d8:2a:56:bd:
                    67:51:7c:4b:08:88:5b:e6:bb:00:cd:e5:86:5b:65:
                    b6:71:20:89:2c:fb:af:d4:6b:b6:65:a5:1d:c3:0c:
                    26:2a:dd:ee:65:60:71:2f:de:89:92:ef:71:24:29:
                    08:22:28:7b:8c:47:d8:17:28:c2:77:cb:6e:ae:6f:
                    0c:9a:93:67:89:5b:25:bf:b1:19:2e:92:ff:4b:ad:
                    d5:81:5f:a8:02:65:95:bb:05:89:d4:ab:a0:2a:69:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:DB:A2:16:6F:86:DC:F0:88:52:D8:D8:09:B1:73:2C:E6:78:13
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:96:a3:82:26:20:10:49:82:7c:d0:38:f2:bd:8e:88:26:
         42:33:71:1d:7a:22:c6:ed:54:9e:66:01:8f:31:f3:be:35:80:
         87:97:09:14:8f:10:e5:7a:63:36:aa:cc:a4:44:c0:f1:81:1b:
         bc:a6:8c:05:e2:46:79:31:17:37:62:da:39:6f:77:f8:54:3d:
         19:bd:b4:95:53:e4:21:e5:0d:bb:13:4d:4a:b1:95:f6:19:35:
         94:c6:e4:81:25:22:3f:82:f9:98:47:1d:9b:9c:a6:df:8e:20:
         d4:23:b7:fe:50:b8:03:6f:3e:e1:6a:ce:b2:34:34:e7:2e:76:
         f7:c5:08:1a:43:84:69:ce:b2:02:16:fc:da:a4:96:6e:ea:6f:
         41:f8:a8:8d:a7:67:06:df:cd:5a:ef:d3:1f:cb:ca:cf:38:3a:
         f8:14:93:fc:da:b8:f8:f7:85:cf:43:46:67:57:b9:76:09:84:
         e1:e9:11:97:c0:0c:a7:d3:0c:07:52:2e:03:76:b8:1c:db:35:
         24:4c:fe:ee:49:49:6f:92:d6:86:b6:ae:3d:57:51:21:1c:bf:
         49:3f:73:a8:2e:bc:b3:96:38:1c:83:fd:78:c2:50:0f:9d:87:
         84:a8:29:fe:d2:3b:1c:54:52:d7:67:73:31:de:58:d8:08:f6:
         e9:7d:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client