Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30146/xinCTs5RSccPwEOJUkJB_9PB8vA.roa
File:                     xinCTs5RSccPwEOJUkJB_9PB8vA.roa (raw, json)
Hash identifier:          toWkL3+hfXCVEViG/CbWjEmUIYwsBsBq1p+I++kdEbw=
Subject key identifier:   C6:29:C2:4E:CE:51:49:C7:0F:C0:43:89:52:42:41:FF:D3:C1:F2:F0
Certificate issuer:       /CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
Certificate serial:       04
Authority key identifier: C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/xinCTs5RSccPwEOJUkJB_9PB8vA.roa
Signing time:             Tue 31 Mar 2026 08:48:47 +0000
ROA not before:           Tue 31 Mar 2026 08:48:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38633
IP address blocks:        2403:8e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
        Validity
            Not Before: Mar 31 08:48:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C629C24ECE5149C70FC04389524241FFD3C1F2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:a4:fd:0e:a3:47:ef:5b:70:61:e9:40:02:
                    49:8f:60:b4:93:54:19:e4:3a:18:8d:7e:6b:06:dd:
                    c1:cd:78:3a:20:77:48:8d:13:04:3c:85:c4:df:43:
                    f6:1a:4d:4b:11:99:09:e0:6e:c5:9f:cc:5b:15:6a:
                    15:af:9c:40:77:65:75:16:52:21:83:ec:65:e2:2b:
                    bc:86:5a:35:ac:f9:fb:22:45:e1:a9:aa:30:4b:f2:
                    d9:05:a6:79:f5:69:11:e3:35:6c:f1:35:de:c2:4f:
                    b8:55:ed:de:19:78:b1:af:8d:46:78:b7:03:48:f2:
                    26:da:b8:80:24:37:45:ba:27:bd:ad:ab:c1:5e:25:
                    5b:41:3a:28:ab:91:33:b1:09:49:c2:67:2e:67:fc:
                    38:1d:5f:b3:23:9e:5d:ff:c7:b1:2e:33:61:f9:9c:
                    59:e3:0b:0b:b4:14:76:8e:5b:97:e5:5c:c4:69:be:
                    aa:fd:8a:4e:f5:86:06:ff:dc:29:65:4d:25:f6:aa:
                    0a:35:e7:6c:00:34:42:3a:1c:ae:4e:65:98:6b:0b:
                    a1:2c:98:2e:41:17:30:24:7a:8c:ac:17:16:fd:81:
                    74:c0:ff:f5:7e:7c:35:08:1f:b3:f6:c8:14:13:fb:
                    52:a3:23:7f:74:57:8b:08:38:b4:62:c8:c5:2d:7d:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:C2:4E:CE:51:49:C7:0F:C0:43:89:52:42:41:FF:D3:C1:F2:F0
            X509v3 Authority Key Identifier:
                keyid:C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/xinCTs5RSccPwEOJUkJB_9PB8vA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:98:b9:66:24:50:32:6d:dc:ac:aa:2e:d6:14:0b:0e:bf:dd:
         64:e7:18:b9:d0:be:19:4a:ea:e6:ed:85:c4:a8:a0:b0:03:b6:
         38:fc:d0:7d:84:cd:e3:8a:84:f6:3e:23:d8:77:ea:38:fb:f3:
         4c:94:73:ee:36:ca:e6:f5:eb:de:de:bf:2b:8e:d8:4c:63:dc:
         39:08:bb:e4:76:14:a1:12:79:57:f4:4c:59:02:75:4b:2d:74:
         0c:16:4b:c7:c9:00:24:a0:1c:c4:6a:49:b7:7a:ed:a8:23:46:
         5e:d5:e6:f2:f7:4a:ba:07:f0:dd:22:93:59:59:be:b1:4e:62:
         a6:94:51:7d:3d:03:2b:ed:68:11:c0:1d:ea:26:75:17:2d:3f:
         77:95:86:de:cd:f6:8c:c4:bb:23:00:41:86:4d:0d:0d:29:da:
         a4:8e:6e:61:71:8b:0c:81:db:72:03:8a:27:88:90:f6:09:a3:
         85:ef:f2:9f:3c:11:ec:09:39:b2:55:c8:3e:95:3c:b7:f8:8c:
         42:ff:45:24:c4:2b:21:c0:c0:f7:da:40:17:36:70:9b:9e:d2:
         b6:5d:90:e8:48:c9:d4:e4:2a:5a:a6:35:30:f8:08:dd:c9:8d:
         cc:54:01:db:ee:09:c6:8e:1d:0c:87:7b:d6:20:c0:74:2b:61:
         32:b3:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:46 2026 by rpki-client