Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa
File:                     Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa (raw, json)
Hash identifier:          WWhYTBG+JgG4QKy7eHNQ86TvGtAcy+nkvOkMwaIUoyU=
Subject key identifier:   1B:0D:56:E9:06:96:00:EB:09:4B:28:CA:F0:D7:77:E8:37:16:4B:22
Certificate issuer:       /CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
Certificate serial:       25
Authority key identifier: 9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa
Signing time:             Tue 31 Mar 2026 08:38:39 +0000
ROA not before:           Tue 31 Mar 2026 08:38:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23629
IP address blocks:        2406:d200::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
        Validity
            Not Before: Mar 31 08:38:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B0D56E9069600EB094B28CAF0D777E837164B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:79:61:cd:38:c3:16:1a:57:77:79:3f:70:
                    ec:56:53:0e:aa:5d:b0:cc:6c:e0:5b:b7:24:98:c7:
                    1e:d7:da:d4:90:43:a5:20:75:62:e3:ed:54:75:6f:
                    ad:cf:b7:ad:6e:d5:8b:62:ff:7a:5b:18:a2:3d:09:
                    38:36:40:15:e4:5f:72:53:ed:ce:c4:5b:9d:1e:bb:
                    d3:49:9a:31:47:08:d1:16:f7:3e:b2:39:f0:b6:b8:
                    25:de:e3:2a:81:cc:2b:4f:da:20:cc:c1:77:08:25:
                    26:38:89:54:5e:69:09:85:d4:58:25:c5:78:41:aa:
                    8c:3f:bb:dd:61:c8:20:f0:61:ef:b6:0e:00:5d:1e:
                    18:9a:04:a8:17:7c:ff:51:e1:d4:1d:c3:6d:19:be:
                    f6:fa:d7:39:2b:8c:61:09:a2:fe:3f:ba:c8:cb:65:
                    b6:6f:c7:3f:7e:fc:58:66:ac:02:22:d4:e9:7c:88:
                    69:15:5d:5b:16:87:c8:2c:70:ba:24:af:c1:00:95:
                    a1:33:8c:9c:b0:6b:5d:58:9a:d0:6c:b7:a8:b6:4c:
                    89:73:b8:e8:68:8a:d4:d1:48:2a:5a:22:70:12:40:
                    e7:a8:27:28:e7:51:70:64:c8:a7:7e:71:a6:c0:b7:
                    14:e3:0c:23:d3:ba:a5:ae:3b:4c:a4:cc:5a:98:32:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0D:56:E9:06:96:00:EB:09:4B:28:CA:F0:D7:77:E8:37:16:4B:22
            X509v3 Authority Key Identifier:
                keyid:9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:01:81:29:43:a2:f1:8c:cb:5a:68:0d:6a:89:da:78:9f:57:
         7d:e9:08:01:06:cc:9b:c0:8d:28:7c:40:a0:23:8f:30:57:70:
         ec:ed:80:4a:e8:f2:69:36:02:43:0f:f8:27:31:c9:ca:17:da:
         db:61:14:67:b8:52:ca:d5:37:ee:1c:ce:c4:5f:97:d3:4b:ff:
         40:fd:9d:e2:66:c2:37:e0:4f:e1:1f:b6:4c:e7:1e:2b:22:41:
         12:91:dc:1e:45:ea:a5:38:e7:99:45:e1:28:9f:6d:9e:8c:80:
         9b:9e:e3:33:ae:ef:46:45:9d:24:ec:b4:4f:74:b8:e4:34:71:
         4e:68:6c:48:4c:9d:fc:2f:08:20:40:b0:0b:fb:40:31:7e:b7:
         c8:84:45:e5:cf:63:cf:61:43:d4:97:7d:3b:e5:91:9d:b4:f0:
         fb:56:82:0c:55:e9:5e:02:e3:f0:92:49:e4:bc:c3:d8:04:6a:
         49:86:2c:63:3a:1f:6d:e9:b9:64:7a:f9:f9:61:8d:6b:ce:86:
         51:96:44:6e:0a:38:51:22:97:ec:a0:78:2c:5d:a3:57:a2:f7:
         54:7b:f9:9b:ad:8c:04:75:9e:e9:ff:b6:97:f3:f5:0b:f1:ea:
         47:1b:37:09:7a:7e:51:2d:a9:aa:6d:2f:81:c5:9a:70:89:ec:
         d7:8e:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client