Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30187/8FJEgXcgZ-04HuSMzQVlcKAC3nY.roa
File:                     8FJEgXcgZ-04HuSMzQVlcKAC3nY.roa (raw, json)
Hash identifier:          WqD7oZmEktTGCPavre7Lk2OXemPmLtWbZhddXSJKHIo=
Subject key identifier:   F0:52:44:81:77:20:67:ED:38:1E:E4:8C:CD:05:65:70:A0:02:DE:76
Certificate issuer:       /CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
Certificate serial:       29
Authority key identifier: FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/8FJEgXcgZ-04HuSMzQVlcKAC3nY.roa
Signing time:             Tue 31 Mar 2026 08:36:09 +0000
ROA not before:           Tue 31 Mar 2026 08:36:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18278
IP address blocks:        2400:a300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
        Validity
            Not Before: Mar 31 08:36:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F0524481772067ED381EE48CCD056570A002DE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:7f:5b:47:b3:99:ac:d4:24:c6:57:79:f9:
                    ac:8f:7e:04:26:50:78:11:d5:19:15:d6:0c:2d:8b:
                    18:de:42:88:4a:9d:7a:5e:54:38:db:80:e0:8b:8b:
                    f5:ad:77:27:01:f7:96:a5:a3:5d:ff:3a:42:0b:36:
                    ed:82:4e:fc:44:09:8c:a4:d8:73:c2:11:8e:26:92:
                    49:1d:3a:60:25:da:01:ed:55:da:23:92:43:42:35:
                    e1:cc:ce:df:79:90:7b:7b:38:a3:f1:bb:c7:e3:e0:
                    e9:e3:43:63:d1:8d:48:4d:78:e8:02:14:14:3b:73:
                    ba:67:17:4b:8b:24:d4:d2:87:ec:f3:9b:4d:14:33:
                    cb:4a:8f:ea:6b:2e:ab:19:16:53:6a:7b:a7:a0:8f:
                    3c:55:56:85:a8:fd:15:0c:f5:9c:d1:47:9d:69:0c:
                    dc:b8:7d:51:88:e5:96:ba:ff:66:20:f4:41:40:73:
                    c0:fe:26:1d:89:3a:c0:16:32:b5:01:0e:a2:4f:07:
                    1c:59:b0:b3:f5:be:73:e7:cf:61:50:8d:23:9e:c1:
                    29:5a:91:af:5c:85:e9:9a:7e:83:48:17:5c:63:8d:
                    34:fe:5c:dc:57:07:01:af:f6:ec:b2:75:3b:d4:b0:
                    c4:68:a2:9e:e3:bb:44:27:5a:2a:a0:bc:2e:c1:a6:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:44:81:77:20:67:ED:38:1E:E4:8C:CD:05:65:70:A0:02:DE:76
            X509v3 Authority Key Identifier:
                keyid:FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/8FJEgXcgZ-04HuSMzQVlcKAC3nY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a300::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:7a:58:6b:44:d4:b1:f1:bd:bb:b7:08:de:1a:8d:67:98:
         b8:cd:1b:ee:e3:f3:4c:24:96:6a:5b:e6:b3:4b:3b:3e:99:5f:
         0b:a5:37:dd:a0:0f:50:66:37:69:3e:ec:de:69:ee:62:b0:cf:
         c4:03:1e:22:5e:80:ce:77:88:9e:7a:e6:f7:54:0d:24:7f:91:
         9f:61:15:c0:be:47:c9:65:5d:7e:f8:fe:a9:d1:7c:18:1d:11:
         0f:e8:97:f7:f0:75:6a:d9:4f:94:c5:06:22:4a:0f:25:28:14:
         0f:41:e7:b8:09:94:88:55:67:26:6c:a8:6f:2e:f6:74:5b:a6:
         b8:02:ef:bb:2c:8d:fa:52:49:41:f0:1a:11:48:25:b1:6f:d5:
         b0:0f:a2:a7:23:e5:33:7c:94:72:9c:29:3c:0b:6e:fc:cc:aa:
         fd:1f:b6:18:7a:b9:49:18:ee:43:f8:92:3a:29:fe:73:c8:20:
         08:c5:22:92:1d:6b:7e:51:42:94:7a:8d:a3:cc:e0:77:b4:53:
         91:a0:73:87:03:8b:15:92:39:c0:70:8a:e9:6b:b4:f4:6f:09:
         ba:b2:07:2e:80:89:2c:b8:d8:01:c4:2e:e2:45:5d:9f:57:88:
         d7:80:b0:2a:d3:f3:74:af:ad:38:30:01:66:c8:d5:33:05:78:
         1d:52:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:23 2026 by rpki-client