Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30208/co9-H8-he55aeB7HTKLKSwsxkKM.roa
File:                     co9-H8-he55aeB7HTKLKSwsxkKM.roa (raw, json)
Hash identifier:          /nCTfOpuAVnKLwu1goR8svnjtbk0tUu54iEXOPeGDO8=
Subject key identifier:   72:8F:7E:1F:CF:A1:7B:9E:5A:78:1E:C7:4C:A2:CA:4B:0B:31:90:A3
Certificate issuer:       /CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Certificate serial:       54
Authority key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/co9-H8-he55aeB7HTKLKSwsxkKM.roa
Signing time:             Tue 31 Mar 2026 07:50:03 +0000
ROA not before:           Tue 31 Mar 2026 07:50:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38651
IP address blocks:        2401:f100::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
        Validity
            Not Before: Mar 31 07:50:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=728F7E1FCFA17B9E5A781EC74CA2CA4B0B3190A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:2d:92:29:50:3f:a0:99:1a:f1:67:3d:2e:
                    1c:3b:c3:55:c0:bf:a0:83:af:25:4e:4a:68:fd:ad:
                    8a:44:88:a5:25:fc:0d:dc:2d:96:0e:20:75:85:5d:
                    7f:16:61:25:b5:a0:9f:9d:70:57:f0:56:9f:6f:52:
                    16:6b:b1:88:0d:f4:6d:3e:b9:b7:8e:40:10:6d:c9:
                    21:47:b1:d4:bd:c8:9f:8c:60:2f:78:6c:42:31:69:
                    5c:d1:ec:30:97:89:ee:70:3e:cb:4d:28:16:ce:bd:
                    45:b2:ac:04:8a:13:d0:80:cc:0c:16:59:5c:3e:b2:
                    0a:74:bb:00:d1:e6:15:29:44:92:ca:74:b3:56:a8:
                    26:49:b5:21:b1:22:2e:76:97:8d:45:4b:c8:36:53:
                    04:27:fd:3c:0d:2e:e4:cf:3d:77:04:eb:17:11:be:
                    aa:98:59:ee:a5:90:af:b3:f3:bc:ec:67:b7:fb:f6:
                    9c:ba:3c:19:01:48:9d:f1:55:1a:76:a1:11:28:9a:
                    0d:b0:5a:e7:08:9c:8c:37:ba:22:88:9b:18:a8:18:
                    fa:52:a1:9c:f1:90:d7:b3:73:8c:27:7c:3d:84:d4:
                    2f:e1:43:12:44:2c:7e:f9:46:a2:d2:10:d3:5f:d8:
                    29:43:0d:12:9f:aa:e1:1b:1a:fd:ab:76:4e:ee:c6:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:7E:1F:CF:A1:7B:9E:5A:78:1E:C7:4C:A2:CA:4B:0B:31:90:A3
            X509v3 Authority Key Identifier:
                keyid:DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/co9-H8-he55aeB7HTKLKSwsxkKM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:b8:d0:1a:4f:44:f7:70:c3:2e:ee:40:15:3d:8c:45:86:9a:
         c8:79:5e:46:d0:37:c7:b2:d7:6c:21:b3:e3:67:8d:9e:83:af:
         11:5f:a3:a3:72:17:f4:ee:e4:af:19:00:3b:10:ac:8e:ae:0f:
         c8:5a:ca:1f:6b:f1:61:e2:52:59:25:cb:55:4f:89:ce:89:c8:
         59:67:ef:58:94:be:10:cf:c9:6b:56:54:2a:de:e8:8b:11:eb:
         df:6f:00:db:0e:ab:13:41:65:fe:2c:63:b6:35:a6:d7:c7:82:
         b4:75:19:da:4f:08:1d:4c:26:ef:9f:0b:b4:c4:71:af:1d:1f:
         bb:a5:70:2f:78:f7:7f:3a:41:08:eb:d0:a6:c4:90:a9:03:dc:
         57:0e:5c:b4:59:a9:12:53:af:1c:de:9f:5a:06:e8:83:12:40:
         b8:fb:18:29:85:cd:e1:c0:fc:c7:2a:22:d5:68:05:23:ad:f8:
         b9:69:9d:c1:98:9e:a1:8b:c3:c9:b5:e7:92:e8:62:3f:84:f1:
         4a:c0:66:09:ab:b5:0f:da:75:bb:ea:c0:ee:73:f0:d7:ad:01:
         4d:ae:c2:0a:61:37:bb:c7:02:cd:38:42:61:97:51:d1:37:7a:
         f6:29:70:b2:a3:05:99:a2:76:a5:90:a2:e5:15:46:dd:61:7f:
         9e:5d:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:33 2026 by rpki-client