Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30213/zyhZDrbA0WSWXyStQ9tzXx2QJbs.roa
File:                     zyhZDrbA0WSWXyStQ9tzXx2QJbs.roa (raw, json)
Hash identifier:          +LRhatpiWZUIQt1Kj0UznYiS1qkfbKvASOLl76j7Q9Q=
Subject key identifier:   CF:28:59:0E:B6:C0:D1:64:96:5F:24:AD:43:DB:73:5F:1D:90:25:BB
Certificate issuer:       /CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1
Certificate serial:       25
Authority key identifier: 95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/zyhZDrbA0WSWXyStQ9tzXx2QJbs.roa
Signing time:             Tue 31 Mar 2026 08:39:36 +0000
ROA not before:           Tue 31 Mar 2026 08:39:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17931
IP address blocks:        2402:4700::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1
        Validity
            Not Before: Mar 31 08:39:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF28590EB6C0D164965F24AD43DB735F1D9025BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:43:50:4c:11:f7:28:11:02:72:ae:db:38:
                    21:49:40:35:75:c3:79:e8:22:86:0a:2b:e9:5e:e4:
                    39:52:06:96:c7:b9:34:58:54:4b:ed:b1:99:b4:61:
                    04:6a:84:b7:29:49:c2:28:c8:a7:ec:fb:c6:36:9c:
                    8c:af:c9:bf:33:24:68:d7:82:2f:70:17:4a:2e:e9:
                    87:a3:2a:09:b3:dd:d0:cc:f5:37:1b:fb:18:f5:99:
                    ac:a4:a9:cb:fe:cc:15:46:2b:e1:8e:2c:ec:43:06:
                    c2:44:fa:c1:da:8f:8a:92:5c:11:a4:36:d3:f2:16:
                    10:db:1c:c0:60:ce:e0:fd:33:93:0b:d9:9b:35:07:
                    d2:0c:52:84:02:b7:84:29:f2:ec:db:1f:ba:8a:12:
                    b8:f8:25:e5:98:ed:1f:5b:da:fa:f1:de:f2:6c:06:
                    e5:49:8b:93:c7:a6:38:a7:af:01:9c:9c:b1:7a:be:
                    d3:69:3c:74:b0:f9:70:42:9b:2a:ec:77:ea:79:a2:
                    0c:ad:af:50:62:b6:5a:ed:7e:2f:87:14:aa:44:a6:
                    ac:b8:89:9e:02:b7:ae:f0:78:33:01:cf:f9:02:d1:
                    ff:d3:69:c4:17:77:66:22:fc:ea:4c:78:9c:bc:92:
                    c2:8c:00:a6:d9:3a:f2:0c:12:61:28:db:60:fa:d7:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:59:0E:B6:C0:D1:64:96:5F:24:AD:43:DB:73:5F:1D:90:25:BB
            X509v3 Authority Key Identifier:
                keyid:95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/zyhZDrbA0WSWXyStQ9tzXx2QJbs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4700::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:57:d0:12:2f:55:3d:a5:ed:6d:30:a0:4f:19:73:30:7f:c8:
         5a:12:a8:3d:c3:a2:2a:9b:ae:22:17:10:56:4d:cc:64:2a:3c:
         03:93:ff:50:97:db:99:c9:bc:aa:a4:d4:5d:61:e3:67:08:8e:
         27:fb:ba:75:f5:8d:c7:f1:25:cf:b9:7d:dc:df:88:e6:31:ac:
         75:91:02:2b:fd:8e:c8:44:88:29:e8:36:96:74:aa:d9:5f:50:
         3d:d0:59:16:c9:f8:13:31:c5:61:37:a3:4b:d0:67:00:72:26:
         e0:8c:ad:bd:92:04:29:20:a5:a3:8d:10:cd:66:26:c2:82:af:
         5d:2e:eb:f8:97:07:b0:f7:ec:21:aa:10:e8:60:9b:6f:19:53:
         98:f4:0c:b6:be:a8:39:2a:9f:f6:30:50:3e:7c:c3:68:62:c3:
         2d:d6:78:84:5d:32:55:84:44:dd:26:7f:ea:df:09:77:ae:67:
         19:8b:f0:2a:31:4e:c1:e3:c8:a4:80:e6:a1:23:6c:ee:d9:de:
         33:9c:c2:ea:d6:bd:d7:83:aa:70:bf:2a:e7:e7:11:35:f9:19:
         0e:97:c0:77:0d:58:55:95:e2:1c:85:c1:44:11:80:61:49:d2:
         f7:ad:77:77:cd:c0:fa:88:96:d2:1f:a8:18:f8:e2:33:0d:cf:
         f6:df:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:43 2026 by rpki-client