Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30221/M6G4coxPp0nMGSvpt_KdL5gU1cQ.roa
File:                     M6G4coxPp0nMGSvpt_KdL5gU1cQ.roa (raw, json)
Hash identifier:          VQdoy3hyP5QN5YXTkCKmWn8DbHZB6NAPyV5lFblRZXU=
Subject key identifier:   33:A1:B8:72:8C:4F:A7:49:CC:19:2B:E9:B7:F2:9D:2F:98:14:D5:C4
Certificate issuer:       /CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
Certificate serial:       05
Authority key identifier: D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/M6G4coxPp0nMGSvpt_KdL5gU1cQ.roa
Signing time:             Tue 31 Mar 2026 08:48:32 +0000
ROA not before:           Tue 31 Mar 2026 08:48:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37906
IP address blocks:        2402:d700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
        Validity
            Not Before: Mar 31 08:48:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=33A1B8728C4FA749CC192BE9B7F29D2F9814D5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:aa:11:72:6f:f6:1a:db:12:dc:ac:c5:52:
                    02:80:70:f9:a5:1b:7f:0f:f0:36:b8:8d:56:d1:81:
                    78:94:0b:09:58:27:f0:bf:13:1b:a8:15:6e:34:87:
                    df:47:ca:3f:65:8c:06:c0:30:8e:aa:54:6e:f6:c6:
                    d3:be:cc:eb:bf:c2:7a:a4:95:b7:7d:cf:e3:a3:83:
                    19:55:f9:7b:0f:f6:e2:f9:6b:45:be:fb:c2:fe:4e:
                    be:a3:42:a8:bc:15:97:51:23:37:4d:2a:3b:57:26:
                    24:6c:83:c8:39:43:14:05:0d:42:2a:6d:92:a7:51:
                    c4:69:d8:c2:84:63:d7:aa:67:d3:c1:23:db:64:32:
                    4c:ed:5f:2b:a8:14:83:a7:9e:d4:d6:55:c7:45:ae:
                    0e:0f:f8:72:de:57:c2:1c:85:ca:2c:7f:f9:90:85:
                    b7:1c:2f:11:17:ab:c7:f7:67:66:1b:98:5c:ce:dd:
                    2f:3e:30:22:94:e4:d7:63:bb:c6:8b:35:84:5f:65:
                    71:6e:d9:1d:40:10:6a:6b:0d:59:c8:8a:c6:6e:78:
                    6e:de:62:c6:0e:f2:5d:26:80:48:8d:7b:39:bb:07:
                    e0:f8:2c:a9:59:e5:91:f0:45:77:19:25:b9:fb:73:
                    53:4d:24:dc:67:6f:22:f9:ba:01:da:92:cf:8e:b3:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:B8:72:8C:4F:A7:49:CC:19:2B:E9:B7:F2:9D:2F:98:14:D5:C4
            X509v3 Authority Key Identifier:
                keyid:D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/M6G4coxPp0nMGSvpt_KdL5gU1cQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:d6:cc:2f:4c:58:df:af:8d:e8:93:2f:2a:a1:cc:e2:86:aa:
         82:38:54:05:7b:79:a6:46:b1:6f:4c:06:9d:9e:4c:9f:8d:e9:
         29:8f:8a:45:ea:57:5a:b8:8e:a6:cf:f5:cd:83:ef:dd:9a:06:
         6d:1f:9b:6c:2d:77:d3:03:af:51:20:59:5b:1a:98:61:05:7c:
         e4:0c:98:f7:46:74:93:8c:d2:54:39:e7:5e:68:41:0f:27:d2:
         b7:ef:83:5c:52:30:96:bb:94:a1:f3:d3:52:84:b8:14:37:21:
         f8:e7:70:65:b3:93:0e:c4:c6:bd:9f:c2:8e:d7:0e:5d:21:e6:
         38:85:e1:48:0b:22:54:6e:b1:61:11:67:1f:ae:95:4e:3b:a5:
         4a:f0:cc:8f:18:2a:12:17:40:9e:7e:3e:fa:09:55:70:43:01:
         86:37:37:84:c4:0f:0a:ac:bb:f3:aa:44:14:a2:be:21:4c:3a:
         fb:5f:8d:3b:33:e1:e5:18:28:8c:01:20:cf:11:f0:b0:60:d4:
         0b:01:74:2f:02:3e:63:4c:4f:28:b7:d1:dd:b6:23:56:83:0c:
         2e:fd:b2:6d:87:a8:99:dd:87:0e:d0:8e:41:e0:a0:9f:21:65:
         08:a0:9b:27:9f:09:0c:fa:13:64:5a:e8:79:b5:75:56:e0:67:
         73:9c:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:22 2026 by rpki-client