Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/YwfgrFHjpiU83Ays5GB7WKWbshw.roa
File:                     YwfgrFHjpiU83Ays5GB7WKWbshw.roa (raw, json)
Hash identifier:          uC/GCELxmA3nVx/RlvUtkUGe8LIedpXyad3tbaX8zYM=
Subject key identifier:   63:07:E0:AC:51:E3:A6:25:3C:DC:0C:AC:E4:60:7B:58:A5:9B:B2:1C
Certificate issuer:       /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Certificate serial:       38
Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/YwfgrFHjpiU83Ays5GB7WKWbshw.roa
Signing time:             Tue 31 Mar 2026 08:24:44 +0000
ROA not before:           Tue 31 Mar 2026 08:24:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10000
IP address blocks:        2405:ed00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
        Validity
            Not Before: Mar 31 08:24:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6307E0AC51E3A6253CDC0CACE4607B58A59BB21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:83:e5:eb:b9:4e:bd:7e:4c:9e:cd:15:e4:
                    a3:63:31:4e:8a:c3:df:ea:65:c5:2e:f0:00:10:d4:
                    4d:fc:6c:b6:91:bb:f0:71:72:b2:7b:6e:c3:b8:e1:
                    14:7a:29:09:58:ae:0d:19:98:1f:93:ec:4b:cc:1a:
                    7b:85:4e:60:e8:12:92:6c:0b:2a:a2:b2:ea:67:c4:
                    b9:e7:1a:b6:52:28:43:ec:a4:3b:1f:5d:ff:4a:80:
                    61:59:49:0b:a7:2f:fc:92:0a:d5:d7:44:25:6b:98:
                    87:1d:49:22:41:64:e5:ec:df:15:c2:f9:3c:e9:34:
                    af:db:ac:83:d8:5d:8f:b9:37:47:3f:c4:94:90:0c:
                    3f:11:ff:2c:44:ea:b5:9c:40:78:36:d0:5c:cd:a9:
                    52:01:43:c5:46:7a:07:fc:e8:a1:00:66:8f:10:33:
                    24:7b:ff:88:4a:1d:28:41:89:4e:a0:00:c4:ad:2b:
                    6e:29:85:1e:0c:a2:65:90:9c:4f:c8:5b:34:d8:9f:
                    3c:30:04:ef:4e:a4:e8:d5:a9:ea:b0:ed:af:d9:22:
                    08:ce:58:b6:1f:4d:a6:c1:b9:55:ad:a4:0d:3b:f6:
                    50:b7:c3:6f:b0:8d:4e:d8:cb:6e:02:f3:ce:8d:1c:
                    15:58:8b:ff:44:fa:f1:c8:7e:7e:11:e3:22:c1:ca:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:E0:AC:51:E3:A6:25:3C:DC:0C:AC:E4:60:7B:58:A5:9B:B2:1C
            X509v3 Authority Key Identifier:
                keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/YwfgrFHjpiU83Ays5GB7WKWbshw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ed00::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:0a:e6:43:51:a4:c7:35:ae:03:4b:1d:01:de:68:71:fa:
         59:e1:1e:61:8e:ae:eb:85:ad:ae:02:4a:f9:ee:f9:4c:c3:b6:
         5a:6c:45:78:41:02:b1:1d:c9:d9:44:3e:7e:84:1b:ca:83:a1:
         b6:cc:0d:20:80:89:33:f7:78:05:ad:61:e5:e8:22:fb:6f:c3:
         ac:36:98:06:8b:73:1e:e9:fa:41:9d:e0:74:18:c5:01:6d:7a:
         a0:88:70:ab:54:21:d1:4a:bf:8f:91:5c:e5:63:94:15:ad:c3:
         93:a6:a7:5d:a9:01:bd:75:ca:ee:97:a9:8f:24:77:57:7b:2c:
         7e:d6:95:4d:9d:fd:a7:23:fd:32:2e:fa:ab:86:f8:9d:65:2a:
         e6:97:f3:9e:5c:2c:27:91:cd:84:09:62:45:d0:dd:1b:17:57:
         15:14:0f:19:04:b5:3e:f3:6a:04:fb:cb:69:48:6d:ae:27:fb:
         97:d1:ee:c5:2e:2c:bd:3f:ca:63:ab:7e:42:17:4b:44:f5:9c:
         1a:8f:aa:71:1d:d5:fd:95:ef:8d:fd:7c:3a:14:0c:fb:ba:a4:
         fc:03:0d:16:8a:a6:2f:bc:36:0c:b0:18:79:ad:d5:96:fd:7c:
         a9:8b:ac:32:64:07:77:ce:6d:40:0e:02:0a:81:7d:37:79:9d:
         31:b2:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:29:21 2026 by rpki-client