Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/_W9SJ8f70xhIEM9BGtB2MQ-CzKg.roa
File:                     _W9SJ8f70xhIEM9BGtB2MQ-CzKg.roa (raw, json)
Hash identifier:          uhwNyrjg0P5dSpJgh2m7heJBaqLpU+TA+R2jfPNwuYk=
Subject key identifier:   FD:6F:52:27:C7:FB:D3:18:48:10:CF:41:1A:D0:76:31:0F:82:CC:A8
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       78
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/_W9SJ8f70xhIEM9BGtB2MQ-CzKg.roa
Signing time:             Tue 31 Mar 2026 07:31:08 +0000
ROA not before:           Tue 31 Mar 2026 07:31:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59099
IP address blocks:        2405:f000:150::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Mar 31 07:31:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FD6F5227C7FBD3184810CF411AD076310F82CCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:58:32:73:5f:1a:9e:a1:29:db:f4:31:2f:
                    ad:1a:d5:0a:3c:0e:e0:21:89:c4:29:a4:26:f9:0d:
                    be:91:10:7e:2f:31:c9:f9:a5:bc:1f:39:39:cc:8a:
                    64:ec:c4:18:ef:3b:a5:6c:5d:c8:53:f3:6c:de:ac:
                    41:b7:77:e7:00:7d:ac:5b:23:1e:2d:a4:7e:14:8b:
                    6f:0e:2e:1e:d4:8d:05:2b:bc:c0:99:09:c6:52:f1:
                    c4:72:6b:71:e9:83:93:24:b5:ef:89:8a:69:10:64:
                    2a:11:90:e9:36:b1:01:21:d8:f7:cc:63:26:ec:93:
                    12:56:b1:76:77:ed:42:c0:a1:be:27:bf:2a:52:e6:
                    6a:91:fb:14:24:b9:db:5e:48:8e:50:84:db:65:04:
                    bf:c4:c8:d4:43:da:d3:fc:51:22:e1:dc:ca:72:27:
                    1e:ae:59:c0:1c:01:26:5c:e7:72:6e:f3:77:05:c3:
                    d5:c4:e5:a3:5f:ac:ad:84:2d:57:1d:94:b0:19:f2:
                    c9:58:a7:5c:31:62:85:05:82:3c:40:b1:d8:2d:bf:
                    17:2e:14:28:f1:39:e9:27:db:af:6f:c2:87:ce:de:
                    82:b7:86:5a:95:4d:7d:91:73:38:45:74:ed:e0:de:
                    c2:1e:aa:b9:47:74:8f:71:ec:ad:2d:47:05:8b:8f:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:52:27:C7:FB:D3:18:48:10:CF:41:1A:D0:76:31:0F:82:CC:A8
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/_W9SJ8f70xhIEM9BGtB2MQ-CzKg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f000:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:ba:5c:a4:f4:63:79:ea:47:50:da:9c:ea:bb:fd:6f:39:
         14:97:63:e5:52:92:f1:95:3e:ed:b3:88:8b:dd:3a:9c:b5:70:
         30:e9:d9:3b:43:02:9d:99:c9:a9:30:6c:51:60:33:be:97:f3:
         d6:6c:f6:9a:94:ee:52:0e:38:5b:3f:5b:fb:d2:62:6b:9a:44:
         a1:ca:61:1e:e6:c5:da:ee:61:f3:79:0f:df:af:74:25:79:65:
         e3:e6:4f:4f:fb:ea:16:79:9d:fe:b0:3f:9e:f6:b8:82:97:3c:
         bc:41:8b:ca:12:a7:3d:ee:46:23:68:b3:7d:c9:07:c4:25:97:
         b7:45:30:5a:c2:ad:59:ad:f9:5a:6f:32:74:00:ae:03:6f:12:
         41:ba:f3:91:93:f4:a3:c3:c0:d3:44:3d:0e:6b:9c:fd:f1:28:
         ae:b7:07:f9:7c:49:b3:bf:4b:cc:04:4d:6b:a7:23:33:ed:8e:
         45:b6:76:02:ad:93:86:55:3d:f5:55:6e:eb:d1:6c:e1:43:05:
         43:61:0b:ba:ae:db:86:62:a9:3e:8d:82:58:73:ce:fe:62:51:
         3c:53:76:cf:9e:22:61:1e:73:f0:ae:1a:44:f5:0f:57:84:d2:
         bb:ff:f1:fe:fc:ee:7b:b0:2b:cb:d5:16:c5:73:c6:2c:32:5e:
         7a:c8:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:19 2026 by rpki-client