Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/3rq_ItcFwl4H9FJgH8RDPRG5pX0.roa
File:                     3rq_ItcFwl4H9FJgH8RDPRG5pX0.roa (raw, json)
Hash identifier:          BLEN45/S4Wn4Gc8duJaP98NrHj0piG/O+3F8oecpsuM=
Subject key identifier:   DE:BA:BF:22:D7:05:C2:5E:07:F4:52:60:1F:C4:43:3D:11:B9:A5:7D
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       6F
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/3rq_ItcFwl4H9FJgH8RDPRG5pX0.roa
Signing time:             Tue 31 Mar 2026 07:47:35 +0000
ROA not before:           Tue 31 Mar 2026 07:47:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        2401:af80:9011::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Mar 31 07:47:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DEBABF22D705C25E07F452601FC4433D11B9A57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:58:a2:53:63:6d:9c:70:bd:02:ab:74:cd:
                    a0:6a:61:81:85:36:71:88:68:46:e9:92:8e:bd:22:
                    eb:6c:0d:86:75:47:0e:cb:2d:79:ba:31:53:89:da:
                    5f:76:e4:55:ed:09:cd:a2:63:75:ab:9f:69:12:66:
                    7a:b3:7b:3c:8e:39:08:ed:68:18:e1:d2:88:fe:32:
                    58:80:0a:cd:38:34:46:53:01:b8:b3:b8:7b:79:88:
                    78:20:cd:81:9a:f8:a6:f6:16:03:ba:ef:35:c1:c6:
                    1b:15:3f:85:1e:a3:3a:ac:b3:4b:d1:fd:9d:64:b5:
                    55:e4:8b:29:16:d2:e9:ed:dd:17:90:ac:44:17:5b:
                    a3:1b:84:c9:a7:76:0a:f6:c7:21:47:2e:6c:e7:36:
                    a5:5c:68:46:1d:34:20:c6:f5:f6:55:1d:2c:a7:fc:
                    b7:25:e4:c2:d5:a9:96:0e:79:66:8e:fc:b7:e7:52:
                    70:e8:0a:5a:6b:59:d2:53:c8:8d:19:65:61:05:e6:
                    05:94:c8:49:ea:48:64:2c:8b:6b:15:9b:9f:39:55:
                    26:ee:3e:16:fb:ca:c3:dd:c7:f9:36:b0:13:ed:b7:
                    74:3e:48:63:b8:01:f7:90:ee:96:8b:3c:f6:38:cb:
                    d4:c0:ca:25:cd:e0:94:ff:e5:e2:04:d3:db:97:63:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:BF:22:D7:05:C2:5E:07:F4:52:60:1F:C4:43:3D:11:B9:A5:7D
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/3rq_ItcFwl4H9FJgH8RDPRG5pX0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:3f:12:12:92:24:d0:68:23:f5:14:65:35:23:d6:4d:88:
         e2:48:ef:5d:99:b4:70:8b:ed:5b:cb:f0:49:a9:cd:22:67:eb:
         22:a6:c5:1a:17:26:87:55:32:c1:b6:98:6f:cb:17:15:50:90:
         0e:82:f1:40:2b:d8:62:97:6c:c6:bd:99:48:b9:14:c4:41:14:
         e7:3a:cb:cb:2a:33:58:8b:2e:54:e4:53:bd:06:27:99:d3:ea:
         23:c3:21:28:e5:4b:7f:62:ea:a4:99:b4:f9:0f:88:02:2f:ca:
         f7:44:80:f4:69:22:67:26:f7:0a:f0:93:a4:52:17:57:24:5d:
         b0:d1:9c:13:4f:09:20:61:43:53:dc:cb:11:ea:77:6d:e2:1a:
         d5:af:d6:96:3b:78:b3:ab:8c:b1:2e:53:04:cc:6c:9d:42:92:
         8f:4b:0e:4b:d5:d6:8b:9e:1a:b6:c7:bb:79:e4:a0:17:34:6e:
         9b:51:fd:9f:17:15:c6:c3:9b:b6:8e:e0:d5:aa:51:2f:20:4d:
         e5:37:96:f7:b3:35:e2:eb:e7:3c:55:44:05:84:a0:7c:3c:f9:
         e4:bb:39:34:e1:b9:1b:97:3a:d1:2d:de:21:53:a2:34:f7:5f:
         e2:c5:19:b2:1b:cd:bb:75:bf:0b:a0:17:65:7e:b7:25:94:85:
         bc:8e:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:10 2026 by rpki-client