Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/nNSQ2J4lfJUhfqECRPJo4BNnpbo.roa
File:                     nNSQ2J4lfJUhfqECRPJo4BNnpbo.roa (raw, json)
Hash identifier:          x5OFaCl4Ku3iTTx0HpDh8mTs4ijrOmumX83mV/x91iU=
Subject key identifier:   9C:D4:90:D8:9E:25:7C:95:21:7E:A1:02:44:F2:68:E0:13:67:A5:BA
Certificate issuer:       /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial:       38
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/nNSQ2J4lfJUhfqECRPJo4BNnpbo.roa
Signing time:             Tue 31 Mar 2026 08:32:49 +0000
ROA not before:           Tue 31 Mar 2026 08:32:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59125
IP address blocks:        2401:4d40::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
        Validity
            Not Before: Mar 31 08:32:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9CD490D89E257C95217EA10244F268E01367A5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:ce:a5:4c:63:c2:fb:fa:ce:a8:ec:e4:36:
                    51:58:0f:5e:d2:d7:9c:8e:7b:1a:a9:4b:67:2f:e0:
                    7c:c3:d1:fc:71:a2:55:bd:7b:6a:80:f0:0d:e2:3c:
                    71:32:02:6d:62:f3:e1:12:98:fa:72:84:db:f6:97:
                    ca:cd:3d:a7:af:6d:fb:b0:89:88:63:29:ed:94:21:
                    c6:e6:b4:c7:9c:be:b4:10:0e:0e:b1:39:7e:3a:f5:
                    b0:a8:c2:0a:4b:a0:2a:87:3b:fd:27:42:c9:f8:6a:
                    2c:ba:4e:39:88:27:f1:9d:df:d4:46:3c:93:5b:64:
                    bc:57:ac:58:78:05:1f:99:4c:2f:14:2b:f4:15:fc:
                    0b:39:3c:ba:a6:4e:a1:67:69:8c:8c:e3:9b:9c:0f:
                    4a:69:1b:45:c8:ba:63:81:88:5a:30:65:58:84:f5:
                    e5:aa:a0:4f:f6:21:b0:9a:ae:78:70:7c:d2:4b:f8:
                    3f:e2:29:79:c0:62:ca:15:c6:f3:75:ee:a9:88:2f:
                    83:0c:72:16:ab:06:eb:1c:b3:04:1d:35:12:fe:36:
                    9c:e1:e8:a3:0f:e0:f6:15:8a:2f:f8:ad:94:93:e3:
                    52:d4:99:57:28:c6:21:ca:13:44:da:e5:c9:c2:dc:
                    40:2f:0b:f7:47:eb:0c:6f:eb:44:2e:9c:ca:22:9f:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:90:D8:9E:25:7C:95:21:7E:A1:02:44:F2:68:E0:13:67:A5:BA
            X509v3 Authority Key Identifier:
                keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/nNSQ2J4lfJUhfqECRPJo4BNnpbo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4d40::/30

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:f4:96:e5:2e:d2:4f:c6:23:bd:2e:b5:fe:27:e4:1a:d2:
         5f:88:4c:f7:f8:0e:d7:4f:fe:49:6c:07:24:8b:20:e0:38:d6:
         67:44:86:26:cd:2f:a4:45:19:f3:f3:15:03:7b:01:c5:29:e5:
         01:a0:ce:07:f9:bf:26:99:c8:7b:a6:d7:77:d4:42:5f:08:dc:
         59:2e:cb:a9:ef:9a:fa:f0:74:7a:73:ef:0a:24:69:71:ef:67:
         57:25:02:59:b6:08:62:61:bb:19:c6:b1:14:bd:59:60:ef:ff:
         0a:11:7f:ff:64:56:91:f0:99:17:d2:8a:61:7a:b7:96:ba:54:
         b2:af:af:be:c7:20:ef:f1:87:62:18:b4:9e:96:83:81:0d:ac:
         33:17:f1:4b:66:e9:61:9b:63:96:fe:a9:be:81:56:5f:e5:a9:
         54:3b:cf:87:fe:24:69:ac:45:ca:6a:b3:52:bc:b8:ef:47:db:
         a3:d9:d7:21:5e:eb:72:59:49:3d:51:c8:97:4a:3e:d1:04:4b:
         11:4b:82:11:aa:e9:bc:3c:e3:76:30:9b:e2:9f:d9:d3:ae:2d:
         9e:04:81:1e:d6:db:9d:16:f1:3a:ba:54:1a:aa:cc:e4:1a:9d:
         85:e9:61:2e:b7:5b:de:f6:75:2f:5c:8b:fa:fe:db:2b:b6:60:
         26:b8:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:49 2026 by rpki-client