Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa
File:                     zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa (raw, json)
Hash identifier:          a+dIJCwT/4Uvu+2ayZ4vJzxd6tevHc4s7XS1t410DPQ=
Subject key identifier:   CE:59:22:5A:5A:45:12:0B:4C:C6:37:E7:D9:B4:6F:F2:6F:5A:F2:5E
Certificate issuer:       /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial:       3A
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa
Signing time:             Tue 31 Mar 2026 08:32:49 +0000
ROA not before:           Tue 31 Mar 2026 08:32:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131964
IP address blocks:        2400:a140:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
        Validity
            Not Before: Mar 31 08:32:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE59225A5A45120B4CC637E7D9B46FF26F5AF25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:63:75:e0:1e:4b:b9:3f:d9:56:48:d3:3b:
                    b8:67:1e:df:3d:a2:83:54:63:a7:b6:de:dd:76:47:
                    99:c4:3b:00:7d:98:ae:a5:53:ec:22:17:41:a6:d3:
                    3b:21:cf:32:83:a2:c4:a6:d1:30:10:a8:d1:66:67:
                    99:5a:ff:03:a8:00:6b:9e:af:37:ad:9c:cf:6b:81:
                    48:2c:df:2a:41:44:94:b7:aa:6c:d6:1d:d4:af:16:
                    df:4e:75:b7:8e:d0:8b:81:c7:ee:4f:84:cd:af:9a:
                    34:de:2b:0d:1f:1c:43:e0:e5:a9:ba:e3:4d:22:33:
                    c7:a4:9c:1b:0a:77:68:2b:4e:99:f4:dd:97:a8:a8:
                    94:14:b3:ea:0e:75:5f:06:a6:65:c7:e6:af:98:a2:
                    e1:d9:81:f3:39:b1:ab:3d:99:b3:c4:ef:36:e7:23:
                    cb:9a:ec:d5:72:e9:d4:0c:aa:a8:b2:af:b0:9a:f4:
                    1e:97:83:f8:4a:43:7f:0d:42:f5:a7:eb:28:a4:bd:
                    bf:39:a0:49:bb:b7:55:cc:f1:cd:a5:fb:7f:d3:df:
                    18:d3:cb:d0:dc:f2:12:a1:a1:9f:de:45:c0:52:2f:
                    9f:86:ff:51:b5:46:86:b7:eb:2a:1f:99:18:e7:ba:
                    07:b1:44:8e:c6:8c:b8:f0:c3:e7:42:4d:e7:ce:43:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:22:5A:5A:45:12:0B:4C:C6:37:E7:D9:B4:6F:F2:6F:5A:F2:5E
            X509v3 Authority Key Identifier:
                keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a140:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:73:9d:ea:32:cc:0c:9f:73:80:4c:e6:67:39:de:bd:8b:
         17:da:9c:c9:22:af:7d:df:7f:ee:7b:98:11:cb:f8:b4:35:de:
         f9:ce:70:f7:37:c7:0c:5c:14:11:51:7b:b0:8c:59:3f:8c:3e:
         21:64:18:a3:51:c6:d7:28:96:e8:db:37:c4:bf:47:46:52:9d:
         38:12:36:48:f4:78:f4:fa:6c:cc:4d:fe:aa:12:0a:f2:05:d8:
         00:73:b8:d2:0f:6e:2d:fe:5d:d8:17:80:34:a6:28:d9:cc:f6:
         af:56:1f:1c:57:e6:ad:48:44:a4:a8:00:80:4d:03:bb:3f:01:
         7a:a1:36:8f:ce:31:e0:5e:32:7b:8d:11:a2:8a:f7:0a:61:b1:
         cb:b1:ec:68:f8:7a:89:ec:4a:5e:b2:9c:f1:71:69:28:90:0d:
         c5:c8:d0:b4:c4:a0:f6:26:fe:9b:7a:3f:45:52:f3:33:fd:2e:
         cd:93:52:da:e4:93:cc:b2:49:81:58:e4:0e:0b:de:a2:c8:ed:
         67:dd:1d:6b:a9:52:5f:c6:36:8c:0c:77:17:11:2c:09:c3:70:
         3b:74:7c:16:70:7e:e3:08:6d:0f:ee:ed:1e:05:c5:45:e0:b2:
         b8:c7:cc:8e:2e:09:61:21:a8:15:46:72:7e:34:af:fd:00:9d:
         61:37:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client