Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xeAhokMvfrQDNTFY2g2lBfvW-Js.roa
File:                     xeAhokMvfrQDNTFY2g2lBfvW-Js.roa (raw, json)
Hash identifier:          PFygey6lQebrHPAHh9slryizVXIet6tjx7IGA8XvGE8=
Subject key identifier:   C5:E0:21:A2:43:2F:7E:B4:03:35:31:58:DA:0D:A5:05:FB:D6:F8:9B
Certificate issuer:       /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
Certificate serial:       34
Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xeAhokMvfrQDNTFY2g2lBfvW-Js.roa
Signing time:             Tue 31 Mar 2026 08:31:12 +0000
ROA not before:           Tue 31 Mar 2026 08:31:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131923
IP address blocks:        2401:5ac0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
        Validity
            Not Before: Mar 31 08:31:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C5E021A2432F7EB403353158DA0DA505FBD6F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:28:02:13:12:59:99:e7:ed:a0:32:93:ed:
                    ba:72:8f:a8:49:9e:db:50:96:64:8e:bf:49:f2:cf:
                    43:a4:d9:de:7e:75:e9:aa:c0:10:8d:9d:70:65:69:
                    86:7f:d9:fe:1f:48:aa:47:2d:8b:14:15:17:2c:34:
                    04:6f:c1:de:09:71:ff:f5:e5:89:88:ce:82:bc:f5:
                    33:85:64:be:1c:30:41:3e:f6:98:8c:10:8c:df:2d:
                    6c:7e:e3:1c:31:9e:7d:f6:5c:cd:55:d1:55:2b:d0:
                    d7:0f:57:18:16:d4:24:9c:68:a8:3d:64:e3:e5:aa:
                    75:6d:0d:2d:fa:9c:ff:cd:7d:6a:7e:1c:ad:ff:72:
                    4f:cc:a3:9b:0a:8e:ad:8e:0b:52:15:76:83:a8:e3:
                    32:ff:4b:a3:ec:61:a6:7e:81:0e:a8:2f:d9:bf:3d:
                    04:da:a0:46:7a:b2:30:be:55:71:09:a0:fe:93:d0:
                    85:73:7c:4b:8a:f9:a2:fd:34:0f:7f:2b:40:ba:c8:
                    ee:a9:74:a0:94:74:c2:d9:e2:95:f6:58:27:c9:de:
                    55:e6:5c:bd:1e:4b:e4:a4:ce:06:43:e9:1a:c2:2e:
                    01:12:d4:9c:60:b9:0d:c7:27:ac:08:64:91:ec:2a:
                    cf:df:72:bf:bf:5c:76:b6:6f:93:fd:f3:2c:a4:f7:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:21:A2:43:2F:7E:B4:03:35:31:58:DA:0D:A5:05:FB:D6:F8:9B
            X509v3 Authority Key Identifier:
                keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xeAhokMvfrQDNTFY2g2lBfvW-Js.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:5f:af:9d:a9:da:e7:c4:de:b7:d6:78:0b:ba:1b:fa:11:
         55:37:2c:e8:d1:10:46:e9:f1:39:5c:da:fd:d3:1d:b0:82:a4:
         6b:63:42:13:59:11:0c:3a:d6:26:12:22:7b:65:80:b2:d8:ae:
         42:d9:87:9f:ee:2d:72:df:c9:ed:da:46:c2:7e:d7:58:a7:32:
         6c:8c:e9:bd:9b:98:88:b6:7b:4d:4b:a1:8b:96:73:4e:ac:c9:
         64:35:aa:fa:3b:85:23:93:ef:8e:66:30:e7:81:4c:7d:3f:13:
         58:32:ef:a3:2b:0c:57:97:23:89:f9:4c:f7:df:e9:db:bd:9d:
         d4:b3:16:bf:b4:2c:65:7b:84:9f:70:a2:e2:5e:6d:49:15:e1:
         17:3d:a3:c3:55:1c:82:7a:66:41:2b:90:28:3c:53:7a:ee:00:
         3e:8b:f5:31:6a:fc:e6:ed:5e:dd:8d:04:a7:b8:26:30:68:5b:
         fe:d9:d5:64:d0:f5:c5:76:eb:40:c8:d0:2c:6e:26:53:cc:66:
         8d:ce:fb:98:97:80:ff:3f:e6:d6:c7:d6:5e:6b:3d:99:ed:50:
         4a:5e:f8:de:86:8c:33:8f:ca:fb:3f:67:c1:6b:35:04:ff:db:
         e4:c3:aa:39:52:ed:5b:3d:6a:da:99:2a:11:52:e5:4c:fb:dc:
         3b:43:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:22 2026 by rpki-client