Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/RonudiWL46NyB-h58DM-Q8Q93l0.roa
File:                     RonudiWL46NyB-h58DM-Q8Q93l0.roa (raw, json)
Hash identifier:          Fh6Z2fhIcNsQOylgYPChHxMErP4h04TV9n9xOI4wGOg=
Subject key identifier:   46:89:EE:76:25:8B:E3:A3:72:07:E8:79:F0:33:3E:43:C4:3D:DE:5D
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       14
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/RonudiWL46NyB-h58DM-Q8Q93l0.roa
Signing time:             Tue 31 Mar 2026 08:45:31 +0000
ROA not before:           Tue 31 Mar 2026 08:45:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        2401:55c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Mar 31 08:45:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4689EE76258BE3A37207E879F0333E43C43DDE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:bd:72:d8:b5:0c:16:15:94:b4:ef:ca:0a:
                    89:e8:29:1f:41:47:80:42:6c:5e:57:8c:f0:fd:75:
                    5f:8c:84:88:29:06:bf:93:66:30:73:7d:c9:7c:e6:
                    40:7c:5b:41:4b:01:38:c8:af:39:34:e0:bc:e6:dd:
                    d2:99:22:df:0d:b5:d2:4a:f4:bb:4a:4e:32:c3:a3:
                    c0:aa:29:f2:81:81:46:e8:b8:4e:96:4e:26:49:6d:
                    bc:80:3e:43:4e:0d:06:f0:8a:83:50:c9:2f:41:8e:
                    0f:a4:aa:e8:b6:54:84:9a:cc:31:8d:ed:98:db:a2:
                    b9:0a:53:d9:f9:e6:74:58:41:50:3f:ed:f3:52:5c:
                    78:d7:7a:2c:b6:0a:57:5b:35:5c:0f:7b:06:43:17:
                    20:ea:31:2d:3f:3b:2b:7f:5c:32:34:58:84:95:67:
                    b2:c5:c8:96:f5:8b:1c:f7:66:29:b4:b9:7d:58:13:
                    f7:c8:db:4f:c2:67:58:5f:76:92:c4:82:9d:c8:56:
                    10:36:44:04:91:bb:85:31:68:0a:2d:c1:32:27:66:
                    2e:e4:56:f8:fe:d3:98:54:09:e8:73:b6:17:d7:d0:
                    e9:e7:4c:bb:d1:50:b6:9f:80:87:c1:52:3a:fe:d6:
                    47:17:b3:a3:2a:44:b0:b8:90:22:d8:23:3f:60:93:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:EE:76:25:8B:E3:A3:72:07:E8:79:F0:33:3E:43:C4:3D:DE:5D
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/RonudiWL46NyB-h58DM-Q8Q93l0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:6f:6d:62:88:bd:a7:e1:c2:15:6e:83:ac:d7:89:ab:a6:
         61:2c:d0:f9:9d:a1:84:59:f7:25:94:a1:99:32:03:84:fe:6a:
         39:ab:dd:29:0d:6a:87:8d:ef:7d:33:23:1a:21:33:b1:d4:6d:
         cf:a5:39:5a:ee:80:b9:ee:94:ea:62:b1:80:e3:6b:5e:3f:bd:
         b7:e4:1a:b1:ec:0e:1c:ea:ae:21:be:bf:a3:06:91:1e:ae:e9:
         ee:61:e4:79:66:c3:0d:2b:c8:27:6b:f9:d4:dd:3e:4b:92:b4:
         35:7c:b8:ff:24:22:b2:b0:6e:fa:b0:29:78:c4:32:99:43:e0:
         63:8e:a8:d0:4d:6e:7c:df:eb:57:8e:c3:f6:c2:5b:2f:76:97:
         a7:81:52:a8:4d:ca:85:60:60:9a:18:46:bf:15:05:84:c2:95:
         ac:e5:1c:3d:fe:8f:1a:c3:40:f2:b2:c1:71:d6:95:a5:f0:8c:
         14:75:9c:3b:b9:2c:c0:3c:78:73:75:ed:30:bf:fb:c8:e2:c5:
         49:a4:a1:e8:12:e0:c2:3f:f2:09:a7:50:84:de:2f:c7:05:bc:
         c0:d3:d0:5d:6e:9b:24:79:4f:20:08:76:28:d0:22:6a:6a:c9:
         fa:f9:ca:30:6b:82:cc:53:70:38:aa:ca:f3:3a:95:e4:ae:41:
         2a:ab:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:43 2026 by rpki-client