Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/JKyC7rn3mt2-sERk4-44Ft0UpVE.roa
File:                     JKyC7rn3mt2-sERk4-44Ft0UpVE.roa (raw, json)
Hash identifier:          gehqZ0hDP4fCTovffa8tuETz+nBAvl4A7p4cT2CapJg=
Subject key identifier:   24:AC:82:EE:B9:F7:9A:DD:BE:B0:44:64:E3:EE:38:16:DD:14:A5:51
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       38
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/JKyC7rn3mt2-sERk4-44Ft0UpVE.roa
Signing time:             Tue 31 Mar 2026 08:33:40 +0000
ROA not before:           Tue 31 Mar 2026 08:33:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63771
IP address blocks:        2401:7640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Mar 31 08:33:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=24AC82EEB9F79ADDBEB04464E3EE3816DD14A551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:34:99:30:d3:73:1c:a6:c0:95:93:58:0b:
                    a5:d9:d5:4e:a6:04:0b:d4:d4:eb:d7:37:65:c5:be:
                    c4:f8:7a:72:fc:fc:96:2c:16:5c:3c:4e:e3:63:3c:
                    f2:fb:9d:af:40:50:91:c5:41:1b:75:c8:be:c1:6c:
                    17:f9:04:29:31:1e:d3:f5:22:da:75:fa:3f:a8:87:
                    58:8e:15:eb:21:e4:fa:ed:8b:6b:3e:9b:5e:43:58:
                    f6:af:96:12:35:67:dd:a9:a6:96:4a:c9:aa:c4:1c:
                    0a:5d:b1:78:91:4c:67:5a:49:c3:f5:46:85:47:9b:
                    b8:48:82:94:02:2b:75:1b:0d:86:af:0d:51:d2:80:
                    15:7f:17:10:4b:8c:3c:e9:cf:ef:1b:99:68:16:c3:
                    e8:75:b6:ec:35:f3:b2:9e:8a:67:31:cc:ff:9b:44:
                    42:e5:ce:bb:d3:3e:bc:56:d5:00:18:e3:c0:4e:01:
                    9a:de:2a:c8:d8:30:4a:07:7b:ca:b5:b0:f5:0a:dd:
                    d4:84:5c:ea:50:4a:28:3c:61:c0:49:00:fa:80:ff:
                    b4:ba:78:c2:5c:00:e2:e9:2a:58:d3:02:b7:b7:05:
                    37:be:70:c8:c3:39:17:aa:b7:9f:e5:be:2c:4a:97:
                    b2:24:10:f0:c5:99:4c:36:1d:a5:95:5e:91:b9:38:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:82:EE:B9:F7:9A:DD:BE:B0:44:64:E3:EE:38:16:DD:14:A5:51
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/JKyC7rn3mt2-sERk4-44Ft0UpVE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:b6:8a:ee:54:0f:50:18:6c:5f:26:65:27:32:2b:64:2a:
         05:c1:63:ba:c2:2e:c7:81:77:23:8a:30:b1:ba:07:4e:7f:0c:
         8a:12:20:6a:d9:d6:2d:26:cc:ad:41:c8:85:7d:b7:31:70:be:
         64:f4:d6:42:85:bd:50:f5:52:8f:be:66:82:e0:8b:19:35:11:
         26:90:b5:7b:0a:88:1b:b3:26:4b:55:82:0d:6d:c1:a8:6e:a1:
         b0:4a:c6:20:83:51:d2:16:0d:9f:df:da:4e:eb:92:b5:0c:33:
         16:d3:ef:81:ea:e8:2c:ca:c1:3a:4e:10:b1:f1:ca:ef:e5:ac:
         5c:dd:7a:84:24:7f:37:12:26:6c:8e:89:d6:86:95:b4:bf:05:
         b8:d4:83:a7:ba:f3:6c:63:fa:ce:bd:2b:05:e6:72:46:a2:99:
         6b:8f:d9:dc:c0:18:5b:39:cf:96:60:2d:43:22:a6:f7:05:af:
         3a:14:72:3b:cd:18:16:ea:c0:9e:b8:0a:b6:b5:3c:58:11:fa:
         7b:19:4e:10:57:f3:c6:fb:34:e0:77:32:c2:cb:39:f1:b1:73:
         26:b3:54:ef:f9:7e:e8:54:43:9c:c3:83:2b:13:7d:51:5e:b0:
         30:cb:ff:d8:9e:5b:a3:e7:df:a9:43:c7:77:c3:fa:e0:ff:c0:
         ac:3e:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client