Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/VpV1xAPs5-tLSzNiThY3i-uB8Zc.roa
File:                     VpV1xAPs5-tLSzNiThY3i-uB8Zc.roa (raw, json)
Hash identifier:          dOE9zQG2EPWH+7qNtPgGWgdsAGWCLqKdEf6zma/Yvnw=
Subject key identifier:   56:95:75:C4:03:EC:E7:EB:4B:4B:33:62:4E:16:37:8B:EB:81:F1:97
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       5F
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/VpV1xAPs5-tLSzNiThY3i-uB8Zc.roa
Signing time:             Tue 31 Mar 2026 07:47:11 +0000
ROA not before:           Tue 31 Mar 2026 07:47:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63786
IP address blocks:        2403:a640:200::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: Mar 31 07:47:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=569575C403ECE7EB4B4B33624E16378BEB81F197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:c3:f3:91:c4:74:2f:87:16:15:49:df:b9:
                    a9:5a:ed:27:3b:80:d1:fe:63:cb:bd:61:bb:6d:79:
                    2c:07:48:5c:68:41:2d:a0:ae:d4:20:70:d6:2e:4a:
                    68:68:3b:26:d9:9e:6f:95:f6:a8:58:65:d3:98:1f:
                    5f:1f:ee:db:9b:51:9d:90:6e:2e:41:72:2b:c4:65:
                    66:21:89:d3:82:90:9d:35:7f:8b:1f:cd:c1:d5:bc:
                    7f:fa:18:4b:76:ad:b1:34:7d:01:ac:0f:cb:ed:2c:
                    b2:7f:aa:45:36:2a:5b:f3:b8:bb:09:9e:5c:7f:b5:
                    f1:24:f4:be:f0:e7:04:70:fd:e9:b6:f5:99:40:95:
                    29:e1:60:32:fd:0d:28:62:b3:54:22:29:e8:2e:fb:
                    2f:3a:68:84:09:5d:2f:be:55:a0:81:f0:73:ae:2b:
                    65:7d:35:c9:dd:17:2e:3f:e1:06:b4:5a:70:9a:71:
                    e3:20:ef:3e:69:99:0f:ea:e7:91:81:f9:d2:7f:81:
                    be:55:65:7b:ea:2c:77:fa:85:44:90:38:80:6e:64:
                    83:f4:b9:c9:96:f5:2e:f7:2a:0a:ce:ee:e3:00:66:
                    4a:87:8b:c5:86:d1:5c:06:45:fe:ba:83:01:99:39:
                    5a:f3:7b:b8:35:09:5c:c2:73:2f:c7:5d:ae:02:33:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:75:C4:03:EC:E7:EB:4B:4B:33:62:4E:16:37:8B:EB:81:F1:97
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/VpV1xAPs5-tLSzNiThY3i-uB8Zc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         c4:84:ce:ed:9e:5e:e8:06:9c:48:cc:af:30:d3:93:e7:6c:81:
         ff:4f:3e:57:22:99:77:fc:63:1e:0e:8d:bd:f0:cf:67:46:a3:
         ab:2a:a0:ed:20:35:4e:5b:1d:14:1f:72:c7:7e:5f:54:e1:b0:
         9c:0a:aa:1c:1c:af:1f:0e:7a:4d:c7:75:41:57:16:34:83:3e:
         32:f7:2b:75:72:e3:c9:95:66:05:f0:cc:b3:96:08:9e:40:32:
         50:c7:23:b8:11:b6:94:2b:ad:54:92:32:41:87:bb:b9:6b:8a:
         24:9d:35:aa:a9:84:28:ad:84:d3:66:e7:6f:2b:0c:9d:94:70:
         d6:28:d0:d8:08:8b:1e:0b:82:5c:d5:75:73:3b:05:27:0f:eb:
         b9:94:6c:97:72:b7:ec:ad:38:73:01:bd:53:be:d7:c9:24:aa:
         93:c8:88:90:75:03:13:33:0b:54:2c:a9:a1:b0:d0:c6:6b:13:
         9a:e2:d4:a3:50:b8:18:b1:2d:d5:20:87:6a:0f:88:c4:18:01:
         b7:40:4e:5d:fa:0b:d0:13:d8:4e:1a:84:41:24:16:3b:59:c3:
         64:85:24:1b:a7:fa:81:55:59:4b:4f:bf:a1:80:1f:dc:f4:c3:
         f6:f7:87:3f:8e:a0:1f:6a:10:f8:5a:b6:4a:68:16:e5:d2:72:
         1d:02:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:58 2026 by rpki-client