Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa
File:                     2Ni7_EzHFl0dwq60DFbr26decbU.roa (raw, json)
Hash identifier:          z8HFSBFdtM+6qgHSl94BepF/6Dt6kwASZzkWmjFttJ0=
Subject key identifier:   D8:D8:BB:FC:4C:C7:16:5D:1D:C2:AE:B4:0C:56:EB:DB:A7:5E:71:B5
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       79
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa
Signing time:             Tue 31 Mar 2026 08:42:57 +0000
ROA not before:           Tue 31 Mar 2026 08:42:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131969
IP address blocks:        2405:25c0:a200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D8D8BBFC4CC7165D1DC2AEB40C56EBDBA75E71B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:87:3c:2b:cf:05:ae:e7:3f:1f:93:38:6b:
                    72:36:f6:d2:c2:96:44:08:80:d9:88:17:54:fe:be:
                    6a:34:98:1f:6c:9a:d4:80:da:e1:1f:dc:3c:53:0a:
                    64:b3:cb:9e:c3:0c:76:c8:ab:cf:2d:0f:89:9e:25:
                    98:81:ef:34:0b:b7:9b:a5:d0:c6:3e:09:3a:1e:d1:
                    93:ff:2c:cd:52:81:f5:b9:36:a9:47:72:4c:82:17:
                    0f:25:5d:3e:ad:bf:63:3b:69:0e:81:09:d0:72:44:
                    05:08:9a:57:90:ce:3b:f2:85:99:04:22:96:c0:b9:
                    03:a3:9c:ef:87:0a:41:a7:ab:f6:46:07:81:72:b7:
                    bf:c2:29:f8:97:d6:80:7d:07:6b:61:f2:4d:d8:aa:
                    ac:91:42:9c:1c:fa:44:ae:77:cd:ab:4a:43:1f:02:
                    75:63:b4:d7:49:5c:48:ab:ce:69:e5:2c:45:d1:9f:
                    46:4f:51:01:1d:20:a1:8d:9a:fe:af:73:df:64:fe:
                    2b:a9:b1:9b:d3:3c:17:4a:4b:cf:81:8a:aa:6e:71:
                    7b:84:d8:38:cf:85:1e:1b:42:60:fa:50:46:c3:a6:
                    44:8f:f6:61:04:ed:eb:20:9b:d6:7d:15:8f:ac:2e:
                    62:0c:4b:e1:dc:bf:c2:e4:23:c4:42:2f:e1:5b:41:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:BB:FC:4C:C7:16:5D:1D:C2:AE:B4:0C:56:EB:DB:A7:5E:71:B5
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:d7:4f:e6:8b:c2:e8:b5:36:72:6a:5b:32:c3:47:e5:de:da:
         4a:b5:87:30:30:e4:48:0d:19:be:31:90:8e:af:4a:ed:a5:36:
         e0:28:0f:cf:c5:bb:ea:bb:c1:3c:6c:5a:a7:af:f0:75:42:da:
         fa:53:c4:f7:a1:79:9e:72:d6:56:28:04:9f:a5:40:6a:5d:1e:
         b3:ff:0c:35:f1:f5:d7:fb:00:7e:28:fc:03:af:52:58:f8:3f:
         c0:e3:15:5e:b4:87:e8:d3:3a:9b:f5:3b:6a:19:2c:75:3c:e2:
         e4:ca:22:48:e5:6d:5c:ca:7f:42:a0:57:be:84:aa:1a:b5:82:
         8c:09:20:61:e3:6a:df:89:16:b3:56:11:2c:01:18:e8:d2:27:
         96:75:df:21:c2:31:e3:1f:50:5d:59:56:48:98:8d:72:11:6d:
         60:8e:ed:c0:3c:f4:ed:eb:a0:3e:f1:55:d1:43:f3:13:53:bc:
         5c:d3:8d:d3:8f:ac:9c:be:7b:c5:c1:dd:0c:54:fc:41:d8:ad:
         29:85:36:b0:1d:82:d9:52:92:44:c3:63:da:39:17:98:d7:a1:
         3e:6c:18:d1:02:8d:c7:2d:9e:92:1f:90:9f:2c:21:65:20:d6:
         43:92:74:38:f7:80:9f:b6:f2:2f:8f:76:55:2e:93:b0:ff:bb:
         5c:81:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client