Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Et9X6TvXjMIvggxWHAlyfVKnNhQ.roa
File:                     Et9X6TvXjMIvggxWHAlyfVKnNhQ.roa (raw, json)
Hash identifier:          V8638CcOAU2uxutN6OhpFyctMVy641rmyoyXrl4Q4Ck=
Subject key identifier:   12:DF:57:E9:3B:D7:8C:C2:2F:82:0C:56:1C:09:72:7D:52:A7:36:14
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       6B
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Et9X6TvXjMIvggxWHAlyfVKnNhQ.roa
Signing time:             Tue 31 Mar 2026 08:42:51 +0000
ROA not before:           Tue 31 Mar 2026 08:42:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=12DF57E93BD78CC22F820C561C09727D52A73614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:82:17:ec:f6:b8:26:f8:cf:b8:f6:16:7a:
                    61:05:26:2e:ed:e7:69:82:c4:c7:9e:f9:60:3b:87:
                    e6:44:97:af:92:6e:49:de:d1:99:eb:6c:c7:47:4b:
                    06:ac:eb:bb:39:1a:46:64:ae:a5:98:85:26:04:dd:
                    72:6d:d1:1c:48:90:c5:d8:30:73:41:9e:9a:49:29:
                    06:f4:19:60:8d:73:32:51:b8:39:e3:e6:cd:b9:09:
                    6f:85:64:f5:6a:1a:6d:3f:63:78:57:af:f2:ec:3d:
                    3e:51:25:a7:e1:4a:76:41:50:b5:84:89:d8:7c:69:
                    64:0c:26:58:47:63:a3:38:02:34:7b:f5:68:2f:49:
                    00:1c:bf:77:a3:e7:12:46:0c:f0:ee:f5:6f:67:54:
                    4f:c4:50:c5:31:dd:96:0f:a8:32:09:01:d7:96:1d:
                    d8:fb:98:84:74:9d:89:8e:d1:33:d3:6e:2e:fa:02:
                    0a:ba:09:cf:30:cc:b8:45:70:83:5d:02:42:3c:74:
                    b1:6d:78:b7:96:d4:c6:57:13:f9:3d:f5:46:1d:32:
                    b9:53:2a:a7:b0:08:f0:4f:93:89:78:c3:ae:9d:5a:
                    03:ae:73:42:a8:99:c1:3f:84:19:df:e9:b7:33:da:
                    eb:bf:cb:e9:01:b2:b0:53:89:cc:b8:65:70:62:6f:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DF:57:E9:3B:D7:8C:C2:2F:82:0C:56:1C:09:72:7D:52:A7:36:14
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Et9X6TvXjMIvggxWHAlyfVKnNhQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:f6:8b:e8:73:99:57:ea:03:a4:d9:33:a9:4c:b7:32:31:
         81:b4:17:6e:2b:99:ed:35:77:b2:79:76:01:f9:5c:a9:4d:e2:
         5a:6e:87:cf:97:f2:30:18:30:22:d1:43:e9:ec:a3:47:10:b9:
         89:f3:6a:e5:cf:a8:c3:60:1c:8a:60:31:10:96:a8:30:41:7f:
         a2:7a:c5:59:f6:a3:2d:6a:97:8d:b1:6f:d7:7d:82:f6:09:98:
         28:28:58:eb:9a:70:1e:77:6b:fe:2c:3f:fd:3d:50:2d:1f:70:
         58:45:96:be:5f:9a:1e:98:1f:a6:83:75:4f:4f:d6:ae:47:ac:
         b5:19:ed:46:d0:15:5b:43:c3:81:75:cf:b1:99:22:2f:19:d5:
         44:ea:ec:a4:32:d9:89:45:d4:29:69:c2:4c:e2:f0:46:6d:20:
         dc:46:30:47:af:30:74:4a:95:5f:3e:72:ea:c2:14:72:3d:33:
         77:59:3e:c4:0c:de:62:b9:f3:32:09:30:39:31:51:71:c5:87:
         e7:fc:c7:86:59:fa:af:cf:d7:c5:02:af:bd:29:f0:75:ac:82:
         f2:f1:a4:49:9e:93:3d:0a:d2:9c:8c:5f:59:ad:e9:4f:be:f4:
         3f:7c:fa:01:13:cb:17:cc:bd:15:b3:a8:26:9f:48:1c:f3:b4:
         81:94:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:52 2026 by rpki-client