Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/V9eqxb-x57UDoW29lmOyTBhw3So.roa
File:                     V9eqxb-x57UDoW29lmOyTBhw3So.roa (raw, json)
Hash identifier:          /6AMnwpcJhQbeHPHFH1UfLuwKEl8VCVMLW4BF28/jsg=
Subject key identifier:   57:D7:AA:C5:BF:B1:E7:B5:03:A1:6D:BD:96:63:B2:4C:18:70:DD:2A
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       7C
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/V9eqxb-x57UDoW29lmOyTBhw3So.roa
Signing time:             Tue 31 Mar 2026 08:42:58 +0000
ROA not before:           Tue 31 Mar 2026 08:42:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18068
IP address blocks:        2405:25c0:a300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57D7AAC5BFB1E7B503A16DBD9663B24C1870DD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:0b:d0:f7:4e:e1:4d:24:0c:4e:ae:5e:ae:
                    e7:6c:ae:db:f6:b2:25:c5:57:62:c4:1a:ae:24:ab:
                    af:71:78:14:ac:08:5f:bf:38:98:5c:c3:a0:65:7f:
                    ca:68:08:6c:4b:39:b0:70:6e:bd:6c:95:67:c7:f7:
                    60:2c:62:f9:57:66:98:bd:7c:2c:de:78:e2:16:3d:
                    02:de:15:ce:ee:7a:c8:fd:6f:0c:68:b4:61:45:b2:
                    f0:63:05:cd:c5:c9:c5:dc:3a:c8:81:81:2f:a8:ab:
                    e1:bc:7a:67:d0:f5:05:87:12:76:92:37:e0:8c:61:
                    47:84:ed:07:7f:14:08:33:7a:a3:cc:6a:ad:b8:cc:
                    cc:f7:97:f6:8f:63:4d:58:eb:3a:b9:d2:65:b4:a3:
                    9f:05:07:d1:9a:d9:af:12:5b:0d:0a:14:d9:d6:90:
                    d2:9b:3a:99:2c:98:3c:d3:9d:22:cf:51:50:ea:40:
                    7e:35:48:b1:e2:04:8d:0b:99:b7:98:8c:a5:88:fa:
                    5d:e1:f5:1c:4a:e5:a6:b7:1a:0b:ca:95:60:d1:96:
                    54:b6:07:31:00:b4:db:c5:7d:f5:bf:7c:94:f7:c1:
                    9e:d8:95:7e:96:b3:9a:94:92:b5:32:a6:4b:3a:94:
                    e1:4a:12:12:05:7d:76:6e:5c:93:84:cc:b4:08:97:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:AA:C5:BF:B1:E7:B5:03:A1:6D:BD:96:63:B2:4C:18:70:DD:2A
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/V9eqxb-x57UDoW29lmOyTBhw3So.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:b0:d0:85:c2:4e:c4:dc:93:64:11:95:31:76:6f:b3:7b:
         43:48:63:0e:03:88:de:a3:80:88:47:4c:3c:19:8d:5c:91:ea:
         18:92:8e:62:f1:ac:c1:9c:02:fc:c6:ac:ac:b1:36:5d:10:da:
         03:f7:15:29:2e:6f:b7:ed:e3:ee:36:cc:92:9e:50:7c:ac:dd:
         8f:2f:59:cd:e5:60:ad:a3:6a:43:1d:84:49:19:77:b5:97:73:
         de:23:de:17:d4:42:9a:5c:be:a8:4d:00:eb:22:d9:3f:ca:3e:
         15:d2:b5:26:e0:dd:7c:bc:3e:fe:f5:d2:4a:b9:08:cd:a3:a1:
         f9:99:ef:3e:3b:2f:3e:44:c8:f4:ed:e5:26:8a:77:0b:4a:b3:
         c2:af:79:7d:fd:21:d4:e9:80:c6:fa:63:10:ec:52:3a:00:0a:
         ae:41:d1:d7:10:7d:8d:41:93:c8:44:ab:99:a4:15:43:5a:bd:
         2f:5b:4b:83:f4:c5:1a:f9:2b:20:9c:85:45:b7:60:7b:fc:cc:
         61:ae:ce:04:37:82:dd:94:5a:1b:67:07:9b:df:7e:f7:92:88:
         b8:5d:a9:82:07:0e:8b:bb:9c:c5:7d:6e:b3:6a:03:ae:ac:ad:
         f6:e1:36:5b:87:b9:a8:eb:82:5b:0b:6c:3a:c1:99:e4:fb:43:
         6d:f2:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:07 2026 by rpki-client