Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WWvJWHD7qoJi1ruh4DTpEWYEckQ.roa
File:                     WWvJWHD7qoJi1ruh4DTpEWYEckQ.roa (raw, json)
Hash identifier:          5vgDsNtAYaFsB42KHQoCSv4d+ljv7d+9CHQby6/yC38=
Subject key identifier:   59:6B:C9:58:70:FB:AA:82:62:D6:BB:A1:E0:34:E9:11:66:04:72:44
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       5F
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WWvJWHD7qoJi1ruh4DTpEWYEckQ.roa
Signing time:             Tue 31 Mar 2026 08:42:44 +0000
ROA not before:           Tue 31 Mar 2026 08:42:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=596BC95870FBAA8262D6BBA1E034E91166047244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:2a:a9:56:5e:b6:f7:07:ab:a6:bd:6a:35:
                    2c:46:ca:05:10:de:26:29:69:50:bd:6b:16:90:a7:
                    b9:e6:97:39:6a:e2:54:c4:56:3d:80:38:ff:dd:e9:
                    d7:63:0c:10:ac:86:fd:5f:19:40:f0:05:84:02:b8:
                    13:3b:f2:27:95:b3:31:e7:97:8b:76:17:8b:e7:9c:
                    fe:58:be:cc:4d:15:2a:dc:ac:b8:00:23:9c:41:7d:
                    50:c4:89:5d:ef:17:97:4e:63:90:fd:d4:cc:d8:4b:
                    47:1d:fc:3e:57:d8:9c:7d:44:a8:bc:06:8a:e4:fb:
                    df:30:ab:6b:64:3b:d4:f0:be:d2:d6:d8:2c:04:ea:
                    43:28:3e:23:98:bd:9b:f1:cf:54:d9:07:ce:f0:57:
                    05:04:8c:44:17:bf:6b:91:71:68:36:03:f0:ee:e6:
                    30:d5:17:4d:71:d2:65:32:9a:84:ba:a3:e6:a0:b9:
                    d8:ee:27:b2:33:1c:cb:9d:37:f4:8e:2f:44:8e:9e:
                    9a:ef:ef:27:b0:c9:87:e8:4d:50:14:48:05:64:0c:
                    5e:86:e7:19:2e:7e:f0:5a:f7:ef:61:b2:0d:76:98:
                    58:1e:b1:a2:17:9d:02:69:61:45:a5:b2:93:57:cb:
                    bd:19:0b:32:bb:c4:1b:59:3f:bc:7b:c0:e0:e2:08:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6B:C9:58:70:FB:AA:82:62:D6:BB:A1:E0:34:E9:11:66:04:72:44
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WWvJWHD7qoJi1ruh4DTpEWYEckQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:36:de:e0:99:72:99:a3:ea:b9:b8:0d:81:1e:76:d4:e0:
         21:69:cc:ad:0f:53:f0:86:ae:b9:b4:7b:94:38:20:29:22:13:
         2f:68:28:1f:a2:a6:01:24:91:d2:c5:8f:18:c6:51:ce:d8:17:
         d1:42:ee:5a:6e:82:52:e9:3c:37:11:d1:dd:32:56:ab:2f:3f:
         d6:c5:e5:79:a0:7f:e9:0e:42:91:db:64:c6:a9:fd:c9:c2:cb:
         c8:49:ed:81:ed:8b:2e:ae:58:30:02:ba:ff:d7:cd:9a:26:ba:
         4f:18:23:a2:e5:17:43:ec:e7:75:27:3d:64:9d:1b:3b:49:57:
         07:30:b3:8e:dc:a5:90:e9:59:2f:c3:9f:d2:e0:ef:87:f5:de:
         16:2b:9d:5c:ad:79:3d:5f:9b:07:47:ff:f7:12:91:92:64:01:
         68:0b:83:17:60:12:b5:9a:87:8f:11:46:f0:5f:50:3d:69:f5:
         28:f9:6a:80:dc:bf:23:ed:88:fc:8c:28:63:7a:4f:95:77:21:
         ac:05:99:b3:2b:52:ff:3d:33:f1:07:48:21:76:70:59:08:57:
         43:aa:0b:69:8a:04:6b:a5:58:b3:16:0f:06:0f:0e:ba:94:6f:
         dd:c5:44:88:fd:25:69:91:50:73:72:0b:94:f9:06:62:f3:3e:
         4e:9b:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:07 2026 by rpki-client