Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/n1gs7dOdgVpQUiIjG_zwjBKOEP0.roa
File:                     n1gs7dOdgVpQUiIjG_zwjBKOEP0.roa (raw, json)
Hash identifier:          vwzVqovblTm1gUX587eQmTXIqOujb5KT18n/q/SLh7c=
Subject key identifier:   9F:58:2C:ED:D3:9D:81:5A:50:52:22:23:1B:FC:F0:8C:12:8E:10:FD
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       5D
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/n1gs7dOdgVpQUiIjG_zwjBKOEP0.roa
Signing time:             Tue 31 Mar 2026 08:42:43 +0000
ROA not before:           Tue 31 Mar 2026 08:42:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9F582CEDD39D815A505222231BFCF08C128E10FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:6d:8e:b1:4d:65:ad:99:e4:d9:b1:47:ec:
                    de:df:aa:92:4e:4b:11:06:74:e7:3b:f7:40:aa:bb:
                    37:93:a9:be:d0:b2:9f:5f:42:2d:bd:a0:54:37:11:
                    78:05:a7:4d:c3:3e:a8:9a:81:0f:ce:e7:7c:79:1c:
                    c5:67:46:71:2f:32:c2:7b:ff:0a:bf:bb:91:5a:8d:
                    b0:b7:32:59:6d:cb:78:82:c0:d0:03:11:2a:0c:13:
                    e4:f9:aa:6b:f7:8f:f1:ed:eb:26:d0:de:28:15:bf:
                    d3:98:5a:47:ec:cc:15:9b:51:a5:b1:7e:f5:7d:39:
                    23:02:92:16:20:e5:3c:b7:fe:7d:f4:00:2a:c0:ef:
                    3a:90:2d:92:42:df:96:da:08:4d:53:81:27:3c:4a:
                    26:4c:f7:25:e4:d3:43:1b:c6:fc:28:3c:07:84:d2:
                    21:e1:7b:da:f6:86:8a:53:3e:95:c6:0f:7d:f6:43:
                    a8:a9:ce:dc:53:d2:de:ab:1d:11:cc:fe:7a:4d:93:
                    2c:41:bb:64:33:de:c1:f4:c5:dc:23:fb:a6:ce:00:
                    71:6d:17:fe:b2:ee:99:99:33:d1:4f:fd:9a:a8:02:
                    ab:0a:4e:13:78:57:73:52:fa:0e:92:62:b5:ab:23:
                    6e:f2:98:ed:e5:61:ad:19:78:21:94:d9:a2:00:af:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:58:2C:ED:D3:9D:81:5A:50:52:22:23:1B:FC:F0:8C:12:8E:10:FD
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/n1gs7dOdgVpQUiIjG_zwjBKOEP0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:e6:95:3e:ab:eb:39:84:91:3b:46:1a:38:7f:9f:5d:71:
         b4:10:73:96:94:50:da:b8:cd:bc:e7:a5:f7:ca:2b:1e:50:9a:
         b0:25:ec:78:d8:df:6c:25:84:50:a3:63:1e:f1:2e:02:9a:40:
         39:89:ae:96:a2:36:67:0a:e9:d9:ec:0f:81:c5:80:96:67:1e:
         58:3a:c0:da:2a:b7:b8:28:3c:a4:a2:c1:2c:aa:d0:27:b1:e8:
         43:c7:d2:d5:06:6d:9b:03:1d:a8:5b:ea:2c:be:bf:b5:84:8e:
         3d:c5:58:2b:82:95:e0:c0:a9:1a:94:1e:22:ca:90:a5:a8:3d:
         ec:4b:74:bc:19:bc:c8:9a:62:70:73:5b:0c:65:44:a7:31:c6:
         4e:94:d6:d6:9d:f2:2d:6e:52:5e:41:f2:2c:e9:b2:1f:6e:e1:
         9f:f8:43:0a:e8:c3:28:24:2c:92:c0:f8:43:c9:85:4b:e8:b0:
         34:2f:96:a4:89:1f:f8:3c:89:16:d6:14:f5:ce:d6:2c:e5:01:
         69:73:70:c3:9b:a7:54:9a:b3:ff:e6:dc:5b:5a:0b:d1:e8:c0:
         08:52:11:9f:34:07:9a:a5:aa:f3:46:03:9b:1e:cf:03:fd:ed:
         53:07:6c:26:cd:32:81:e1:ff:e7:ad:d3:21:de:77:86:fe:7a:
         52:5d:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:23 2026 by rpki-client