Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qCLJzT9XFHvVq_Mj7kPpqRZqbEs.roa
File:                     qCLJzT9XFHvVq_Mj7kPpqRZqbEs.roa (raw, json)
Hash identifier:          7uIzR5XjDO0MaZfAYX/epMlMxp26fAr8bULTbSd4cQQ=
Subject key identifier:   A8:22:C9:CD:3F:57:14:7B:D5:AB:F3:23:EE:43:E9:A9:16:6A:6C:4B
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       73
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qCLJzT9XFHvVq_Mj7kPpqRZqbEs.roa
Signing time:             Tue 31 Mar 2026 08:42:54 +0000
ROA not before:           Tue 31 Mar 2026 08:42:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A822C9CD3F57147BD5ABF323EE43E9A9166A6C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:81:0f:ae:e7:dc:f9:e9:9a:8e:13:6c:aa:
                    ea:11:60:be:c9:98:3b:1b:97:f8:0e:73:49:85:e1:
                    96:ae:ea:20:1a:08:b2:98:5b:10:8f:22:dd:c2:c5:
                    08:42:cb:8d:45:34:81:8b:0d:24:19:00:7c:18:a6:
                    85:bb:52:5c:07:84:9b:67:83:00:e2:38:48:4d:bd:
                    e9:19:b0:ac:28:5a:32:af:16:5a:18:10:9d:e2:07:
                    a9:24:19:4e:4b:01:e2:17:9b:34:3f:b9:de:c6:0d:
                    84:18:10:ef:83:54:85:53:16:f8:33:05:c0:76:87:
                    70:0a:5f:f6:06:33:f6:c5:4e:85:5b:5b:85:f7:f9:
                    12:35:5e:76:dd:4b:c1:39:f7:0f:a9:9b:d7:31:62:
                    b6:2a:88:92:c7:ab:07:4b:42:c6:36:b7:8a:6f:7c:
                    06:21:44:4f:fc:c6:eb:b2:f3:0c:c8:10:40:86:0b:
                    ad:22:2b:87:28:ba:3c:f7:1d:38:ea:eb:c7:1c:5c:
                    cc:46:58:15:e4:51:58:15:f5:0f:82:3a:e2:eb:d0:
                    3b:df:f2:ae:d6:f5:49:24:2e:d8:b9:88:7c:fe:98:
                    8b:e7:cb:ac:db:9f:8d:e6:d9:83:e5:10:13:89:54:
                    20:bb:92:fe:7c:fe:a8:6c:40:c0:3f:65:e7:2c:ef:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:C9:CD:3F:57:14:7B:D5:AB:F3:23:EE:43:E9:A9:16:6A:6C:4B
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qCLJzT9XFHvVq_Mj7kPpqRZqbEs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:41:b3:4f:19:6d:e5:0c:88:01:63:92:23:c9:36:ac:53:
         5d:c5:d2:99:62:95:cd:5f:3f:68:bc:76:8b:3b:d6:54:fe:70:
         4c:df:79:62:17:5d:6d:58:e0:f4:6d:2d:f0:41:3b:4d:d5:9c:
         a8:93:65:8c:79:61:34:20:b9:ef:d1:50:23:a1:1c:a9:90:77:
         00:6f:29:6b:3e:63:28:2d:cc:da:c7:56:a5:54:f4:73:72:fc:
         2b:f8:74:1c:34:a6:01:44:06:93:0b:e7:df:c5:bf:09:a9:f8:
         66:a0:e5:29:8b:cd:4f:2e:13:0c:82:b5:49:b9:b4:31:7b:69:
         9f:43:04:e8:05:b8:bc:ae:ca:a2:78:2f:bb:36:6b:f7:69:c7:
         49:5b:55:ab:cd:ba:0c:af:d0:5a:97:fd:25:8d:9f:ac:8a:df:
         9c:d8:36:2d:c8:74:fe:f4:d0:df:3c:b1:f9:aa:40:40:03:5e:
         fd:d4:53:33:f4:cb:e7:b8:b3:1b:5a:8b:ed:f9:7a:a3:bd:c3:
         4d:d8:ad:96:70:69:7e:1f:19:6d:05:a4:be:55:63:b8:92:9d:
         70:7b:1b:56:1c:97:8f:b4:72:db:3b:da:e7:fe:44:2f:d9:09:
         8d:f0:95:c6:f4:c2:18:84:6b:58:de:c2:df:cd:4e:0e:f6:ff:
         69:a5:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:23 2026 by rpki-client