Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rbyetu4um1icoJMY8TQtSnYIaI0.roa
File:                     rbyetu4um1icoJMY8TQtSnYIaI0.roa (raw, json)
Hash identifier:          FSwFnuka4uHIcEbWGQ8XG+R6ZiTyQWYSNsxW+TVtraU=
Subject key identifier:   AD:BC:9E:B6:EE:2E:9B:58:9C:A0:93:18:F1:34:2D:4A:76:08:68:8D
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       74
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rbyetu4um1icoJMY8TQtSnYIaI0.roa
Signing time:             Tue 31 Mar 2026 08:42:55 +0000
ROA not before:           Tue 31 Mar 2026 08:42:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ADBC9EB6EE2E9B589CA09318F1342D4A7608688D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:b5:ac:04:d8:e2:e5:13:b8:99:e6:06:22:
                    c1:cf:8a:a6:a4:33:59:9a:f6:da:15:d1:d8:d3:9f:
                    2b:ec:e3:a4:88:b7:f2:1c:83:2d:f4:19:d6:ef:c4:
                    c7:df:73:0e:ba:13:00:2b:92:0a:80:df:5e:21:03:
                    4e:e9:93:b4:47:7c:94:e2:82:47:c2:d8:50:56:c2:
                    59:e4:44:dc:2f:9f:69:5d:1f:7d:6d:72:94:0d:b2:
                    ae:c1:e0:9c:93:c5:d2:d6:77:68:14:92:22:42:f6:
                    d7:8b:43:68:6d:44:91:ca:1e:f1:93:a1:bb:fb:11:
                    ed:4d:3d:df:11:d1:46:cf:d7:b0:d6:74:1c:af:99:
                    ac:9c:e5:74:2c:fc:84:b2:48:5a:a4:94:3a:41:31:
                    78:eb:ec:56:06:0c:d6:5c:18:78:18:33:b3:e3:99:
                    48:5b:47:79:14:69:14:51:94:a5:12:16:58:80:52:
                    26:77:69:4a:1c:cb:b2:c8:80:8c:9b:d7:4b:fb:b9:
                    b9:50:64:21:bd:d2:af:60:93:64:c8:8b:47:93:95:
                    4e:17:a9:45:17:64:29:ba:0e:c9:cb:3e:32:07:e8:
                    d2:c0:1c:9f:f7:16:98:8a:66:38:f1:36:87:26:9f:
                    d9:f1:4c:e2:f0:06:1a:ff:b6:cb:42:02:aa:9f:0b:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:9E:B6:EE:2E:9B:58:9C:A0:93:18:F1:34:2D:4A:76:08:68:8D
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rbyetu4um1icoJMY8TQtSnYIaI0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:76:02:27:7b:f2:ac:2f:71:30:91:c3:c4:60:27:ab:a1:
         c6:d3:58:b9:60:b0:7e:4f:13:af:1d:7e:db:2c:e0:c7:0b:20:
         d3:70:0c:ec:11:4a:c1:a7:12:e2:e4:06:fa:9f:c0:28:54:eb:
         51:c2:3c:db:3b:82:f9:bf:1a:50:0f:b9:7e:91:1b:54:8c:77:
         c1:18:91:c5:42:73:b2:b9:04:07:32:21:73:58:97:8d:05:0b:
         dc:1b:66:ed:38:83:b6:f6:31:ca:fb:fe:46:8d:98:c5:0a:37:
         92:1b:8b:8a:e4:00:83:e6:c8:8e:89:91:dd:da:f4:d3:39:13:
         42:b6:59:85:69:d2:a7:c2:95:20:9d:ff:b3:49:28:c0:46:3a:
         68:ae:94:0f:14:b7:b8:b3:6c:e9:76:af:a1:36:7c:64:4c:4b:
         08:f5:01:2f:b6:4a:40:3e:a6:36:d2:b9:0d:d6:0a:9c:77:7c:
         6b:b3:c5:4d:22:1c:01:54:a3:41:69:4c:26:89:94:24:d6:9c:
         42:ad:1c:77:e5:85:cc:8e:b7:a4:ae:82:b5:9e:0f:56:4b:f5:
         96:05:95:f7:59:06:da:4e:e3:25:9b:9e:7d:55:39:07:85:ba:
         b4:61:bf:da:65:f4:a3:46:55:b4:60:11:6a:3a:54:6d:3c:51:
         f8:07:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:47 2026 by rpki-client