Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tre2OBKiYocilkH6PiYXK0Y2YR8.roa
File:                     tre2OBKiYocilkH6PiYXK0Y2YR8.roa (raw, json)
Hash identifier:          rbYJWk3Tvkx7bQemr/X/fGw2DftYmmUNfeWYEPvawhE=
Subject key identifier:   B6:B7:B6:38:12:A2:62:87:22:96:41:FA:3E:26:17:2B:46:36:61:1F
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       77
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tre2OBKiYocilkH6PiYXK0Y2YR8.roa
Signing time:             Tue 31 Mar 2026 08:42:56 +0000
ROA not before:           Tue 31 Mar 2026 08:42:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6B7B63812A26287229641FA3E26172B4636611F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:37:73:e3:0f:8b:aa:8b:74:5b:e4:4d:de:91:
                    3c:09:e7:12:35:1d:06:4a:e7:8c:64:ad:c0:8e:13:
                    a2:04:bf:3f:c1:30:a3:df:1b:a2:0c:ea:c6:8c:2c:
                    11:7d:04:e6:3f:46:b5:07:bb:13:a7:63:8c:62:5c:
                    3e:f9:72:33:c3:ef:20:f5:43:53:89:3b:3b:f4:e8:
                    dd:38:24:dd:de:70:9f:ec:c6:be:74:71:5f:63:99:
                    e5:a1:e5:b9:f9:2c:10:33:5f:4d:f4:36:0b:a2:55:
                    42:bb:52:91:33:a9:fc:ba:e2:e3:32:36:16:bb:7d:
                    b1:f6:25:48:05:f3:1e:a4:3d:aa:b4:f5:9a:dd:d9:
                    69:69:f0:d3:6d:0f:c8:20:b2:a7:6f:92:b2:d1:15:
                    84:ff:2b:56:a9:51:71:71:2d:9c:72:1c:f1:83:1a:
                    0f:2b:3f:a8:78:36:32:b4:da:8a:f5:91:68:00:02:
                    b3:9d:2b:fa:7e:81:3f:bc:71:40:dc:1a:d3:70:2b:
                    b9:d4:ea:60:a6:32:55:91:a3:95:4f:4f:84:e8:2e:
                    cb:e6:e6:fa:bc:89:ef:19:3a:c4:c5:03:9b:d8:77:
                    68:95:57:2a:43:f9:3c:2d:0e:e5:76:e5:6a:58:d0:
                    5e:2c:65:35:bf:fb:46:1d:47:49:b2:ef:63:4b:53:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:B6:38:12:A2:62:87:22:96:41:FA:3E:26:17:2B:46:36:61:1F
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tre2OBKiYocilkH6PiYXK0Y2YR8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:3b:0f:72:3c:cb:7b:47:c9:f1:e7:bd:07:10:56:54:0e:
         c0:d7:17:39:e3:46:ba:8f:24:08:bc:10:ab:ad:54:93:cc:63:
         6b:68:ed:e7:70:b5:cd:03:4f:58:3d:ed:3b:76:9b:1c:1b:e4:
         d5:02:84:a0:45:04:3b:37:a4:08:34:cb:ae:61:7e:5e:d9:c6:
         f8:de:00:fb:61:6a:5d:71:fb:f7:23:d7:b7:99:f0:79:89:4e:
         40:9d:09:41:21:a9:09:e5:24:8c:de:f8:36:d8:d6:0d:02:77:
         a3:1a:35:82:aa:55:5d:79:f7:19:62:fe:15:45:71:3d:46:72:
         66:da:a3:0e:7f:50:d8:41:29:e3:11:72:e0:22:ab:9b:24:55:
         78:4f:a2:58:c9:9f:3d:9f:1d:dd:c2:86:c1:60:e7:b9:76:18:
         63:bc:74:23:5d:30:75:0c:5f:31:f3:74:32:3f:d4:9c:75:10:
         fa:3e:36:b4:63:43:ed:c1:37:51:68:b9:e2:a1:78:4a:f5:80:
         2f:af:a0:00:d9:4b:e6:e5:0e:4c:56:32:c0:a3:e1:39:0d:c9:
         59:92:4a:39:27:af:c1:3f:c7:77:94:d0:fe:8f:af:1f:40:06:
         fc:06:e4:ff:94:77:e9:0b:34:ee:39:47:ac:52:cf:bb:20:3f:
         3e:e7:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:16 2026 by rpki-client