Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/wZ9JxiezoawGgFvjDagq7lTqfYE.roa
File:                     wZ9JxiezoawGgFvjDagq7lTqfYE.roa (raw, json)
Hash identifier:          7IPETFrjmPBk01/dOtZs9fde32gx1nKX+BR5y9HhBc8=
Subject key identifier:   C1:9F:49:C6:27:B3:A1:AC:06:80:5B:E3:0D:A8:2A:EE:54:EA:7D:81
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       69
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/wZ9JxiezoawGgFvjDagq7lTqfYE.roa
Signing time:             Tue 31 Mar 2026 08:42:49 +0000
ROA not before:           Tue 31 Mar 2026 08:42:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:a600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C19F49C627B3A1AC06805BE30DA82AEE54EA7D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:f5:4e:fc:fc:42:ad:2c:b2:53:b9:e0:55:
                    93:9f:90:9b:82:95:a7:ab:3f:e2:3d:94:d7:7d:34:
                    c9:72:7d:af:7e:0a:8a:c1:3f:e9:60:9f:26:a4:01:
                    a6:36:8e:07:31:ad:77:a4:10:40:30:b4:ae:25:b9:
                    9b:27:35:52:de:9e:5a:0d:c5:43:79:b8:3e:49:af:
                    e5:34:60:fc:d1:08:81:eb:a9:35:21:39:d0:7f:99:
                    4a:8f:05:1d:03:09:a2:96:6f:93:8b:4a:d6:ba:ed:
                    27:84:dd:e9:71:b8:17:62:bb:ed:eb:61:1d:53:25:
                    11:9a:ce:c3:a8:80:9e:2d:5a:d7:25:75:44:66:f4:
                    71:51:91:75:9b:bd:5a:12:11:78:8a:36:68:e9:b5:
                    b4:a6:6a:64:84:cf:b9:b6:ad:4a:c5:90:a8:e5:d5:
                    63:ba:15:81:73:3a:7d:7f:5a:20:2d:f2:8b:bd:bf:
                    9a:01:6e:4c:d7:5a:b6:b4:b4:3d:a4:50:05:be:36:
                    4d:20:0c:e7:ff:b1:a4:42:a4:d1:92:7e:c0:4e:28:
                    19:ce:69:bb:e5:e0:46:0e:a3:65:50:a5:1d:d4:0d:
                    82:16:75:b2:1c:ef:13:c5:25:87:73:08:52:b8:3a:
                    fa:7b:8a:5a:82:01:5e:2e:72:e3:65:ba:e9:74:02:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9F:49:C6:27:B3:A1:AC:06:80:5B:E3:0D:A8:2A:EE:54:EA:7D:81
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/wZ9JxiezoawGgFvjDagq7lTqfYE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:1b:74:e3:79:a1:83:ba:5f:95:b8:db:93:e9:fc:1b:2a:
         23:f0:17:4d:09:dc:94:93:08:fe:45:f6:1f:87:45:ba:19:5e:
         6f:8a:7e:09:f2:d9:c2:97:e4:f6:d9:e9:44:48:21:bd:a0:18:
         ac:ac:11:3f:da:1a:e0:46:45:fa:0a:d2:12:0f:e7:ac:25:1a:
         34:a4:51:20:b9:f4:b7:ab:c5:e4:67:3e:43:df:57:35:57:c8:
         43:ba:6e:ab:7f:f3:e9:80:68:d4:c4:96:9e:3b:4d:b1:a3:f6:
         11:1f:60:32:3f:39:1b:05:e3:45:8e:b2:df:b7:2c:4d:ef:93:
         5a:fd:71:50:a9:29:69:a9:49:41:b7:12:4f:e3:45:90:dc:c7:
         04:72:c3:9d:37:79:43:60:36:52:c9:5c:c2:22:ec:80:aa:97:
         bd:5e:95:e2:25:d5:b1:a5:37:dc:55:aa:b4:01:b0:48:df:3c:
         67:89:49:69:30:5e:f5:3b:31:81:de:79:ad:9a:2c:f7:e9:bc:
         3b:b2:d5:c8:32:fa:98:30:ec:40:74:66:2c:2a:e5:ec:cc:58:
         0a:8d:39:97:83:a3:af:77:b0:f5:dd:bc:2c:55:3b:c3:f4:d8:
         d8:96:08:36:d8:a1:43:2e:71:02:44:38:a7:9c:4d:8e:12:3f:
         2e:92:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:52 2026 by rpki-client