Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30354/Ja4F8GMWJvS93SlUUO0TV6nbXgI.roa
File:                     Ja4F8GMWJvS93SlUUO0TV6nbXgI.roa (raw, json)
Hash identifier:          MBx6GxgTJA9Y+NznMJsfMsJ5bS7+zDM1EDVzsR2WGqs=
Subject key identifier:   25:AE:05:F0:63:16:26:F4:BD:DD:29:54:50:ED:13:57:A9:DB:5E:02
Certificate issuer:       /CN=54EB48E15ECA58FF8936B98C9B20D0D615AA7629
Certificate serial:       0E
Authority key identifier: 54:EB:48:E1:5E:CA:58:FF:89:36:B9:8C:9B:20:D0:D6:15:AA:76:29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VOtI4V7KWP-JNrmMmyDQ1hWqdik.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30354/Ja4F8GMWJvS93SlUUO0TV6nbXgI.roa
Signing time:             Tue 31 Mar 2026 08:46:12 +0000
ROA not before:           Tue 31 Mar 2026 08:46:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131958
IP address blocks:        2405:6cc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30354/VOtI4V7KWP-JNrmMmyDQ1hWqdik.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30354/VOtI4V7KWP-JNrmMmyDQ1hWqdik.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VOtI4V7KWP-JNrmMmyDQ1hWqdik.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54EB48E15ECA58FF8936B98C9B20D0D615AA7629
        Validity
            Not Before: Mar 31 08:46:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=25AE05F0631626F4BDDD295450ED1357A9DB5E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b8:cb:a3:03:59:34:f3:65:c0:52:9e:6e:64:
                    7b:af:25:3a:a2:ab:13:77:2f:5b:bc:3d:44:a9:ec:
                    62:bf:89:30:2d:f0:a6:3d:c4:b5:2a:12:19:7b:5d:
                    e2:32:a8:0a:4c:5d:18:ee:a7:ec:db:9b:cd:83:07:
                    2d:e5:13:7d:e0:7c:56:eb:19:a9:6c:c4:86:0c:53:
                    45:ad:92:ce:b7:8c:4d:10:ed:53:81:4c:a6:94:91:
                    6c:73:44:3d:3e:e2:22:0e:a6:d5:74:25:59:0d:fe:
                    51:62:8a:69:2e:37:fa:7e:1a:f0:bf:39:17:74:94:
                    c0:e5:04:56:40:d0:b9:ee:94:96:47:c5:3e:a5:b9:
                    0c:24:82:e7:3f:bf:34:a6:50:e9:1b:52:45:23:0d:
                    f8:75:0e:d2:81:e4:ef:64:42:f5:82:01:ec:06:de:
                    28:87:d8:4f:8d:9a:76:a8:18:4d:f5:05:88:3c:fc:
                    ea:1c:7a:7f:0b:22:d9:32:7d:cc:b7:fb:21:01:be:
                    36:98:f3:de:c3:16:06:68:81:2c:0f:43:53:03:40:
                    bc:03:f0:4b:8a:12:48:28:89:f7:84:ca:97:b5:73:
                    21:04:49:7e:85:4a:d2:ca:60:25:b7:b5:b9:50:6a:
                    6b:a8:24:02:a7:49:b3:34:9b:b5:85:ba:68:4a:b0:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:05:F0:63:16:26:F4:BD:DD:29:54:50:ED:13:57:A9:DB:5E:02
            X509v3 Authority Key Identifier:
                keyid:54:EB:48:E1:5E:CA:58:FF:89:36:B9:8C:9B:20:D0:D6:15:AA:76:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30354/VOtI4V7KWP-JNrmMmyDQ1hWqdik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VOtI4V7KWP-JNrmMmyDQ1hWqdik.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30354/Ja4F8GMWJvS93SlUUO0TV6nbXgI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:23:6c:7c:6c:c6:4e:a1:ef:e6:6d:82:a9:38:4a:8f:c9:33:
         6a:ed:a7:d2:17:a4:ef:fc:78:81:dd:5b:60:b7:e7:cc:59:3d:
         74:ed:e5:58:6a:89:70:50:bf:a6:45:6b:98:37:28:7e:16:33:
         d7:b8:13:7c:b8:40:d9:76:df:43:df:74:67:84:40:1e:8e:f5:
         dc:a1:ee:3f:60:63:49:ae:a3:62:6a:33:10:b7:40:9d:b8:82:
         54:93:9f:67:4c:b1:b2:51:67:22:30:e7:96:ea:a2:9a:14:61:
         7c:e2:c7:2f:b5:f9:4e:ef:9a:d3:02:77:fb:21:97:6f:4a:82:
         18:cb:f1:ad:1c:a4:d6:0d:9d:aa:94:3a:f1:87:13:ec:36:8f:
         57:c6:af:d0:50:2a:29:76:f8:b9:93:7e:21:17:a3:4d:86:fd:
         18:30:62:77:18:31:e2:7a:24:97:3f:47:be:31:10:b5:ac:e0:
         26:b9:7b:b0:e7:7b:01:aa:6c:a6:58:96:b7:28:ec:43:fd:40:
         29:c7:11:e9:aa:49:b4:96:ba:c6:69:4d:83:ea:e6:dd:91:2c:
         d0:c1:bc:30:c7:47:ba:35:38:0f:f1:1c:5b:4d:41:94:b0:2a:
         d1:cb:04:ed:be:f2:ee:e0:c7:49:d2:56:35:a9:e1:ff:c4:1c:
         80:1d:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:52 2026 by rpki-client