Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30366/ajAhG-jadYm6HHH9sYcjAjrTPiA.roa
File:                     ajAhG-jadYm6HHH9sYcjAjrTPiA.roa (raw, json)
Hash identifier:          XJDigVTYQ/RWfsuU9AOUdcXtHpVjv6drYmjLAtomRws=
Subject key identifier:   6A:30:21:1B:E8:DA:75:89:BA:1C:71:FD:B1:87:23:02:3A:D3:3E:20
Certificate issuer:       /CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5
Certificate serial:       22
Authority key identifier: 19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/ajAhG-jadYm6HHH9sYcjAjrTPiA.roa
Signing time:             Tue 31 Mar 2026 08:41:16 +0000
ROA not before:           Tue 31 Mar 2026 08:41:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24262
IP address blocks:        2406:9b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5
        Validity
            Not Before: Mar 31 08:41:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6A30211BE8DA7589BA1C71FDB18723023AD33E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:eb:fd:eb:5e:4a:e2:07:6c:8f:dd:d9:8e:
                    63:e2:3b:f7:5e:cd:33:9c:b5:e0:58:03:17:51:18:
                    bc:dd:51:08:63:36:92:15:a8:f0:f3:31:dc:fd:b4:
                    33:50:02:49:60:b8:f1:c6:6d:87:5d:37:8b:73:a8:
                    61:90:35:a3:e1:46:a1:39:f8:53:1e:d1:21:41:23:
                    53:8d:3e:f0:e7:17:d2:82:97:0b:08:cf:16:8d:7c:
                    fc:78:1d:1d:8e:31:27:66:60:da:5d:e8:01:de:40:
                    f6:e4:68:99:e0:fd:bc:58:b7:31:18:e1:14:1f:62:
                    08:f1:4c:b7:69:88:59:13:b7:72:ab:8c:a2:62:f7:
                    0d:fe:a9:a7:ef:09:65:87:3e:5f:d2:a8:20:21:83:
                    42:67:1b:c5:c5:47:44:20:3f:ad:2b:6e:01:28:0c:
                    4f:26:d9:e4:04:81:41:e3:e2:04:02:f6:2c:af:c0:
                    6d:ca:78:72:61:7c:00:79:53:27:33:69:cc:08:e6:
                    c4:8a:a3:55:90:e6:bc:f2:07:24:45:92:8f:80:f9:
                    d6:7c:0c:dd:e1:ba:54:6d:b6:b1:9f:61:56:79:00:
                    f1:35:39:ea:95:db:79:56:99:6d:58:84:11:f3:74:
                    55:89:05:ee:20:ba:46:35:50:72:93:44:65:74:35:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:30:21:1B:E8:DA:75:89:BA:1C:71:FD:B1:87:23:02:3A:D3:3E:20
            X509v3 Authority Key Identifier:
                keyid:19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/ajAhG-jadYm6HHH9sYcjAjrTPiA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:e5:fd:a4:3a:fb:89:1f:a0:34:92:9d:73:7e:81:c9:ae:f7:
         93:37:66:38:6f:87:60:ee:76:8c:52:ee:1d:bb:7d:68:1b:5f:
         98:f3:98:be:6e:c4:26:de:56:46:c0:e7:98:bb:b3:c2:6e:b0:
         ae:6f:c4:17:6d:7b:9d:5e:58:ca:f7:bc:6d:fa:24:70:c3:e9:
         69:64:37:dd:38:e1:37:ec:73:30:cd:5c:1e:d6:48:3f:1f:aa:
         0e:79:25:d5:24:9b:17:85:dc:6c:c6:3c:54:bc:11:69:64:6e:
         26:25:84:b5:23:08:1e:74:1d:36:b2:5b:1a:0a:f3:03:ab:e7:
         c3:17:14:fd:da:3e:bc:43:be:04:af:09:0b:03:a8:b8:ff:d5:
         c1:1e:31:67:94:91:7e:b7:45:41:1e:2e:12:f7:68:16:b7:fd:
         4a:b6:e4:63:ba:67:e6:89:36:94:8a:39:71:86:1f:9a:f5:09:
         5c:d0:08:7d:9d:0d:dd:87:e0:41:04:38:44:5e:dd:6b:da:89:
         3f:ae:51:07:de:dd:78:57:5d:d1:22:35:8a:7d:5e:4a:c1:9b:
         fb:a1:63:37:ec:d4:51:7b:c9:4f:48:79:41:68:53:2e:d2:d8:
         b3:81:27:8f:3e:fe:00:11:82:c1:18:c1:fb:8c:1a:82:a7:ca:
         f0:3d:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:10 2026 by rpki-client