Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/v3WbXV9i-Q3JgngeDL3iFzG7mn8.roa
File:                     v3WbXV9i-Q3JgngeDL3iFzG7mn8.roa (raw, json)
Hash identifier:          1hq2Hm6dFpMH7NKh1Kr0c7ctHkJVEH090rkl+p8JVcA=
Subject key identifier:   BF:75:9B:5D:5F:62:F9:0D:C9:82:78:1E:0C:BD:E2:17:31:BB:9A:7F
Certificate issuer:       /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Certificate serial:       47
Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/v3WbXV9i-Q3JgngeDL3iFzG7mn8.roa
Signing time:             Tue 31 Mar 2026 08:14:17 +0000
ROA not before:           Tue 31 Mar 2026 08:14:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24277
IP address blocks:        2407:58c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Validity
            Not Before: Mar 31 08:14:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF759B5D5F62F90DC982781E0CBDE21731BB9A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:44:6b:0e:6f:bb:9d:b0:39:7e:b4:f8:31:
                    e6:de:d2:9c:20:37:8d:13:66:a9:37:9a:81:36:48:
                    ea:19:54:99:ab:e1:1e:0d:7f:85:b5:43:40:36:6b:
                    80:70:0f:fd:c4:40:d4:ff:60:46:3b:99:b5:14:57:
                    4b:0a:95:0b:36:a7:4c:ab:67:6a:58:ab:79:86:6c:
                    15:3d:fd:e8:4d:57:88:70:cd:9e:71:c3:93:5b:1e:
                    6b:e9:68:ee:60:4b:78:66:c0:0c:e1:78:7b:65:d8:
                    db:c2:8e:c7:ee:48:28:00:56:d3:f4:8b:4f:38:9f:
                    54:84:34:60:d8:1f:05:b8:42:ca:84:8e:df:56:79:
                    5a:74:00:88:04:4f:5b:26:ef:b8:72:66:fb:dc:8e:
                    81:de:b3:b9:dc:17:4b:f0:bd:ba:77:f3:09:10:6d:
                    c5:ce:d6:ab:67:13:af:b2:2e:8d:d3:af:4e:58:ce:
                    09:45:66:a8:d3:c8:55:57:d4:b9:43:e9:93:20:f4:
                    af:17:5c:ef:15:d3:11:b8:8c:80:64:6e:c0:b6:62:
                    67:9f:c8:d5:e2:32:d6:28:7a:d1:fd:02:6b:f4:c8:
                    e2:de:a2:ea:95:1a:c4:e2:69:72:41:d5:73:a1:eb:
                    12:e8:a8:3e:4b:11:4e:4b:8a:95:10:c8:2f:4e:e3:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:9B:5D:5F:62:F9:0D:C9:82:78:1E:0C:BD:E2:17:31:BB:9A:7F
            X509v3 Authority Key Identifier:
                keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/v3WbXV9i-Q3JgngeDL3iFzG7mn8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:e4:11:42:76:a2:56:eb:c8:3d:da:56:ff:c2:73:e2:51:
         39:c8:00:61:70:2b:fb:1d:80:af:bd:2f:fe:15:4e:52:44:c5:
         02:be:82:ae:6e:4f:f1:81:1f:99:0f:04:0a:ad:1d:06:86:ef:
         3d:8b:93:f9:99:b1:10:22:fe:1b:06:ad:d4:42:ec:e7:d8:bf:
         ee:fa:2a:86:c6:6d:2d:24:ee:be:2f:78:59:d4:9d:4c:f3:f3:
         0f:68:1f:80:94:3e:f6:4c:e9:5a:8c:f3:24:c0:c5:ce:97:f0:
         91:71:06:fa:ec:5b:b5:d8:1c:dc:6d:cc:71:e0:f2:ef:13:bf:
         73:74:d5:1c:45:00:58:5e:63:72:51:31:d6:3c:0a:b8:89:ea:
         36:b5:4b:da:5b:b6:b0:2e:73:ac:e1:e4:70:0e:f4:e5:25:8e:
         1b:c1:21:e7:2c:d7:59:3b:36:3e:67:7f:14:67:2e:6b:5d:e8:
         c5:83:26:de:44:ec:97:3c:bc:6e:75:9b:3e:c6:b9:54:6a:bf:
         44:46:16:f6:69:f6:4b:71:69:29:93:d0:7d:03:b9:19:68:d5:
         15:83:ea:34:63:f7:68:a7:4c:f3:8c:fd:94:8e:da:28:80:af:
         14:36:92:70:17:ef:a0:cc:8a:29:4f:0c:c2:7c:1a:d9:3b:ce:
         c9:c9:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:29 2026 by rpki-client