Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa
File:                     Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa (raw, json)
Hash identifier:          NeDecKwPiyoE9gbO7hxr02/ylvnjUUPJfG0AMjbgarc=
Subject key identifier:   36:2D:E6:2B:39:B4:23:86:E7:3C:54:95:F3:65:2F:56:CE:AD:6D:43
Certificate issuer:       /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial:       23
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa
Signing time:             Tue 31 Mar 2026 08:41:55 +0000
ROA not before:           Tue 31 Mar 2026 08:41:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63790
IP address blocks:        2407:a6c0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
        Validity
            Not Before: Mar 31 08:41:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=362DE62B39B42386E73C5495F3652F56CEAD6D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:9c:90:a6:16:d7:80:50:60:21:f0:ec:2a:
                    ee:96:0b:d7:80:90:15:9d:be:fb:60:d5:e4:fe:0b:
                    b7:9e:11:03:c7:6b:bf:5e:38:d6:0a:1f:c1:09:a5:
                    ba:b2:6a:19:1b:ef:0f:a6:30:c8:14:86:2d:7a:22:
                    b6:cd:a6:c8:03:b1:3f:19:0a:08:72:54:26:2e:07:
                    ec:2a:ea:8b:2c:3e:00:8a:c2:a3:fd:e7:90:5c:5b:
                    4a:0a:3e:2c:55:72:76:cd:4d:cc:29:f9:92:2d:71:
                    68:e1:17:81:8e:03:e0:a1:0b:bf:61:3b:2c:ad:ef:
                    09:86:71:e8:a4:34:60:d2:44:ba:23:ae:4f:fe:2d:
                    c6:b3:18:84:22:a9:58:f4:fe:38:4d:6e:de:94:db:
                    65:8b:20:46:62:e7:6d:f7:93:8e:e5:5c:ac:65:bd:
                    16:c6:37:23:57:6c:7e:68:be:e5:66:7f:01:86:4c:
                    b2:68:0e:ef:53:fc:bf:45:06:dc:e6:84:72:e2:06:
                    2e:fc:7a:a0:e6:d9:09:ea:5f:2f:dc:bf:94:4d:6e:
                    44:a5:c3:81:77:75:38:72:ac:bc:68:f8:85:2f:dc:
                    77:94:5a:26:67:e7:60:b5:7c:d5:d5:28:71:f7:56:
                    22:4a:c1:8b:52:ae:57:9f:bb:3c:30:cb:b0:64:80:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:E6:2B:39:B4:23:86:E7:3C:54:95:F3:65:2F:56:CE:AD:6D:43
            X509v3 Authority Key Identifier:
                keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Ni3mKzm0I4bnPFSV82UvVs6tbUM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:82:71:dd:76:d1:6f:36:be:33:f1:33:dd:87:dc:81:88:c2:
         be:9d:2f:bc:9e:17:8a:0a:ae:f8:ed:c0:7d:06:98:59:e4:1c:
         35:cc:8d:c3:f0:6a:98:e2:03:98:14:2b:29:61:46:cb:60:88:
         02:00:3e:fe:d5:ce:c1:c0:ff:27:ee:78:99:dd:9e:aa:c5:d6:
         b2:03:d6:b9:13:f3:15:ea:a1:0b:dc:b8:2f:0c:81:d3:b6:2d:
         28:63:9f:49:7a:23:f9:5d:23:93:8d:33:e0:a0:a1:55:0b:9e:
         b3:a9:0a:b0:fb:19:ee:25:1d:2e:66:3c:c7:4a:37:e4:bf:6f:
         fe:6c:03:b5:98:3b:f5:1d:5d:c8:31:28:bd:d8:2e:cc:95:8f:
         c3:50:88:0f:72:5c:9d:2c:8c:b1:9c:c0:bb:46:77:1c:db:96:
         07:70:e4:6d:bd:7a:b2:bb:5a:26:69:f9:92:c0:74:34:45:db:
         02:09:82:01:9d:a1:f0:02:1c:fd:0f:84:57:08:f2:53:2f:28:
         aa:e3:a5:7f:f7:fe:cd:31:c4:c5:5b:e9:cc:9e:c6:c5:31:61:
         d6:92:e2:f3:6c:ee:a4:48:a8:34:82:d9:1c:07:9e:30:27:19:
         80:c6:b0:69:2c:70:67:6b:40:f6:61:10:01:43:d8:18:3b:00:
         81:0f:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:14 2026 by rpki-client