Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30401/78Vrfdy_lgz42o5_UrhGQJgG29U.roa
File:                     78Vrfdy_lgz42o5_UrhGQJgG29U.roa (raw, json)
Hash identifier:          /mxzUQGGRsQvaWgQ68ocvSQQOWhn56JdFiVp6a6DUVk=
Subject key identifier:   EF:C5:6B:7D:DC:BF:96:0C:F8:DA:8E:7F:52:B8:46:40:98:06:DB:D5
Certificate issuer:       /CN=0385E3DE4BBF017034BC7083637F05DA4F473533
Certificate serial:       3A
Authority key identifier: 03:85:E3:DE:4B:BF:01:70:34:BC:70:83:63:7F:05:DA:4F:47:35:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/78Vrfdy_lgz42o5_UrhGQJgG29U.roa
Signing time:             Tue 31 Mar 2026 08:23:09 +0000
ROA not before:           Tue 31 Mar 2026 08:23:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63795
IP address blocks:        2400:7ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0385E3DE4BBF017034BC7083637F05DA4F473533
        Validity
            Not Before: Mar 31 08:23:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EFC56B7DDCBF960CF8DA8E7F52B846409806DBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:77:05:24:60:29:f0:fd:32:1c:e2:62:20:
                    c8:99:73:fa:02:de:d7:c1:9c:8e:2b:d5:36:c5:1c:
                    d9:66:c0:60:a2:19:d3:3e:17:c9:b5:87:b9:f5:99:
                    35:6a:b5:f1:1b:d3:90:97:7c:c5:69:74:fe:9b:38:
                    15:23:d5:a6:62:5f:38:54:d5:6f:a5:14:bb:5a:52:
                    7c:e2:91:7c:56:5d:74:27:a5:69:e3:13:9d:76:e2:
                    61:68:80:56:cb:96:33:56:17:23:a2:85:6f:6b:5b:
                    86:34:89:b6:4b:dc:95:c5:1c:53:7d:e1:f9:03:06:
                    ee:20:84:27:d3:dc:9c:c1:f3:1e:2a:1f:6a:64:0e:
                    45:de:31:d8:bc:f3:1e:da:63:29:61:63:28:7c:ff:
                    af:b0:9c:b4:b5:f8:d0:91:a3:6e:ca:77:66:6a:c7:
                    57:0b:2a:23:74:03:91:0c:bd:de:71:bf:7c:05:a4:
                    8b:9e:52:84:d8:94:2d:29:2c:9b:92:12:a2:d2:f5:
                    80:dd:e1:bf:14:6e:8b:71:51:f0:3a:c4:5c:71:ed:
                    be:ea:fa:3d:5e:03:8f:c6:f8:84:0b:01:9a:79:1e:
                    51:2c:ca:0d:25:51:74:57:ca:de:45:09:b5:e5:0d:
                    e2:25:ef:86:a9:af:42:66:c4:1e:77:be:ef:5c:e3:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:6B:7D:DC:BF:96:0C:F8:DA:8E:7F:52:B8:46:40:98:06:DB:D5
            X509v3 Authority Key Identifier:
                keyid:03:85:E3:DE:4B:BF:01:70:34:BC:70:83:63:7F:05:DA:4F:47:35:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/78Vrfdy_lgz42o5_UrhGQJgG29U.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:33:7b:b6:b7:ef:96:90:98:12:39:3f:45:55:c8:db:f9:
         12:8b:2f:ed:6a:d8:e6:05:f3:92:c7:1a:7f:e9:2a:b1:44:29:
         51:0d:3e:a1:84:e1:98:a3:50:a4:18:93:a7:fa:5b:f9:51:f8:
         6f:e3:5d:1c:1d:2e:92:82:7f:a6:99:b6:b2:48:b7:1d:24:be:
         ca:64:3c:f0:1b:ba:1f:7e:a0:6d:5d:c9:67:cc:c5:9b:6b:b1:
         59:54:d7:b3:d7:3b:2d:16:57:5f:51:5c:8d:cb:86:e5:7f:8a:
         72:9f:f2:a1:bb:1d:4a:cb:a0:9d:61:2b:7a:41:46:53:da:0e:
         57:3a:20:03:fb:2b:f6:fc:e9:04:8c:62:0d:38:b4:ee:a4:64:
         e5:72:fe:34:87:64:c5:6d:ea:50:6b:7c:2b:6d:84:db:bd:d2:
         92:81:ee:2b:14:07:9b:80:7a:04:cc:6e:d0:cd:4b:5a:58:48:
         a2:24:62:17:f1:5b:de:c8:cb:0d:76:5f:68:81:f3:19:23:54:
         49:bb:6e:4f:e6:97:d3:25:21:f6:d2:fb:2e:ec:d6:8c:b0:e2:
         12:79:34:f3:24:ac:dd:ab:bf:42:86:39:d1:4c:e3:d8:c5:1b:
         25:20:c4:82:c9:03:17:c7:27:d4:17:84:d6:e7:15:ea:af:78:
         9e:a6:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:30 2026 by rpki-client