Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/G37zFDy7oBPxv1pQoM4BWuhOR_E.roa
File:                     G37zFDy7oBPxv1pQoM4BWuhOR_E.roa (raw, json)
Hash identifier:          OmiFczrg2soPtp6gfIurYp7znawg590NVJDDQhsdq8o=
Subject key identifier:   1B:7E:F3:14:3C:BB:A0:13:F1:BF:5A:50:A0:CE:01:5A:E8:4E:47:F1
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       23
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/G37zFDy7oBPxv1pQoM4BWuhOR_E.roa
Signing time:             Tue 31 Mar 2026 08:40:30 +0000
ROA not before:           Tue 31 Mar 2026 08:40:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58645
IP address blocks:        2400:8120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: Mar 31 08:40:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B7EF3143CBBA013F1BF5A50A0CE015AE84E47F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:a0:ad:45:6d:7e:40:68:a2:63:dc:34:d7:
                    64:74:2b:32:ec:7e:ab:d2:a6:02:7e:23:0d:95:d8:
                    7f:41:4a:fb:54:bf:ee:9a:ee:95:7c:88:3c:a2:44:
                    35:60:60:0a:5d:21:5e:80:88:65:67:a1:51:2e:4c:
                    76:4a:99:4f:d8:d4:74:f0:09:27:09:97:85:06:3e:
                    10:e5:1b:a7:d8:f5:bf:f8:85:c6:15:f2:5c:b1:5f:
                    25:26:cb:ba:3d:4d:6d:de:ad:e1:2f:58:b9:4b:98:
                    0b:41:55:39:7b:5a:24:a3:7a:1c:19:9e:e8:4b:6d:
                    3c:18:6c:e7:aa:54:74:10:92:49:fe:e1:f4:97:33:
                    6f:b0:1c:19:de:b8:27:49:aa:47:31:f6:1d:ce:54:
                    d2:1f:6b:01:1a:69:59:26:54:03:7b:d9:00:be:04:
                    75:56:fc:9d:69:a5:c3:c8:68:34:92:2f:fc:d3:f2:
                    33:e3:2d:78:09:d9:1e:ff:69:87:da:88:c9:8f:84:
                    b6:ef:d7:c5:e4:81:ed:93:94:60:58:c4:db:0b:37:
                    c6:87:48:aa:5b:e0:04:bf:64:aa:ec:61:9a:ff:8d:
                    37:35:d0:5f:6c:ba:9a:12:41:c1:e2:bb:4c:0a:5e:
                    26:05:97:6d:a9:35:65:97:1e:46:83:0c:72:f0:d6:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:F3:14:3C:BB:A0:13:F1:BF:5A:50:A0:CE:01:5A:E8:4E:47:F1
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/G37zFDy7oBPxv1pQoM4BWuhOR_E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:a3:37:e7:09:78:3e:55:75:4f:d1:af:f8:00:72:26:0c:
         0a:cd:82:2b:16:5b:17:e1:03:d2:7c:34:59:17:f9:2a:32:a1:
         5b:8a:d1:ac:15:83:98:dc:f6:ae:ef:e3:ac:5b:5b:99:de:33:
         6b:f5:63:45:3a:c4:7d:86:fd:56:72:6a:8e:9e:74:af:b6:ad:
         d7:e8:1f:a0:be:d7:74:08:fc:29:92:8e:98:0e:dd:13:b0:41:
         5e:92:a0:62:77:19:78:3c:ec:b6:bc:06:49:c3:d8:a9:8c:e2:
         cf:a5:16:c1:e9:1a:e8:30:c8:7d:f0:dc:4c:eb:4d:9e:62:93:
         7d:23:dd:4f:e6:17:bc:bd:b5:36:b4:22:86:68:84:d4:cd:ab:
         71:74:5e:4a:7d:55:9e:1c:51:8a:c8:14:0d:62:37:d9:7e:12:
         1d:d9:ba:cb:f7:93:ab:2f:a3:d6:9b:1c:6d:2e:19:91:0a:7a:
         df:5c:4e:09:9b:4e:d3:af:d1:86:58:bc:b3:83:27:d1:25:a9:
         bb:13:1f:90:9d:f1:b8:bc:57:1d:c2:84:62:cd:6f:45:05:54:
         48:0a:44:a6:f6:be:4f:34:59:37:d8:e3:88:67:e1:bf:bf:03:
         73:0e:9f:cd:94:41:00:1a:67:3e:7b:5d:45:43:63:67:e9:c2:
         98:ce:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:06 2026 by rpki-client