Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/IFqRYjDyOjicRSytwUWZrtSt5vI.roa
File:                     IFqRYjDyOjicRSytwUWZrtSt5vI.roa (raw, json)
Hash identifier:          E99Ab7JUFmpunNRFVxxz76C9FDCmGH4MyeYFVGmWlmI=
Subject key identifier:   20:5A:91:62:30:F2:3A:38:9C:45:2C:AD:C1:45:99:AE:D4:AD:E6:F2
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       2C
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/IFqRYjDyOjicRSytwUWZrtSt5vI.roa
Signing time:             Tue 31 Mar 2026 08:40:58 +0000
ROA not before:           Tue 31 Mar 2026 08:40:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55911
IP address blocks:        2401:98a0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: Mar 31 08:40:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=205A916230F23A389C452CADC14599AED4ADE6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:38:60:fa:6c:45:da:ec:83:b7:b6:55:82:
                    4e:c0:5e:53:d6:f0:00:30:c8:41:e6:e9:24:16:51:
                    93:c2:d6:9f:c8:28:40:4f:1f:5f:ff:ec:ad:e5:f9:
                    7e:f2:c1:75:88:95:28:71:4c:f6:33:9a:d0:1e:c1:
                    e9:42:52:be:ac:94:a0:54:85:d1:ad:b6:ea:c3:97:
                    07:3d:a9:5b:db:07:68:c6:12:a7:c0:1a:c9:d5:10:
                    f0:18:9e:9a:c0:45:6b:69:f0:58:31:7f:56:2c:33:
                    4d:54:59:64:09:bf:7c:97:d3:d5:96:5c:fb:c8:13:
                    52:ce:18:3d:06:67:21:1c:74:d2:cc:0e:df:e6:af:
                    33:1a:91:ac:4f:98:14:bf:a0:8b:8e:73:9b:76:cf:
                    da:25:fb:b0:4f:e9:7d:2e:eb:69:63:21:e7:47:3b:
                    0a:b7:df:f8:19:b1:e8:38:42:01:12:23:28:6d:d2:
                    27:92:a5:0b:ae:a5:c9:2a:4f:ea:81:24:d4:bb:8e:
                    32:08:fa:cc:b1:cb:93:44:f3:03:ce:d7:e2:f0:2f:
                    70:37:c3:29:d7:88:25:d0:16:f2:6d:43:ce:50:7f:
                    20:b3:c2:2a:6a:db:2d:e7:45:ab:75:da:d9:cc:5f:
                    66:de:89:13:ea:0d:d5:d9:6c:bd:de:3c:98:e3:9b:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:91:62:30:F2:3A:38:9C:45:2C:AD:C1:45:99:AE:D4:AD:E6:F2
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/IFqRYjDyOjicRSytwUWZrtSt5vI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:09:0f:40:34:b2:bf:9b:de:1d:4a:48:42:75:81:c5:7b:
         d2:df:bd:e1:e3:77:c4:b9:79:c3:52:bc:e0:da:66:27:37:16:
         06:77:fd:24:75:bd:78:74:1e:c6:da:49:d9:54:25:21:54:5f:
         bf:cb:85:6a:b9:f3:e6:bf:17:87:9a:2c:b2:b7:b1:36:9a:9a:
         90:f5:46:a7:b5:e9:ff:6a:48:06:b0:a0:cf:4a:5d:a3:16:a5:
         15:64:2b:86:e7:ee:1a:61:fb:a4:c0:32:da:f9:57:6d:f1:e3:
         dc:23:c1:af:26:8e:11:0a:34:69:68:d7:9f:44:b5:94:29:11:
         c0:74:d3:84:81:eb:05:b0:61:fe:87:76:83:62:3f:ec:f7:6d:
         2c:7a:40:c2:33:af:b6:5b:de:cf:1a:b9:32:19:69:d5:b1:e0:
         5e:a5:ea:30:b9:7b:f8:4f:8f:3a:55:39:bc:df:10:fe:12:59:
         5f:32:ab:04:bc:4d:6d:eb:25:46:4c:d1:3f:43:f1:37:af:ed:
         fd:7b:39:09:6d:c5:ec:67:eb:1b:6d:5c:9d:4f:e2:78:d5:c5:
         bd:7b:ca:70:d9:91:be:1f:54:ab:5e:c5:fe:f2:ea:81:0c:e3:
         ee:cb:dc:68:1b:13:8c:44:63:c7:ee:88:d8:d4:c8:8e:d7:10:
         25:8c:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client