Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/mP_zY1cItwI9OvsbMzk25mUewtk.roa
File:                     mP_zY1cItwI9OvsbMzk25mUewtk.roa (raw, json)
Hash identifier:          5CsywusC8akpYXxzGebV32wtVL5nGiKOyCB5EETtAPA=
Subject key identifier:   98:FF:F3:63:57:08:B7:02:3D:3A:FB:1B:33:39:36:E6:65:1E:C2:D9
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       2F
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/mP_zY1cItwI9OvsbMzk25mUewtk.roa
Signing time:             Tue 31 Mar 2026 08:40:59 +0000
ROA not before:           Tue 31 Mar 2026 08:40:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55911
IP address blocks:        2401:98a0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: Mar 31 08:40:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98FFF3635708B7023D3AFB1B333936E6651EC2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:2b:43:c9:73:3d:8a:bf:e1:48:9e:a0:38:
                    9d:47:9a:44:a5:5e:85:54:25:17:e6:0d:c6:29:49:
                    d6:04:d8:18:b8:a2:7f:94:5d:6f:79:3e:b0:c6:e4:
                    75:f1:e1:6f:41:ea:1c:4d:dc:0d:35:c3:62:1f:e2:
                    77:f7:27:82:8e:98:60:f1:91:ea:61:48:5d:30:f2:
                    58:5b:49:14:db:93:d7:3e:6f:79:65:0f:96:2f:99:
                    b1:f3:58:c4:47:e8:5a:01:1b:68:ef:2d:d0:e4:43:
                    4b:f6:83:cb:94:a9:bb:18:a3:2c:db:42:fc:31:d7:
                    04:23:a6:7f:fd:ae:8e:6d:b4:77:31:49:d7:2d:ef:
                    05:b0:79:e9:e3:09:fa:6e:6d:c9:aa:71:6e:82:04:
                    2b:01:4f:26:e0:2a:67:6f:f1:ad:97:1d:4e:72:5d:
                    b0:6f:8f:bf:cc:0b:94:e7:d0:3d:3f:53:34:a2:da:
                    3d:c0:ba:2a:0d:32:65:56:94:b3:8f:ee:9d:23:a3:
                    18:2b:8f:a1:ec:78:df:6d:98:de:6f:12:5b:11:92:
                    7d:52:fb:f3:e1:4e:91:fd:5b:d8:e5:72:12:e0:2d:
                    86:6b:d1:5f:0c:dd:e8:4e:a0:9b:a2:5a:b7:b5:09:
                    79:51:82:e5:00:fa:bf:6b:b2:76:7c:8a:e8:a7:94:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FF:F3:63:57:08:B7:02:3D:3A:FB:1B:33:39:36:E6:65:1E:C2:D9
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/mP_zY1cItwI9OvsbMzk25mUewtk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:78:ba:31:fe:7a:43:ce:6a:c9:ca:7d:5f:c5:44:29:c0:
         b6:1c:0d:71:e0:ba:f9:8a:5f:7d:be:29:4b:e6:a9:f8:4f:c1:
         ee:9a:8d:03:4c:43:26:4d:74:3d:c5:3a:02:4b:cd:42:46:bd:
         93:de:19:09:c1:87:4f:d4:dc:65:ad:44:99:de:51:21:6a:04:
         ad:a3:e9:8e:42:04:23:ed:e4:10:13:ef:ab:9b:cb:7d:6b:3d:
         12:84:38:bc:d4:04:9e:5b:48:b6:64:66:7d:af:80:e0:3e:03:
         78:e2:b1:5c:df:0d:c8:59:0e:fa:60:96:a8:c8:8f:e2:0f:f3:
         0e:d3:0f:e3:c7:d3:23:1a:3e:db:6f:70:2e:af:f3:b9:5b:48:
         0d:af:6d:43:35:2d:b8:92:67:2f:7e:4b:a6:9a:b9:c0:25:64:
         86:64:12:c5:ee:46:cb:aa:19:d3:73:99:0d:65:b8:2b:33:c1:
         f8:d2:d5:b6:b8:5c:d9:59:cc:ec:2a:d8:89:48:1a:29:04:c9:
         8b:4f:c9:eb:ad:04:a1:ce:76:20:13:7e:a9:3e:e5:17:df:d2:
         33:3c:09:ef:38:c5:44:12:3d:6f:00:80:87:de:98:e3:38:cb:
         6c:3b:67:27:0d:af:ba:93:3e:56:5c:f9:50:24:9f:b9:6b:8e:
         c5:0b:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:46 2026 by rpki-client