Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5iXsY1o7HaemOdwtQFxDZv_5bkk.roa
File:                     5iXsY1o7HaemOdwtQFxDZv_5bkk.roa (raw, json)
Hash identifier:          a1HtGMSXpKgRuK4KPVLB7USDa4WlBXH+BOjwA6bE8i8=
Subject key identifier:   E6:25:EC:63:5A:3B:1D:A7:A6:39:DC:2D:40:5C:43:66:FF:F9:6E:49
Certificate issuer:       /CN=8484F266865A5F115A4A76F63211159305275A56
Certificate serial:       03
Authority key identifier: 84:84:F2:66:86:5A:5F:11:5A:4A:76:F6:32:11:15:93:05:27:5A:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5iXsY1o7HaemOdwtQFxDZv_5bkk.roa
Signing time:             Tue 31 Mar 2026 08:49:11 +0000
ROA not before:           Tue 31 Mar 2026 08:49:11 +0000
ROA not after:            Tue 16 Mar 2027 05:21:18 +0000
asID:                     63782
IP address blocks:        2401:df60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8484F266865A5F115A4A76F63211159305275A56
        Validity
            Not Before: Mar 31 08:49:11 2026 GMT
            Not After : Mar 16 05:21:18 2027 GMT
        Subject: CN=E625EC635A3B1DA7A639DC2D405C4366FFF96E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:fa:2a:65:df:18:21:e0:b0:d7:a2:91:c5:
                    e7:8d:19:ef:29:db:b9:01:77:00:18:4a:76:fa:f5:
                    5b:d6:df:5c:37:36:c8:d2:a0:cb:e4:3f:dc:17:20:
                    55:d7:0d:25:3f:1d:4b:28:e0:b0:39:f7:67:0b:f4:
                    f8:f0:29:fa:08:12:a9:83:74:9b:6a:3b:5d:0a:6f:
                    a3:84:fc:c3:ca:67:a9:14:ca:46:60:a1:82:4e:76:
                    37:60:33:91:33:52:7f:45:8f:c7:74:b1:ea:e1:7d:
                    f2:4a:d6:6b:2e:fa:71:e9:6a:18:0a:e5:bb:f4:bc:
                    16:13:be:70:de:0c:a0:51:70:67:6d:25:6b:dd:99:
                    89:5d:e3:6f:5a:2f:b7:c1:9b:67:ed:d0:ff:73:7d:
                    1b:a2:cd:cf:4d:20:8d:93:9a:68:36:16:0a:ff:7b:
                    7f:a4:e2:fd:d6:a5:5b:82:9d:36:34:02:7f:28:c7:
                    5c:73:9f:ec:85:bb:39:99:7f:33:51:c5:f8:22:12:
                    09:4a:07:ab:89:20:c5:70:a6:f1:31:00:64:cb:ae:
                    07:10:1d:9a:56:25:ac:d2:81:5c:68:6c:76:5e:1f:
                    f1:c0:4d:26:e9:f3:08:36:05:d3:e8:b8:eb:04:4d:
                    a8:57:70:0d:74:51:7e:a6:bd:fb:07:62:37:a9:40:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:EC:63:5A:3B:1D:A7:A6:39:DC:2D:40:5C:43:66:FF:F9:6E:49
            X509v3 Authority Key Identifier:
                keyid:84:84:F2:66:86:5A:5F:11:5A:4A:76:F6:32:11:15:93:05:27:5A:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5iXsY1o7HaemOdwtQFxDZv_5bkk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:df60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:39:7c:23:b4:ed:3e:9a:d3:ed:5c:0f:88:23:3d:fb:9c:
         20:ac:dd:56:e2:d5:7c:df:04:be:d3:dd:38:14:83:1c:e4:a7:
         da:1b:80:a8:90:37:4a:12:1a:d7:dd:03:1e:92:8f:b4:b8:39:
         4e:90:ed:eb:71:44:8e:d4:a6:23:15:8a:e5:a9:f7:57:f4:fc:
         09:b1:9a:1d:61:ba:94:de:4b:ec:8f:db:47:2b:16:07:6b:30:
         c0:db:5c:0a:a1:dc:62:4a:4a:48:04:f0:6b:4e:f7:ec:7e:e0:
         1f:1a:a4:dc:08:c8:c2:20:b0:c6:41:db:4c:3f:a7:b4:af:8f:
         69:94:7f:a0:95:2c:df:27:a6:22:54:e4:80:fa:af:2a:34:04:
         4f:bb:25:b1:09:d2:e5:c0:d4:b3:1a:93:67:fb:58:95:68:6a:
         6f:da:e8:39:a3:7b:50:f9:57:e3:fb:2e:fd:2f:bd:bd:57:5c:
         fb:26:76:63:43:11:76:97:f0:f2:40:db:cd:ae:3c:c4:8d:6b:
         fa:0c:f5:6d:e3:c2:14:e7:51:49:71:d2:35:d1:2c:1f:40:55:
         7a:a6:88:de:7c:81:c3:74:fc:3f:8b:1c:0a:5f:50:27:f7:b2:
         77:56:d9:a0:2f:1e:5c:51:d8:71:62:e6:28:28:f1:b4:51:fa:
         ee:3c:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:52 2026 by rpki-client