Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30450/e_7yU-BO6Ai6R0RkuGfcVkjuYWw.roa
File:                     e_7yU-BO6Ai6R0RkuGfcVkjuYWw.roa (raw, json)
Hash identifier:          kbrmmNR8ytQB/mCrUKN4EqqOQB3HdrA3M1cAadLsLjI=
Subject key identifier:   7B:FE:F2:53:E0:4E:E8:08:BA:47:44:64:B8:67:DC:56:48:EE:61:6C
Certificate issuer:       /CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
Certificate serial:       10
Authority key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/e_7yU-BO6Ai6R0RkuGfcVkjuYWw.roa
Signing time:             Tue 31 Mar 2026 08:47:35 +0000
ROA not before:           Tue 31 Mar 2026 08:47:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38646
IP address blocks:        2402:2f60:c200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
        Validity
            Not Before: Mar 31 08:47:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BFEF253E04EE808BA474464B867DC5648EE616C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9a:52:aa:f3:c0:8f:02:2a:ef:9b:f9:5c:4e:
                    b6:1c:cc:b1:6d:6d:dd:82:66:42:c8:a3:5d:a4:d8:
                    76:c4:11:2e:25:45:0a:2f:58:18:d7:99:7d:00:3c:
                    50:82:bf:a0:33:95:1f:62:7f:57:93:7e:9b:43:97:
                    03:01:98:71:d0:7b:d0:59:bd:a3:19:29:bf:f2:dc:
                    7f:59:77:91:be:0a:01:e2:a4:29:54:b8:7c:8a:82:
                    d5:1d:b5:38:6d:e1:ee:ba:b2:71:b0:b7:b5:63:4b:
                    45:55:46:47:79:e1:10:17:77:40:8d:c6:27:da:9e:
                    a9:44:8d:d4:c7:1b:19:2b:d2:e2:30:08:30:ec:81:
                    50:c1:fd:74:86:bd:0b:31:71:98:2a:73:58:3b:38:
                    36:9c:65:42:7c:cf:57:c0:7c:9b:1e:3b:82:73:8c:
                    43:96:cc:3e:c7:4c:ef:e3:f7:5a:b9:c6:a5:9f:ed:
                    6e:09:e3:6c:77:ff:09:eb:cd:7f:54:3a:a4:2d:aa:
                    72:bb:90:bc:bb:60:e1:b6:36:20:de:ee:51:7d:b2:
                    5d:25:fe:1d:35:3a:7c:05:10:61:0f:4b:6c:83:45:
                    91:8c:4a:ab:b8:5c:27:f5:b4:06:f8:20:a9:bb:dd:
                    3f:16:72:cd:0f:bf:6c:97:a6:c1:77:41:1a:ad:88:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:F2:53:E0:4E:E8:08:BA:47:44:64:B8:67:DC:56:48:EE:61:6C
            X509v3 Authority Key Identifier:
                keyid:CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/e_7yU-BO6Ai6R0RkuGfcVkjuYWw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2f60:c200::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:c9:ee:96:a4:56:ab:08:39:59:6b:bc:b7:10:da:0c:83:
         15:d5:af:28:68:9e:cb:0e:3f:87:8e:4e:36:bf:15:58:e3:98:
         f4:4a:7b:4d:be:a7:c8:b2:63:7d:c2:01:09:20:d5:3a:03:22:
         2a:27:e4:73:83:ff:11:ca:ca:d8:ba:da:e8:ba:ca:ca:68:74:
         79:ff:84:65:e1:0a:6c:fa:e3:b5:c9:ec:c2:2b:42:4c:36:bb:
         be:b9:45:3b:68:cf:4e:ce:4c:a7:0c:a3:7c:ba:c1:29:06:b0:
         ab:b9:a6:10:e4:2f:9d:40:5d:f8:05:0d:fa:ea:8a:fa:94:28:
         af:46:a3:71:2d:e3:b4:78:d5:1e:e7:2d:10:93:b7:16:b7:78:
         e4:e7:dc:f8:f5:80:8e:fa:c5:05:0c:ae:9b:a1:b5:f2:65:94:
         5b:4c:d2:9d:ff:97:db:6b:76:44:c1:9b:4b:c8:2c:96:38:5b:
         ed:38:e3:e8:4b:3c:de:14:f9:97:ff:f8:e9:01:00:27:0e:b8:
         cf:75:7b:ec:e9:a2:9b:a1:61:4d:ee:45:74:ff:30:cd:e2:d6:
         ba:68:d3:0c:0e:bf:16:2b:fa:02:23:4b:65:d1:79:ff:66:c7:
         56:df:77:14:e5:e3:ee:bd:8c:71:8e:79:73:80:70:e7:eb:24:
         22:d5:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:11 2026 by rpki-client