Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/8vAccVYVf0T-lSxOuLrfFHUJx8s.roa
File:                     8vAccVYVf0T-lSxOuLrfFHUJx8s.roa (raw, json)
Hash identifier:          cjJwnJsWeqvoFeMcfq5EpWcmXRXh3SsxqlAORKb+GQk=
Subject key identifier:   F2:F0:1C:71:56:15:7F:44:FE:95:2C:4E:B8:BA:DF:14:75:09:C7:CB
Certificate issuer:       /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial:       40
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/8vAccVYVf0T-lSxOuLrfFHUJx8s.roa
Signing time:             Tue 31 Mar 2026 08:23:49 +0000
ROA not before:           Tue 31 Mar 2026 08:23:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2001:de8:8::/64 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
        Validity
            Not Before: Mar 31 08:23:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F2F01C7156157F44FE952C4EB8BADF147509C7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d5:67:9b:dd:a9:2d:7f:62:fc:cf:58:dd:3f:
                    20:70:94:63:cd:3d:f5:0f:54:9c:10:f4:2d:98:4d:
                    8a:a2:58:b2:8c:9b:91:c7:b9:ef:9e:ca:a9:5c:2c:
                    56:a6:ce:85:3a:08:95:01:c5:da:5d:75:8d:af:df:
                    a3:a0:4f:cf:1e:19:d7:3b:95:42:69:f7:c9:5f:32:
                    7a:37:cf:c5:90:82:f3:ae:19:24:80:0a:23:e1:b8:
                    39:a5:5b:59:61:86:92:2d:5f:7d:95:ab:b1:69:89:
                    a1:95:c7:1d:6c:80:7e:2e:d0:16:47:0e:9c:a3:cc:
                    21:de:5a:0b:5f:08:41:a4:b0:14:fc:d9:ed:7d:15:
                    09:9c:bf:ef:af:0e:03:ce:75:68:64:0d:91:18:8e:
                    c1:08:7c:67:f8:b1:d3:e5:22:64:7f:7c:eb:0c:b3:
                    0e:b6:9e:02:54:e4:49:07:c9:ba:86:b0:b5:08:79:
                    fc:e4:68:78:6a:70:77:05:2b:c2:8b:01:7a:88:ef:
                    25:c2:40:c4:4c:d0:77:a9:b4:5c:d1:b2:b2:58:f5:
                    b7:00:dd:5a:fe:0f:f5:cd:e2:b7:60:e0:57:18:33:
                    95:7f:b3:09:9a:82:f1:77:4e:90:26:85:11:c4:45:
                    8a:b5:47:08:5b:f8:54:e5:d8:d6:3a:0d:55:d2:04:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:1C:71:56:15:7F:44:FE:95:2C:4E:B8:BA:DF:14:75:09:C7:CB
            X509v3 Authority Key Identifier:
                keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/8vAccVYVf0T-lSxOuLrfFHUJx8s.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de8:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:90:14:b5:70:8f:00:b9:45:08:ae:a9:bc:82:9a:61:ff:
         ae:39:64:1e:27:36:e6:37:32:b8:50:f9:6d:76:be:47:79:ef:
         6e:75:44:a7:55:17:74:39:c4:e6:16:8f:69:b2:2b:34:ec:27:
         7e:84:c3:33:6d:f4:37:4c:da:25:74:d3:be:e6:99:99:fb:bd:
         ea:44:06:10:88:11:fc:86:6d:78:77:e3:b2:7e:e6:dc:51:ec:
         e9:8d:70:e9:63:ae:96:8e:73:e1:40:7d:56:ff:51:76:d9:a3:
         1a:c8:54:96:76:d7:a3:c7:0b:85:db:c6:d7:6e:39:a8:b5:d9:
         de:2e:db:12:f7:a8:e1:c4:91:35:58:2d:97:44:9a:7e:ab:c0:
         d5:e6:c5:a5:9f:8c:17:99:42:43:8d:c8:ad:40:4c:fa:9e:9f:
         46:f9:0d:a3:32:2e:ed:f2:ad:2f:88:8b:0f:96:3f:82:e5:7d:
         82:91:07:32:9e:aa:ba:41:d3:4a:19:01:2b:aa:11:20:77:cd:
         82:1c:be:5f:10:11:e2:76:69:1f:4f:4a:c9:81:f2:cf:3e:fb:
         c5:fd:53:bc:25:b8:82:5b:b1:78:a7:d6:ec:cd:1e:24:9f:e5:
         84:37:a4:5f:8a:da:1c:29:84:15:5c:da:22:39:a9:a3:08:36:
         12:bf:ed:72
-----BEGIN CERTIFICATE-----
MIIExTCCA62gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTc0
RjlFQjNFNkI2QUQ4QjFFQUVBMEE0NjFEMjQ4RDNBQ0RDREUyMB4XDTI2MDMzMTA4
MjM0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjJGMDFDNzE1NjE1N0Y0
NEZFOTUyQzRFQjhCQURGMTQ3NTA5QzdDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPzVZ5vdqS1/YvzPWN0/IHCUY8099Q9UnBD0LZhNiqJYsoybkce5
757KqVwsVqbOhToIlQHF2l11ja/fo6BPzx4Z1zuVQmn3yV8yejfPxZCC864ZJIAK
I+G4OaVbWWGGki1ffZWrsWmJoZXHHWyAfi7QFkcOnKPMId5aC18IQaSwFPzZ7X0V
CZy/768OA851aGQNkRiOwQh8Z/ix0+UiZH986wyzDraeAlTkSQfJuoawtQh5/ORo
eGpwdwUrwosBeojvJcJAxEzQd6m0XNGyslj1twDdWv4P9c3it2DgVxgzlX+zCZqC
8XdOkCaFEcRFirVHCFv4VOXY1joNVdIEV4ECAwEAAaOCAeIwggHeMB0GA1UdDgQW
BBTy8BxxVhV/RP6VLE64ut8UdQnHyzAfBgNVHSMEGDAWgBT5dPnrPmtq2LHq6gpG
HSSNOs3N4jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwMDIvLVhUNTZ6NXJhdGl4NnVvS1JoMGtqVHJOemVJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLVhUNTZ6NXJhdGl4NnVvS1JoMGtq
VHJOemVJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzM5MDAyLzh2QWNjVllWZjBULWxTeE91THJmRkhVSng4cy5yb2Ew
JAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAgAQ3oAAgAADANBgkqhkiG9w0B
AQsFAAOCAQEAfRqQFLVwjwC5RQiuqbyCmmH/rjlkHic25jcyuFD5bXa+R3nvbnVE
p1UXdDnE5haPabIrNOwnfoTDM230N0zaJXTTvuaZmfu96kQGEIgR/IZteHfjsn7m
3FHs6Y1w6WOulo5z4UB9Vv9RdtmjGshUlnbXo8cLhdvG1245qLXZ3i7bEveo4cSR
NVgtl0SafqvA1ebFpZ+MF5lCQ43IrUBM+p6fRvkNozIu7fKtL4iLD5Y/guV9gpEH
Mp6qukHTShkBK6oRIHfNghy+XxAR4nZpH09KyYHyzz77xf1TvCW4gluxeKfW7M0e
JJ/lhDekX4raHCmEFVzaIjmpowg2Er/tcg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client