Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39012/obLGsBMVQIw7_lMO4aEmF6FhLEI.roa
File:                     obLGsBMVQIw7_lMO4aEmF6FhLEI.roa (raw, json)
Hash identifier:          +UmKJruP9KSbtdKkRu9mr1Oknl1MjhR1WdgM5OnniBA=
Subject key identifier:   A1:B2:C6:B0:13:15:40:8C:3B:FE:53:0E:E1:A1:26:17:A1:61:2C:42
Certificate issuer:       /CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A
Certificate serial:       0A
Authority key identifier: 8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/obLGsBMVQIw7_lMO4aEmF6FhLEI.roa
Signing time:             Tue 31 Mar 2026 08:47:12 +0000
ROA not before:           Tue 31 Mar 2026 08:47:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131159
IP address blocks:        2001:df0:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A
        Validity
            Not Before: Mar 31 08:47:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A1B2C6B01315408C3BFE530EE1A12617A1612C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:52:21:1d:dd:36:18:68:51:28:fe:2d:52:
                    a3:be:ea:d4:93:8c:53:be:39:c9:6b:5e:d8:e8:a5:
                    26:81:8e:51:d0:9a:03:b2:d7:11:8d:23:d7:50:29:
                    69:3d:56:97:bc:af:6c:a0:a8:a3:55:2a:c0:fd:8e:
                    07:13:3d:2d:6c:24:4b:02:c6:a2:56:ff:ae:ac:02:
                    d4:0c:45:ec:91:55:91:f1:c6:ed:6c:3a:bd:4b:91:
                    ba:9f:ee:44:3f:f6:39:56:8e:12:a4:cb:57:fd:1f:
                    cd:46:1e:bf:d5:3b:c0:1e:91:e6:bf:8a:de:bb:e7:
                    b8:aa:80:09:dd:80:91:c0:32:2b:d4:50:5c:0d:f5:
                    24:8d:ed:05:a7:b9:4a:d0:8a:7d:1e:ed:d0:0e:8c:
                    79:42:c2:28:34:1e:20:74:60:a4:01:87:66:d1:d2:
                    47:92:12:89:91:f2:2b:5c:26:de:31:d0:11:95:9a:
                    0a:1b:7b:99:4c:e1:69:17:bd:b3:97:71:11:b8:a8:
                    de:28:94:12:cf:12:6e:2b:4e:c6:b8:95:62:67:96:
                    34:5d:b6:06:f2:70:ef:98:3a:98:03:2a:6c:30:df:
                    09:65:0a:de:c8:e3:53:b1:ec:f6:90:f5:ed:f2:02:
                    bf:aa:e2:da:ee:cf:f8:29:3b:02:c8:39:e1:5c:fa:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:C6:B0:13:15:40:8C:3B:FE:53:0E:E1:A1:26:17:A1:61:2C:42
            X509v3 Authority Key Identifier:
                keyid:8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/obLGsBMVQIw7_lMO4aEmF6FhLEI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:25e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:d2:80:a7:f7:a8:eb:7e:c6:46:9a:7d:26:cd:3c:03:1f:
         6f:ff:cc:26:c9:36:f8:96:65:a2:aa:ca:46:e2:a1:f7:11:ec:
         e4:23:92:ec:a4:fb:92:cf:bf:66:94:66:a7:85:73:5e:84:d9:
         52:bb:db:bf:e7:bc:ff:4d:c9:a2:05:b6:a5:a2:99:e4:86:08:
         ac:a8:ca:5d:51:27:7a:9c:ab:a3:d9:6f:94:fe:63:2c:fe:0a:
         5b:08:be:4f:66:dc:c6:59:42:db:e8:11:c9:6a:88:58:7b:3a:
         a7:a8:5b:6f:1c:4f:a7:87:f4:38:a1:dd:6c:f3:4d:3d:a9:4c:
         85:48:63:85:78:ab:da:fe:23:3d:9a:8c:2e:ba:93:0e:1b:f6:
         3f:3c:42:fb:c6:a2:3a:b4:f3:46:08:58:4a:0e:35:f7:37:28:
         c3:ae:7d:0c:64:4d:99:47:ad:17:67:90:48:9b:b0:2c:f5:1e:
         e3:74:76:6b:52:30:9f:72:a3:c1:77:ae:cc:69:1b:6a:f6:32:
         db:96:72:fd:be:bd:e4:db:87:df:12:03:d7:d4:f0:62:04:54:
         b0:b6:bb:10:63:84:6e:ba:a0:35:48:b5:e0:38:91:af:ae:ac:
         da:05:67:21:ec:e8:cf:2a:f3:20:72:5a:ac:f1:19:2d:c1:3c:
         39:b7:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client