Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa
File:                     XLKXElO0L2Lg1XrTzLa96WDbVyc.roa (raw, json)
Hash identifier:          XWzLjtQ8K2c5jfQrdG+GJal4XqyokwwtRPc4vMfBXHM=
Subject key identifier:   5C:B2:97:12:53:B4:2F:62:E0:D5:7A:D3:CC:B6:BD:E9:60:DB:57:27
Certificate issuer:       /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial:       3C
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa
Signing time:             Tue 31 Mar 2026 08:18:18 +0000
ROA not before:           Tue 31 Mar 2026 08:18:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131948
IP address blocks:        2001:df0:2440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Validity
            Not Before: Mar 31 08:18:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CB2971253B42F62E0D57AD3CCB6BDE960DB5727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:72:e1:bc:86:e7:ef:55:8a:4e:24:20:70:
                    33:58:2c:76:35:96:83:21:fb:55:85:c1:23:9c:fb:
                    d0:72:91:15:5a:a9:4c:f1:4a:d0:85:7a:86:62:ca:
                    01:a5:35:f4:66:26:3d:d6:eb:c4:9d:ed:46:fa:4e:
                    52:9b:8d:41:26:10:ab:94:da:32:95:64:4f:95:f1:
                    17:f9:85:88:89:d4:3e:47:4b:51:1d:c4:4d:9a:7e:
                    e1:28:46:56:f2:9d:1f:93:8e:f8:5d:71:b2:0a:ce:
                    0b:5e:96:04:7b:32:6e:a4:32:25:b7:8f:2c:83:e0:
                    3a:20:d6:d5:77:8f:69:22:7f:ef:d9:3c:a1:98:a7:
                    61:33:7f:1b:05:12:ec:a2:45:9b:a2:96:4c:15:d0:
                    c3:52:85:2b:29:e7:7f:32:71:73:54:92:4c:d4:91:
                    12:9f:db:58:16:a6:6f:06:e6:77:4c:a1:bb:0d:ae:
                    86:7a:55:e2:b7:37:8a:79:ed:61:e3:6f:7d:5e:46:
                    a9:c3:54:3d:81:01:51:a2:d2:05:a1:e8:40:06:7f:
                    8f:e8:84:92:b0:14:6d:b2:e9:b8:83:0c:72:18:d5:
                    d4:9c:75:b1:53:df:85:05:18:42:d9:49:ca:89:1e:
                    98:4c:6d:20:77:67:f5:c0:11:11:cc:74:52:fb:8e:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B2:97:12:53:B4:2F:62:E0:D5:7A:D3:CC:B6:BD:E9:60:DB:57:27
            X509v3 Authority Key Identifier:
                keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:f9:68:45:45:ae:55:22:09:87:e9:79:fb:9d:a8:44:61:
         bc:bb:71:e4:78:5c:9e:0e:cf:30:56:8e:9a:e8:73:42:66:ab:
         a7:a6:50:93:a4:79:a6:9c:60:15:38:ba:73:34:63:1e:e4:c2:
         a6:63:a9:ca:84:90:34:ad:35:b4:49:6d:d7:70:37:8a:34:de:
         60:20:bb:c1:38:4c:33:a5:03:e1:59:fe:e7:9f:74:bd:43:7f:
         c6:59:69:a9:fa:60:b9:b6:f5:f1:fc:fd:b3:f8:eb:19:a4:30:
         e4:7d:b8:f2:ad:0b:3d:ba:60:6d:99:54:f5:59:b6:45:3b:cc:
         c8:6e:35:cb:d8:99:dc:dc:75:a1:1f:37:a6:aa:b0:4d:0c:26:
         ad:38:85:65:51:57:38:f6:aa:be:30:f5:eb:10:48:0b:8c:d4:
         ce:5d:55:1e:19:01:3e:ab:bf:68:d0:db:ec:7d:cc:6c:cb:79:
         a9:8f:be:30:c7:b1:7a:58:ca:81:41:82:69:10:24:0d:e4:af:
         d0:8d:ec:ac:86:74:6c:35:9d:7b:d1:8a:37:a0:82:58:6c:00:
         04:b2:20:09:eb:c5:4f:4b:30:91:63:6f:10:83:6c:30:26:4f:
         7e:40:64:c0:1f:cf:db:2a:94:99:87:d6:d6:ea:b1:c9:71:9a:
         2d:ca:64:22
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTYy
N0MzQzIzM0U3OTYzN0FDOURDMDM1Q0RGNTBCNzg5RkM2N0FGMB4XDTI2MDMzMTA4
MTgxOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUNCMjk3MTI1M0I0MkY2
MkUwRDU3QUQzQ0NCNkJERTk2MERCNTcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMN/cuG8hufvVYpOJCBwM1gsdjWWgyH7VYXBI5z70HKRFVqpTPFK
0IV6hmLKAaU19GYmPdbrxJ3tRvpOUpuNQSYQq5TaMpVkT5XxF/mFiInUPkdLUR3E
TZp+4ShGVvKdH5OO+F1xsgrOC16WBHsybqQyJbePLIPgOiDW1XePaSJ/79k8oZin
YTN/GwUS7KJFm6KWTBXQw1KFKynnfzJxc1SSTNSREp/bWBambwbmd0yhuw2uhnpV
4rc3inntYeNvfV5GqcNUPYEBUaLSBaHoQAZ/j+iEkrAUbbLpuIMMchjV1Jx1sVPf
hQUYQtlJyokemExtIHdn9cAREcx0UvuOitcCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBRcspcSU7QvYuDVetPMtr3pYNtXJzAfBgNVHSMEGDAWgBTxYnw8Iz55Y3rJ3ANc
31C3ifxnrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNjEvOFdKOFBDTS1lV042eWR3RFhOOVF0NG44WjY4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOFdKOFBDTS1lV042eWR3RFhOOVF0
NG44WjY4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzM5MDYxL1hMS1hFbE8wTDJMZzFYclR6TGE5NldEYlZ5Yy5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wJEAwDQYJKoZIhvcNAQEL
BQADggEBAAC7+WhFRa5VIgmH6Xn7nahEYby7ceR4XJ4OzzBWjproc0Jmq6emUJOk
eaacYBU4unM0Yx7kwqZjqcqEkDStNbRJbddwN4o03mAgu8E4TDOlA+FZ/uefdL1D
f8ZZaan6YLm29fH8/bP46xmkMOR9uPKtCz26YG2ZVPVZtkU7zMhuNcvYmdzcdaEf
N6aqsE0MJq04hWVRVzj2qr4w9esQSAuM1M5dVR4ZAT6rv2jQ2+x9zGzLeamPvjDH
sXpYyoFBgmkQJA3kr9CN7KyGdGw1nXvRijegglhsAASyIAnrxU9LMJFjbxCDbDAm
T35AZMAfz9sqlJmH1tbqsclxmi3KZCI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:10 2026 by rpki-client