Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa
File:                     30tPl69056traOGJH4Ob9nl2keE.roa (raw, json)
Hash identifier:          rkXWLnzAgLJSxPXU0KwalcIuXV74TRLnNkXNl16LCEM=
Subject key identifier:   DF:4B:4F:97:AF:74:E7:AB:6B:68:E1:89:1F:83:9B:F6:79:76:91:E1
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       58
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa
Signing time:             Tue 31 Mar 2026 08:16:15 +0000
ROA not before:           Tue 31 Mar 2026 08:16:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23618
IP address blocks:        117.18.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Mar 31 08:16:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF4B4F97AF74E7AB6B68E1891F839BF6797691E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:be:2e:09:14:aa:ef:60:11:46:4e:74:c4:
                    10:d0:3a:9d:bb:c6:71:f6:f1:70:f7:2f:60:bf:1f:
                    d0:fc:bf:26:c3:40:89:87:13:6e:05:40:c5:44:3b:
                    9d:4d:7d:20:b4:a7:69:7b:76:45:db:27:ae:ec:4d:
                    43:42:23:31:f5:ad:f4:41:96:ad:17:02:11:6c:b3:
                    c7:c9:e5:8f:4b:1f:5a:c0:d6:97:5c:af:98:37:68:
                    d4:cd:eb:9c:1a:87:a4:aa:bc:d5:f8:dd:ad:51:c1:
                    15:87:76:b9:7d:f1:78:ac:d4:2b:8f:b1:d0:e6:2f:
                    36:8d:4e:bc:f8:61:a2:15:99:59:31:16:69:5d:a0:
                    6a:fa:13:95:ae:a7:4f:be:0e:23:07:8f:04:35:2d:
                    17:09:c2:4e:3c:7c:79:ca:da:f9:49:8e:de:32:ab:
                    d3:c6:a2:2e:fe:d7:d4:c7:a5:19:e2:37:bf:86:03:
                    41:77:e6:a6:a6:61:bc:c1:80:8c:ef:0f:07:36:dd:
                    19:75:0b:0e:0d:8e:9d:36:b4:fe:44:9e:ee:0d:88:
                    52:b9:4f:57:b7:3b:93:0c:72:a2:2f:ec:4c:98:aa:
                    8d:c1:ab:b4:39:92:c9:ce:92:05:d2:7c:4a:07:db:
                    50:6a:4d:c2:9b:3f:d6:ff:2b:e4:34:61:5f:d0:89:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:4F:97:AF:74:E7:AB:6B:68:E1:89:1F:83:9B:F6:79:76:91:E1
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:85:29:d7:aa:34:97:ea:58:e3:fc:21:78:5d:a9:52:66:
         3e:55:9c:4e:23:6d:7b:1a:92:f1:d0:2a:da:ab:f9:15:71:b3:
         53:9a:b4:1c:f3:b4:23:94:02:74:c1:2f:41:7d:65:50:6f:dd:
         46:96:39:a9:29:a1:f7:71:1b:10:95:a1:8f:e2:93:db:16:98:
         39:24:3d:2e:7e:74:cb:a9:c5:14:4c:cc:c3:c5:64:a2:b3:e5:
         b9:b9:10:34:50:ba:cd:c9:0c:be:bc:fb:a5:dd:72:b4:3a:20:
         4a:a9:e5:32:9e:d6:06:59:6e:b2:21:f6:dc:b9:a0:94:79:b4:
         85:7b:92:51:45:11:7c:d7:d8:ac:b4:8e:e2:9e:06:77:fa:58:
         49:49:af:a0:5c:07:b1:56:92:2d:7e:82:0e:1a:f4:f6:dd:c3:
         1d:05:f5:bb:44:bc:fd:2b:04:09:65:7d:1e:fb:ce:2f:85:06:
         34:c2:d5:25:62:a4:35:f4:18:de:56:b6:ac:32:84:70:a6:24:
         cd:5c:9c:5d:b0:9e:13:54:d2:c9:7d:75:40:01:15:9e:cd:6e:
         fb:b8:65:e1:04:fd:23:56:8f:92:02:89:98:34:e6:c4:aa:e2:
         67:c5:6c:a6:0d:e1:c9:62:bc:c9:48:d2:24:ea:e6:5f:45:67:
         f0:28:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:47 2026 by rpki-client