Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/-TsaytSYVPsVS7zRk3eRSCMa6uE.roa
File:                     -TsaytSYVPsVS7zRk3eRSCMa6uE.roa (raw, json)
Hash identifier:          MFIfWcySBsNx9/4UnDgYwfV/gdz+YR6OPDzF3Sqwyc4=
Subject key identifier:   F9:3B:1A:CA:D4:98:54:FB:15:4B:BC:D1:93:77:91:48:23:1A:EA:E1
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       56
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/-TsaytSYVPsVS7zRk3eRSCMa6uE.roa
Signing time:             Tue 31 Mar 2026 08:14:24 +0000
ROA not before:           Tue 31 Mar 2026 08:14:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        2001:c30:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Mar 31 08:14:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F93B1ACAD49854FB154BBCD193779148231AEAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:52:ff:94:1d:2d:ba:21:d2:b5:49:d8:56:
                    30:8e:48:b3:25:12:e5:9a:56:94:87:f0:b0:b5:0f:
                    37:7f:98:c7:ae:d9:87:3f:ad:c2:33:a9:95:84:99:
                    7b:87:cc:00:d7:cc:ec:4f:d8:39:f4:73:d4:d2:4b:
                    4f:79:98:02:30:ce:66:d0:d6:ed:e9:37:3f:bb:c7:
                    3d:39:5c:5d:50:6b:f4:9c:34:1f:a9:51:00:79:1c:
                    aa:92:17:0a:bb:a6:0f:bf:7a:3c:24:cf:87:9f:d6:
                    3c:6d:37:2a:1c:50:82:69:98:06:41:6e:64:8a:22:
                    9f:5c:d4:25:88:4d:60:47:33:78:71:b5:d3:3a:8e:
                    6d:2c:9c:27:a3:8e:fb:c5:d3:bd:06:41:3c:43:e7:
                    fc:96:c2:ea:8d:6a:96:d3:fe:71:9f:5c:b9:a7:5b:
                    3b:0f:a4:86:44:ba:66:d0:1f:b4:a4:f5:fe:72:2f:
                    f9:9c:83:85:25:30:83:26:b1:db:98:93:63:fc:72:
                    75:96:1e:73:78:ea:bd:0e:c6:3b:38:dd:70:ca:6b:
                    a1:8f:2c:a6:4b:94:a8:85:35:7b:f7:5f:59:77:e5:
                    9a:ec:7a:89:32:3a:ff:78:05:46:ea:ef:d4:03:ba:
                    1f:f8:40:8a:c8:ab:20:a5:1e:bf:03:9d:8b:63:5e:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:1A:CA:D4:98:54:FB:15:4B:BC:D1:93:77:91:48:23:1A:EA:E1
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/-TsaytSYVPsVS7zRk3eRSCMa6uE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:27:70:22:2e:dd:00:26:d3:5e:31:8d:54:af:9f:4b:4e:f3:
         e7:8e:5f:a2:63:1f:e3:1c:98:e1:dd:7b:e1:82:e5:e8:11:c0:
         4b:8a:90:8d:e7:e9:f0:56:90:b7:68:03:87:37:1c:ee:4e:43:
         0e:25:4e:8a:86:3d:b8:df:b6:47:9a:80:21:03:19:44:d8:da:
         c5:7c:fb:23:81:e1:61:eb:55:af:58:e5:dd:30:a6:d6:bf:57:
         78:92:e6:15:1c:06:55:bf:b4:18:b8:39:cc:dd:11:46:0d:a5:
         3f:3e:7d:75:96:63:b5:07:a6:6d:08:b9:86:77:e5:c7:3e:da:
         97:b6:ae:77:a5:0a:21:6a:bd:11:66:df:52:05:60:d8:a0:2c:
         01:6d:8c:ed:32:48:b9:e3:1f:57:f6:1f:d0:69:bb:50:7e:1d:
         7b:ce:13:3b:89:32:db:73:82:68:37:48:10:ec:99:45:23:fd:
         a6:bf:d4:79:10:84:8c:9e:66:1f:93:fe:5b:4f:6a:dc:89:fb:
         59:ae:41:fe:fd:4d:fc:6f:d4:ca:32:37:16:a2:37:12:38:eb:
         71:b5:3f:f3:33:72:42:6e:b4:aa:da:0e:27:4d:7d:3a:0f:38:
         61:96:96:1b:cd:64:37:2b:4a:b4:98:f7:86:cf:9d:7d:b0:09:
         5c:d0:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:58:26 2026 by rpki-client