Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa
File:                     l4qqsrk44JN4FKmjj_ig25y0Gkw.roa (raw, json)
Hash identifier:          eO/nHRJAWlo5Q2pRb4bjkyiFnwZePChsC/GSjqxzGn0=
Subject key identifier:   97:8A:AA:B2:B9:38:E0:93:78:14:A9:A3:8F:F8:A0:DB:9C:B4:1A:4C
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       59
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa
Signing time:             Tue 31 Mar 2026 08:14:26 +0000
ROA not before:           Tue 31 Mar 2026 08:14:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        2405:1200::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Mar 31 08:14:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=978AAAB2B938E0937814A9A38FF8A0DB9CB41A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:9a:54:11:b5:38:0a:65:fb:e0:c6:8d:be:
                    0b:51:18:6d:a9:54:65:bc:8e:80:85:8b:cc:97:97:
                    09:8f:70:30:3c:27:a7:62:b8:cb:91:8e:7e:10:db:
                    c1:ea:03:1a:71:0c:ec:e7:00:c8:2e:c6:e5:54:d5:
                    7b:09:a9:64:17:14:d2:60:75:c2:25:2d:19:17:d9:
                    31:a4:a4:a4:ce:68:09:8c:8f:85:db:11:10:48:d5:
                    49:3d:64:32:8b:55:0b:eb:9d:28:0a:6c:a0:e7:40:
                    44:3b:ba:ab:ac:22:c5:01:b5:21:f1:70:32:c9:44:
                    44:04:c3:7c:a4:73:fa:37:f4:7b:65:ee:04:e6:4e:
                    97:25:bd:57:95:e7:b5:f4:3f:8a:86:1d:6e:a2:64:
                    31:59:dd:3e:08:17:6b:7f:3a:70:17:2e:e2:05:53:
                    f9:b7:83:57:5c:ca:73:70:ac:eb:d2:86:ac:47:53:
                    92:24:cf:20:2e:75:fc:52:c8:fc:b4:84:86:ed:98:
                    72:d4:ad:78:bd:c2:2a:8d:c8:d3:77:b2:b9:70:a8:
                    fc:53:1b:57:a9:62:5f:5a:09:9d:ad:2a:18:17:21:
                    4a:f5:34:ab:c6:70:ed:39:28:4a:08:1a:c4:7a:95:
                    e1:e4:bf:3a:a4:de:62:0c:05:cb:cc:2c:eb:92:0c:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:AA:B2:B9:38:E0:93:78:14:A9:A3:8F:F8:A0:DB:9C:B4:1A:4C
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/l4qqsrk44JN4FKmjj_ig25y0Gkw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1200::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:86:b8:87:c9:37:04:3c:82:76:cb:03:f7:8a:18:3c:10:
         e9:db:54:66:4f:fc:5a:6e:4e:b1:6c:b9:3f:00:a6:c8:bd:d1:
         41:ca:00:23:e2:b8:8c:62:3b:ce:50:2b:95:fe:7d:e0:94:cc:
         fa:95:2b:e9:4c:5c:88:b4:d2:af:4b:60:ea:18:eb:85:50:d9:
         ec:9f:8f:97:87:4c:86:ca:ec:d6:8d:8a:86:45:36:a2:5a:af:
         a0:cd:c5:ff:29:92:9a:4e:b2:a2:28:3b:39:f8:cc:77:a0:67:
         0b:d3:b1:0d:ce:89:e6:3a:9c:54:11:c8:f2:ba:94:b8:92:89:
         cd:cf:94:04:f9:6e:70:15:b3:b6:3d:d4:75:aa:3e:da:62:f3:
         82:b1:97:c4:ea:d5:aa:bc:a5:f3:16:f8:52:15:29:18:f4:18:
         af:a4:60:2b:bb:cb:24:7f:8b:85:e7:8a:d8:83:26:79:33:66:
         c5:f3:88:eb:24:b2:b5:e8:f8:99:ac:3d:51:08:62:75:01:21:
         fc:51:f0:ec:0c:ba:f8:6f:16:83:b5:ee:ff:95:13:ae:86:f4:
         ec:67:d4:93:1e:ee:22:80:b9:99:c1:5c:5b:c9:37:1a:19:b1:
         26:59:99:9d:4c:5b:9a:c1:c7:74:73:cf:f8:77:c1:49:2c:ae:
         d0:ba:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:58:25 2026 by rpki-client