Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/sqmARoP4_7VlOtUgQ43GP2EMPIc.roa
File:                     sqmARoP4_7VlOtUgQ43GP2EMPIc.roa (raw, json)
Hash identifier:          hUauns3FVkUu3AUw4M/7ltFOSSDbQI//ZA+wHXmPMAg=
Subject key identifier:   B2:A9:80:46:83:F8:FF:B5:65:3A:D5:20:43:8D:C6:3F:61:0C:3C:87
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       55
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/sqmARoP4_7VlOtUgQ43GP2EMPIc.roa
Signing time:             Tue 31 Mar 2026 08:14:24 +0000
ROA not before:           Tue 31 Mar 2026 08:14:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        2001:c30:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Mar 31 08:14:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B2A9804683F8FFB5653AD520438DC63F610C3C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:73:0b:73:06:c9:6e:0e:23:69:08:a1:39:
                    ba:9a:0a:19:82:52:6d:fd:ff:63:12:bc:bf:a2:c3:
                    d2:bc:4a:47:a4:93:02:ff:e8:3b:48:b6:54:4c:3b:
                    0a:7b:dd:23:3c:d5:ce:8d:d6:8a:50:f3:9a:3f:a5:
                    92:55:3d:12:f9:6a:a9:a4:5c:74:5a:04:d0:21:29:
                    52:3d:2e:ef:22:59:ca:3a:76:0d:da:0c:a2:7c:16:
                    4c:cf:da:52:68:b0:32:82:35:01:45:63:9a:5b:8e:
                    07:ed:11:61:9f:e8:82:9a:9d:bf:4f:d8:c7:72:f4:
                    c5:5f:16:ab:20:07:99:43:85:f3:6e:a1:01:9e:62:
                    da:42:15:26:49:91:84:04:3d:f6:4f:1a:e0:53:ee:
                    4b:68:41:07:01:73:c0:6b:d9:ef:b4:54:22:27:74:
                    42:7f:51:45:0f:a8:53:22:e1:7d:9b:e9:3d:5e:97:
                    a5:28:72:bd:c3:33:50:b1:6e:b2:4d:34:08:d8:17:
                    c1:71:de:b3:38:a0:be:23:ee:2f:68:d6:13:6f:1e:
                    dc:dc:f6:a6:c8:22:36:ab:d5:51:02:45:bf:ec:7f:
                    83:52:45:1b:37:0c:d4:8b:e8:03:bd:f2:4b:92:0f:
                    5d:db:35:64:d0:f2:e3:a9:b7:5e:79:d6:e0:84:52:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:80:46:83:F8:FF:B5:65:3A:D5:20:43:8D:C6:3F:61:0C:3C:87
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/sqmARoP4_7VlOtUgQ43GP2EMPIc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:63:d2:3e:41:2e:2d:d4:dc:a6:86:4f:8d:db:f4:47:05:16:
         36:7f:b9:16:03:a0:ec:62:d3:30:81:b4:98:41:60:10:2f:f3:
         f1:92:ca:fe:b2:f6:84:f9:8d:83:57:99:8d:e5:bd:32:e1:fc:
         c1:ca:df:41:b6:1d:46:76:e8:1f:27:e7:43:ab:81:d2:0c:e5:
         11:eb:7b:d3:c7:c9:43:c8:2b:00:7a:ae:21:90:04:4d:f1:ce:
         dd:13:00:98:7c:b3:39:b7:03:14:f0:8f:a4:8d:c6:07:e5:00:
         97:4e:0b:03:9a:f4:67:e9:8c:3d:cf:2a:77:11:66:16:c4:31:
         46:02:4f:b2:f1:5f:73:e6:47:63:32:c1:ed:ac:f9:0d:73:34:
         9e:33:7f:4f:a2:e6:66:ef:da:d2:ef:b9:fa:0f:bd:bd:72:59:
         14:b0:4d:7a:8e:9f:79:c2:c1:14:01:98:e4:1b:4e:23:af:42:
         bb:61:a5:ef:bb:91:f4:3e:64:73:3e:81:08:29:f3:d8:72:b1:
         7a:91:7e:c6:af:64:2a:48:8c:71:10:81:8b:0c:ca:ad:54:68:
         f6:d9:8a:9d:21:6a:06:77:8f:2d:3f:51:c1:eb:36:53:70:01:
         0b:34:f5:7a:d4:09:81:7b:88:db:e6:c0:37:b0:cc:3f:05:3b:
         90:88:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:25:30 2026 by rpki-client