Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/tuRKj2vmOWf1QO4j17KUMVywV9g.roa
File:                     tuRKj2vmOWf1QO4j17KUMVywV9g.roa (raw, json)
Hash identifier:          yw+f2kAD48t0xop7ecI4Vsf6VeDAZgumBnLGHr95obk=
Subject key identifier:   B6:E4:4A:8F:6B:E6:39:67:F5:40:EE:23:D7:B2:94:31:5C:B0:57:D8
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       58
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/tuRKj2vmOWf1QO4j17KUMVywV9g.roa
Signing time:             Tue 31 Mar 2026 08:14:26 +0000
ROA not before:           Tue 31 Mar 2026 08:14:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        2001:c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Mar 31 08:14:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6E44A8F6BE63967F540EE23D7B294315CB057D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:1e:b0:7f:5b:2e:58:cd:c6:06:de:a6:93:
                    06:b8:ec:bd:7e:31:73:a3:a0:97:20:93:2d:93:b4:
                    d1:b6:57:93:49:98:18:c1:42:3e:00:c7:73:ad:ea:
                    fb:b3:74:49:ab:89:c8:3a:3c:14:0f:c8:16:f0:26:
                    51:68:b7:c8:1c:56:e8:ef:ea:a2:7f:5d:6d:3c:dc:
                    8c:a4:7d:a6:56:d8:10:57:49:4d:e4:b7:43:9e:5a:
                    f3:c7:f5:6b:43:cb:d5:ca:01:b8:13:43:7c:b5:57:
                    2d:76:5a:be:ae:6d:36:f6:b5:49:66:af:92:39:ed:
                    c6:71:47:e3:37:2a:82:ee:c7:12:0a:c6:ba:e5:47:
                    fd:7a:6e:a5:4c:73:08:f2:7f:27:1a:40:05:4e:d2:
                    66:8a:bf:3a:4e:ce:4c:13:18:28:10:85:a8:53:5e:
                    df:27:b3:25:79:3e:5b:61:72:a6:2e:3b:66:5b:69:
                    99:84:aa:a1:5c:b8:12:7e:e1:34:b0:b1:75:da:3a:
                    2b:bd:cd:5e:13:4c:65:f5:61:0f:81:50:f6:66:24:
                    8e:e0:14:84:d2:f0:e4:ea:31:b3:5d:ca:a4:0b:d2:
                    82:5c:02:9d:0f:79:a6:00:f8:b1:e7:09:3c:7b:b2:
                    5d:48:96:78:dd:69:8e:8b:11:ec:f0:2d:92:75:52:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:4A:8F:6B:E6:39:67:F5:40:EE:23:D7:B2:94:31:5C:B0:57:D8
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/tuRKj2vmOWf1QO4j17KUMVywV9g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:f4:c6:0b:e6:ca:c1:21:eb:8f:2d:6f:a5:85:f0:9c:93:2a:
         20:37:2e:23:8e:73:ca:35:93:f9:bb:34:69:65:13:47:09:4e:
         a4:5e:6d:cd:c7:b7:5a:98:f0:9e:1f:2e:7d:8b:f9:8f:63:6f:
         b9:1a:8d:a0:0f:74:97:e1:60:56:86:66:49:0f:35:2c:b7:2e:
         6c:72:10:f9:a0:bf:b4:57:7e:a2:96:4e:68:f5:ec:1b:59:9b:
         cb:02:b1:02:6e:82:06:51:19:47:36:2b:8e:2c:a3:52:97:33:
         e4:6c:f6:7f:d1:6c:9e:4a:27:d5:33:bd:7d:54:fd:06:7d:56:
         05:8b:c1:5d:9c:68:4e:68:98:eb:67:3a:22:c8:c5:98:c9:a2:
         1a:e9:8c:61:b0:ff:4e:2a:20:14:7a:dd:bc:fb:b2:9d:8f:fc:
         e7:1c:18:bf:c2:75:e8:42:82:ed:48:38:13:b0:b4:ea:40:f1:
         56:3f:7b:89:e9:29:b0:df:96:77:7e:ba:e8:4b:80:e1:88:ce:
         00:96:62:2d:ab:10:2c:6d:f5:9d:bb:e7:d1:83:76:4f:c2:ff:
         2a:9a:a2:ea:b9:f1:4b:a9:78:2b:12:87:40:24:38:aa:ab:25:
         5e:04:2b:f1:3d:b0:1f:fb:86:9a:e6:63:93:80:f3:b1:41:c3:
         af:27:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:26 2026 by rpki-client