Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/YFfAdiNU56d5gCBsQHBlGts2B14.roa
File:                     YFfAdiNU56d5gCBsQHBlGts2B14.roa (raw, json)
Hash identifier:          6y2K1sPB9PEivYld9quxHmPlm4i2m5MJ390FBHgSYqs=
Subject key identifier:   60:57:C0:76:23:54:E7:A7:79:80:20:6C:40:70:65:1A:DB:36:07:5E
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       76
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/YFfAdiNU56d5gCBsQHBlGts2B14.roa
Signing time:             Tue 31 Mar 2026 07:27:12 +0000
ROA not before:           Tue 31 Mar 2026 07:27:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18131
IP address blocks:        2402:c800:ff7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Mar 31 07:27:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6057C0762354E7A77980206C4070651ADB36075E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:5b:11:6a:e0:cd:81:e6:51:e2:54:85:78:
                    1a:8f:04:6a:84:3d:9f:04:42:eb:e7:66:8b:30:60:
                    2c:f4:5f:d9:57:04:1d:fd:04:5b:64:14:ed:f5:07:
                    89:b6:77:a4:6a:ae:7f:09:9a:de:a5:b7:c6:34:eb:
                    b7:87:4c:64:b7:96:e2:21:88:10:e3:ad:15:3b:4b:
                    06:8b:47:ed:8e:68:de:e4:a2:9e:dc:df:1f:04:fd:
                    f8:69:9b:df:b9:05:7b:20:ba:29:0b:6a:90:2b:4d:
                    c2:38:e5:24:5f:ef:92:69:1f:54:f4:f2:c3:14:e6:
                    40:d7:b2:0e:77:57:ab:92:4a:de:9f:13:76:6c:84:
                    eb:c6:23:25:91:42:3e:48:09:0b:cf:55:06:95:d0:
                    95:62:c4:79:e1:a3:69:02:5e:04:6b:27:79:b5:ed:
                    33:bf:86:2b:cf:de:92:05:47:eb:cd:31:ef:19:7e:
                    5b:60:a3:45:15:1b:5d:1b:29:7e:13:90:b6:77:5c:
                    26:26:75:fd:d9:ea:52:74:5d:1d:44:3c:14:73:17:
                    cf:ff:f8:f8:12:9f:0b:c2:6e:be:02:61:18:7b:7d:
                    71:02:3e:ad:4f:76:23:5b:af:03:a1:dd:f4:1a:67:
                    10:b4:b1:3f:9a:4f:96:65:9f:af:bc:5c:e7:98:e8:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:C0:76:23:54:E7:A7:79:80:20:6C:40:70:65:1A:DB:36:07:5E
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/YFfAdiNU56d5gCBsQHBlGts2B14.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ff7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:64:2b:29:49:0b:6d:5e:94:35:c1:ef:d8:3e:95:ec:95:
         98:98:31:2c:c3:b2:7a:a7:89:49:53:72:d7:01:1f:f2:17:f9:
         70:37:5b:94:d2:ae:3c:60:63:af:01:bd:8d:2e:31:3c:2a:35:
         f4:c0:6f:60:d2:41:1b:27:c6:a4:a2:09:38:0f:03:12:0c:62:
         92:7b:1c:58:96:ed:1b:b3:4e:c2:56:83:af:a7:19:92:22:cc:
         f2:96:7b:96:d5:99:7a:76:cb:7d:84:4c:ba:15:62:f5:d0:00:
         cf:7f:ac:ff:7d:1c:6e:ca:91:fe:a2:f3:66:bc:b5:ed:bf:f2:
         a3:46:f8:f5:e5:ae:73:f6:5e:cb:71:2f:4f:28:3e:05:c9:e4:
         f0:ad:8a:c9:e7:90:c4:32:2b:c5:21:19:bf:10:4b:cd:cd:ef:
         e4:4f:4c:15:ec:f5:d4:37:e0:5f:75:18:56:55:b3:5f:5d:30:
         64:2d:ac:20:57:33:9c:13:11:fd:6d:4b:79:55:c9:5e:bb:79:
         79:d2:aa:7e:cd:20:ae:4d:6f:08:c2:ea:dd:da:a2:86:43:31:
         20:8d:f2:a4:49:3c:94:ed:ee:33:39:c8:9e:d1:21:c6:07:91:
         3e:d8:26:b5:2e:74:04:16:4b:77:1b:22:c5:44:c8:56:fa:0a:
         e7:b5:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 12:47:49 2026 by rpki-client