Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/qUqdWE0GKbfthu15WjPL_LZseuc.roa
File:                     qUqdWE0GKbfthu15WjPL_LZseuc.roa (raw, json)
Hash identifier:          p2z1yHLIQpZ+HaqvYUgrd/NVji+YEKIeu2pNOKIDqoI=
Subject key identifier:   A9:4A:9D:58:4D:06:29:B7:ED:86:ED:79:5A:33:CB:FC:B6:6C:7A:E7
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       4A
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/qUqdWE0GKbfthu15WjPL_LZseuc.roa
Signing time:             Tue 31 Mar 2026 08:14:22 +0000
ROA not before:           Tue 31 Mar 2026 08:14:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        2400:3800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Mar 31 08:14:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A94A9D584D0629B7ED86ED795A33CBFCB66C7AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:11:7a:f2:79:23:a7:c2:58:f9:e5:25:ed:
                    8a:e6:d4:e8:ca:a4:71:d4:c7:57:0c:6c:82:53:31:
                    38:18:be:c1:dc:05:64:1c:6d:bb:ab:6a:f9:24:1c:
                    2d:5e:47:6c:9d:da:62:d0:5a:0a:41:b1:ec:19:9a:
                    8a:be:2d:ab:ce:30:8c:3a:64:fd:19:31:15:1c:de:
                    f2:d6:5a:ad:60:a3:42:88:ff:a9:e5:fd:11:d7:d2:
                    30:46:04:f2:16:a1:f7:02:c6:f4:d4:e9:9b:d5:1d:
                    d7:9d:99:07:d5:44:15:de:56:4a:b8:66:2c:4d:43:
                    7c:a0:32:9d:ce:13:8e:e5:fc:03:c9:66:b6:33:3e:
                    b0:27:ab:18:8a:44:00:88:ad:fa:32:a2:93:f9:64:
                    d1:5b:60:a9:22:23:7b:84:02:fd:f3:51:bf:ad:d4:
                    a5:88:a2:ae:a4:af:61:42:6c:54:76:a9:ef:da:95:
                    89:b7:7a:7b:a3:be:cf:c1:d7:bd:29:cd:d9:c3:f4:
                    24:bc:85:78:24:b0:3d:b3:74:3a:20:ac:22:ef:74:
                    11:fe:0a:b5:00:b4:3e:a0:e9:61:ef:6b:60:02:0b:
                    d3:37:77:3b:28:35:e9:7b:0c:87:64:19:e0:57:f4:
                    26:71:7e:fc:5e:98:50:99:83:2b:d3:ad:b2:49:00:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:9D:58:4D:06:29:B7:ED:86:ED:79:5A:33:CB:FC:B6:6C:7A:E7
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/qUqdWE0GKbfthu15WjPL_LZseuc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:c5:03:5a:ee:27:60:0e:46:77:a1:54:c0:4f:ab:a1:b6:
         69:3c:07:50:e4:08:56:66:90:f5:d5:d2:8f:14:5a:13:50:f3:
         d3:55:25:57:fc:41:fc:a9:3a:0f:2d:f1:9f:b8:c0:c0:b7:7e:
         5e:81:1c:52:51:62:e8:56:96:f2:ff:2c:70:07:b7:32:2d:5f:
         85:28:cc:52:73:80:8e:91:65:f9:71:77:08:e5:a8:7f:ae:24:
         01:08:08:15:23:06:51:de:49:54:52:b0:bc:3e:e6:a7:43:89:
         a1:d2:d8:54:26:65:17:98:00:df:f8:51:b9:b1:5c:ce:bc:46:
         1c:ae:0d:54:33:39:53:67:b1:74:89:31:68:b6:f6:d6:d2:b7:
         80:61:0b:75:c4:cd:36:2d:71:ca:71:bb:a8:6a:07:9d:96:93:
         f6:94:a2:26:f4:15:89:0a:1f:0a:df:00:b2:cd:ee:cd:cd:4d:
         33:5c:a1:1e:60:00:4b:4f:e1:f4:bf:36:a2:e0:66:1d:66:3f:
         ab:4c:44:c5:0a:dd:3f:61:d2:7c:dc:49:81:43:96:f6:de:37:
         ac:db:38:d2:a3:90:12:06:51:ac:37:48:6f:b6:34:08:6b:01:
         7b:7d:26:90:85:ce:1b:05:df:3d:f8:20:0f:ee:ce:81:bb:cb:
         e3:5f:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:04 2026 by rpki-client