Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/A3Oevf-hjgx1oygSRBBScIBK3jo.roa
File:                     A3Oevf-hjgx1oygSRBBScIBK3jo.roa (raw, json)
Hash identifier:          WnosYAFLcRRMpn4IrT1OBrLiltG9N+UqV4vRZwcJbgc=
Subject key identifier:   03:73:9E:BD:FF:A1:8E:0C:75:A3:28:12:44:10:52:70:80:4A:DE:3A
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       1D
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/A3Oevf-hjgx1oygSRBBScIBK3jo.roa
Signing time:             Tue 03 Feb 2026 15:21:33 +0000
ROA not before:           Tue 03 Feb 2026 15:21:33 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        2407:9900:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Feb  3 15:21:33 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=03739EBDFFA18E0C75A3281244105270804ADE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b8:36:67:4f:48:d3:2e:c5:cd:e5:f8:b1:51:
                    a6:08:65:e9:1f:af:4a:7b:f3:e6:7f:c1:bf:42:80:
                    19:ad:d1:07:75:48:6b:4d:8a:79:90:a3:bc:aa:86:
                    cf:f8:73:e9:b4:52:d0:c3:14:ce:f4:2a:bb:50:ac:
                    22:fd:cb:73:44:cc:5d:27:73:d9:fa:24:b3:fe:d0:
                    dc:09:f1:ef:7f:6a:7a:d2:97:89:2f:de:68:a7:14:
                    5a:0f:e2:f6:9b:bf:45:df:21:fa:1d:62:1f:d7:96:
                    98:4f:ba:70:29:5c:59:07:aa:fa:0e:64:a9:c7:d0:
                    f2:0c:97:ac:5a:34:34:8a:19:70:00:32:b8:7a:9d:
                    ed:40:90:c9:a6:4c:2a:8b:b0:cd:f1:ef:de:7d:6c:
                    0d:28:57:f1:f0:f4:a6:0f:8b:c8:71:72:b2:c3:e9:
                    c2:99:fe:2f:0a:6d:3c:31:a4:22:bc:fd:dd:40:47:
                    41:d2:68:97:2d:f9:f7:90:16:72:46:55:7b:2e:17:
                    71:d2:95:cc:22:53:11:5e:10:a1:09:8e:b0:b3:7e:
                    a2:11:65:7e:07:21:c2:1f:99:41:50:f9:a2:c1:e6:
                    60:92:3e:da:3e:99:9c:11:8a:54:e6:9c:2f:73:1c:
                    90:27:e8:79:e8:62:a3:16:85:46:69:d4:c4:0b:48:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:73:9E:BD:FF:A1:8E:0C:75:A3:28:12:44:10:52:70:80:4A:DE:3A
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/A3Oevf-hjgx1oygSRBBScIBK3jo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9900:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:d1:77:39:a9:82:61:dc:16:14:e1:35:ba:4b:90:e3:df:
         e4:43:61:6e:8d:d9:ba:36:f2:f6:9e:5e:55:9d:38:b1:1d:e5:
         ae:fe:3b:7a:f9:0c:2f:13:23:92:6e:d0:6d:22:dd:dd:c7:a0:
         2b:b3:8f:63:6f:2f:1a:84:8b:5c:09:02:dd:5a:40:fb:50:0e:
         e3:2a:ff:2d:e0:8f:28:b4:18:0d:34:c6:c4:9d:6a:60:b4:d7:
         9d:d4:44:f9:42:a2:ef:32:28:13:5b:6d:42:f8:44:df:59:94:
         0c:6e:b9:a7:0d:2c:6d:fb:60:8c:a9:41:cd:87:63:fc:8e:f6:
         e0:ff:88:98:b0:e1:a3:9e:7d:01:0e:b2:e0:eb:5d:66:fc:8e:
         4e:55:d1:6e:f4:f1:4d:b5:e2:e4:62:71:00:12:78:04:3e:ed:
         58:d5:c2:a0:66:7f:44:0e:f3:0c:c6:a4:72:6c:a6:47:eb:cb:
         47:35:c4:b0:7b:a8:a9:52:1c:fc:10:f9:b8:ae:fa:15:59:73:
         b7:cb:76:d4:b4:73:00:13:c8:44:e0:af:24:8c:85:08:2c:24:
         53:ca:21:b9:51:d7:e9:af:99:1b:50:33:c5:30:7e:37:58:5a:
         31:d3:72:77:f7:b9:97:96:4e:a7:7f:b9:96:f4:ea:55:5c:89:
         7b:18:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 18:10:42 2026 by rpki-client