Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30143/AYUqY_gAfd3he7BOuqWVzXLHK-4.roa
File:                     AYUqY_gAfd3he7BOuqWVzXLHK-4.roa (raw, json)
Hash identifier:          yl9gyaIAXM54FbVM5qUrHoAqRRoCv2YiuIK+nM6pymQ=
Subject key identifier:   01:85:2A:63:F8:00:7D:DD:E1:7B:B0:4E:BA:A5:95:CD:72:C7:2B:EE
Certificate issuer:       /CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
Certificate serial:       3A
Authority key identifier: 95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/AYUqY_gAfd3he7BOuqWVzXLHK-4.roa
Signing time:             Mon 07 Sep 2026 08:33:35 +0000
ROA not before:           Mon 07 Sep 2026 08:33:35 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     18266
IP address blocks:        2001:e58::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
        Validity
            Not Before: Sep  7 08:33:35 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=01852A63F8007DDDE17BB04EBAA595CD72C72BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:43:a5:30:46:ee:58:da:89:ea:9f:ec:26:
                    8c:c6:da:70:ed:b6:73:99:25:92:f2:a8:64:27:b3:
                    5d:e7:03:24:de:6a:6e:8f:22:cd:1d:3e:9b:58:62:
                    52:68:c9:2a:ea:d0:64:f9:4f:ef:d2:26:10:17:6f:
                    f2:85:24:8e:14:fd:7a:d1:f6:d3:eb:83:2c:62:8c:
                    9b:ac:7d:b8:39:31:7a:a9:f1:cc:4d:68:72:3d:ff:
                    8f:12:d2:c6:3f:e4:18:44:f6:fe:39:24:9c:21:8a:
                    56:a4:cb:61:a1:bf:e1:76:ec:c0:da:05:d5:6a:d4:
                    2a:6b:47:6d:86:0e:fc:da:ae:bc:3c:18:dc:54:51:
                    65:c4:b7:90:1d:cd:99:a1:66:b5:b6:e2:9b:06:2c:
                    f0:7c:68:02:5a:80:95:f5:64:5b:a0:98:77:4c:34:
                    e7:dd:b7:8f:b6:f2:e7:b1:80:09:ce:bb:c6:65:ed:
                    96:e5:0c:e7:38:83:76:f1:ca:2d:38:3a:fd:a2:32:
                    a7:8e:e6:f5:21:de:5b:3b:56:49:3c:b7:33:49:01:
                    94:b0:95:db:9f:91:96:51:ab:da:6a:4f:a5:66:e2:
                    99:12:39:7a:25:28:ae:3f:ac:55:e0:c5:21:55:74:
                    88:14:79:ae:68:25:bf:05:60:18:82:38:11:82:d7:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:2A:63:F8:00:7D:DD:E1:7B:B0:4E:BA:A5:95:CD:72:C7:2B:EE
            X509v3 Authority Key Identifier:
                keyid:95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/AYUqY_gAfd3he7BOuqWVzXLHK-4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e58::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:c4:dc:83:32:21:69:5a:fd:41:e9:f6:48:38:7a:fe:1e:
         1e:69:20:d5:64:f8:c8:c3:2c:7d:26:77:9d:75:76:55:07:56:
         1c:26:91:0a:f9:50:d4:b7:6a:61:c1:90:e5:ce:63:aa:a0:b5:
         7a:58:e8:97:10:fe:28:84:1c:01:ee:be:40:df:e4:e6:9a:21:
         bf:99:ba:54:f0:9b:3e:ff:d0:7f:d8:86:da:e1:79:99:9e:b1:
         b0:6c:a7:8d:e1:fd:ec:82:bd:2f:26:8b:7e:1a:92:4e:53:a0:
         7c:3b:e5:4e:40:37:67:79:85:3d:31:96:27:d8:66:19:94:60:
         40:1c:8f:09:6c:9d:9e:cd:6f:83:19:8b:cd:e9:c9:97:8b:b2:
         50:fb:e9:f9:dc:0d:65:49:73:c5:85:cd:ff:4d:bc:36:b1:af:
         99:d2:13:30:a1:4e:59:ba:56:1e:cd:b9:a5:0e:15:c0:03:8d:
         85:d0:a1:7c:82:03:a2:06:65:87:63:eb:60:02:3a:00:2f:f2:
         2e:79:38:d3:58:80:2d:94:8c:b0:13:a4:d1:40:c5:d0:0d:64:
         aa:b2:89:76:26:cd:5a:15:50:5c:06:c0:3a:a3:21:68:d0:b5:
         d5:05:be:7e:f4:3a:37:13:58:b0:cc:91:e0:f4:10:70:f2:fc:
         de:74:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:45:32 2026 by rpki-client