Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30162/1qr_L4zSXOMTBTyM-EkBhfIWdaA.roa
File:                     1qr_L4zSXOMTBTyM-EkBhfIWdaA.roa (raw, json)
Hash identifier:          4v2fkLlyA8+nSV4wV971FtnVKMwQXxNhSVRTUrP9GQE=
Subject key identifier:   D6:AA:FF:2F:8C:D2:5C:E3:13:05:3C:8C:F8:49:01:85:F2:16:75:A0
Certificate issuer:       /CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Certificate serial:       47
Authority key identifier: 7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/1qr_L4zSXOMTBTyM-EkBhfIWdaA.roa
Signing time:             Tue 31 Mar 2026 08:11:21 +0000
ROA not before:           Tue 31 Mar 2026 08:11:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24295
IP address blocks:        2404:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 23:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
        Validity
            Not Before: Mar 31 08:11:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6AAFF2F8CD25CE313053C8CF8490185F21675A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:49:5e:f5:1f:f9:8d:cb:9c:80:57:1c:9c:
                    74:17:c5:dc:59:c7:ec:ca:b2:ef:6d:2c:f4:d3:d3:
                    fd:9b:eb:d4:76:a8:64:10:a8:0c:dd:f1:db:3f:dc:
                    f2:eb:bc:42:5a:83:44:aa:bf:48:30:1f:60:50:ed:
                    2f:a8:2a:ae:aa:48:54:1b:61:f7:3b:50:5f:ab:48:
                    1d:26:3c:7e:8b:08:cc:c9:7d:c6:3e:98:ed:10:83:
                    a3:e3:47:1b:c3:77:34:ef:55:64:05:d2:9e:db:42:
                    b3:cd:80:15:4b:42:8a:bf:5a:77:2a:dd:39:99:a1:
                    10:2b:62:38:74:1b:af:c9:70:cf:25:44:f3:52:ad:
                    ea:00:8b:c3:20:66:c8:0b:4f:36:c3:ad:20:2a:43:
                    82:93:7f:f9:34:2e:d5:28:4c:38:1f:43:8d:34:c3:
                    a6:49:c0:4c:dd:b5:c3:3c:e8:a6:b0:71:a3:59:41:
                    6f:85:ac:06:61:75:3a:53:5f:da:86:c9:c1:1f:01:
                    17:69:8e:0b:ec:7f:89:b3:7f:13:e2:32:fb:c0:62:
                    67:18:70:32:38:8e:21:bf:89:d2:b0:e9:dd:28:3b:
                    3d:ed:e6:94:b2:0c:0b:5d:64:68:66:a3:ba:03:c5:
                    a0:9a:0c:6f:c1:48:49:34:79:f3:23:52:d3:83:e5:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:FF:2F:8C:D2:5C:E3:13:05:3C:8C:F8:49:01:85:F2:16:75:A0
            X509v3 Authority Key Identifier:
                keyid:7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/1qr_L4zSXOMTBTyM-EkBhfIWdaA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:e8:c8:3f:38:39:61:52:d0:68:3f:8c:1d:e1:a6:d4:92:
         a9:27:70:a5:c1:b2:f8:fe:08:30:c1:9c:27:a0:27:71:7a:1a:
         87:56:64:d1:a8:aa:8c:b2:e7:b5:ca:68:cc:ca:e4:f5:57:1d:
         5c:13:28:02:0a:75:1e:c8:de:92:65:a8:f3:2c:87:6b:08:78:
         e0:90:18:2f:4f:75:e3:74:cc:08:c2:12:ac:e5:7d:05:f0:73:
         12:c1:4d:6a:76:94:b5:df:ff:93:b3:53:85:79:d0:03:a1:59:
         54:63:a8:ab:eb:77:87:5c:ba:d9:81:cf:21:46:7a:41:4e:18:
         ca:9f:79:21:38:09:cc:bd:88:6e:1a:70:2b:e4:23:f9:a4:13:
         a1:0f:df:1b:31:19:de:e3:a5:47:d2:c0:b3:34:6e:24:af:6f:
         63:4c:df:a2:62:86:13:6a:4a:76:40:8f:65:5c:44:26:a4:4f:
         e1:9d:a1:23:74:6d:83:4b:b4:55:72:8f:4b:8b:2e:17:69:10:
         5b:ed:35:e3:32:4f:6b:50:c3:11:32:1d:8d:84:f0:48:3e:fa:
         55:b2:a1:c8:ad:13:33:3a:d8:82:0e:50:bc:f9:90:9c:f4:36:
         2f:d0:eb:03:bb:52:35:e7:fb:e2:6b:90:05:25:fe:d3:5b:6b:
         9a:f1:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:20:33 2026 by rpki-client