Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
File:                     mThXovw0FMYG1ywocRw0CCI-0DM.roa (raw, json)
Hash identifier:          SjGPj07DN9FmT24vB9bZId8ZSIzWVZfwBu6HSzG2Q34=
Subject key identifier:   99:38:57:A2:FC:34:14:C6:06:D7:2C:28:71:1C:34:08:22:3E:D0:33
Certificate issuer:       /CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
Certificate serial:       02
Authority key identifier: D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
Signing time:             Thu 29 Jan 2026 15:36:08 +0000
ROA not before:           Thu 29 Jan 2026 15:36:08 +0000
ROA not after:            Fri 29 Jan 2027 14:53:57 +0000
asID:                     37906
IP address blocks:        2402:d700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A7E3E66EF830F62ED94AB7A54A88844F1C0A0B
        Validity
            Not Before: Jan 29 15:36:08 2026 GMT
            Not After : Jan 29 14:53:57 2027 GMT
        Subject: CN=993857A2FC3414C606D72C28711C3408223ED033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:bd:fd:b0:d2:cc:04:1c:5e:68:fe:fa:5d:
                    6c:25:29:f8:1e:4e:1f:8d:cd:9b:ea:d0:3b:38:ab:
                    65:4e:da:4f:a7:41:6a:09:db:42:57:40:e5:83:e2:
                    6d:42:90:45:af:93:0d:e0:9f:8b:eb:ff:98:bc:b2:
                    16:12:01:e4:1c:44:95:2c:34:06:df:8c:33:64:fc:
                    07:82:89:09:3d:91:22:c6:89:b8:da:45:0b:1d:3e:
                    f3:8a:a1:fa:19:6b:24:27:dc:a6:32:64:bc:9a:a7:
                    f3:d1:d6:38:a7:97:7c:02:26:6e:c2:81:e7:75:7a:
                    76:ac:69:c6:21:08:34:07:a8:db:9e:dd:55:5e:28:
                    0b:68:5f:35:7c:df:e2:0c:c3:9c:05:3d:2a:ef:9e:
                    ce:49:74:5f:4b:b0:36:a7:78:d5:ef:9b:c7:55:f8:
                    ae:7e:74:68:ad:bc:78:5d:2d:cf:4c:82:09:54:e7:
                    95:bb:97:c7:0a:2c:74:02:2d:63:57:19:d9:10:f8:
                    70:72:ca:0a:11:1c:1d:fe:a0:b0:00:70:c3:a4:5e:
                    b2:71:61:41:0c:5d:06:16:f0:0b:e1:32:d0:71:49:
                    91:08:8f:35:10:bf:cb:a8:8a:0c:19:ea:56:b4:af:
                    a3:0a:c8:90:ae:49:06:68:5a:d1:c6:9c:9d:83:cb:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:57:A2:FC:34:14:C6:06:D7:2C:28:71:1C:34:08:22:3E:D0:33
            X509v3 Authority Key Identifier:
                keyid:D0:A7:E3:E6:6E:F8:30:F6:2E:D9:4A:B7:A5:4A:88:84:4F:1C:0A:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Kfj5m74MPYu2Uq3pUqIhE8cCgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30221/mThXovw0FMYG1ywocRw0CCI-0DM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:7e:42:d4:43:c9:eb:3b:14:2e:8d:87:5f:4a:0e:00:b9:
         e9:1b:c7:88:1a:f6:b3:42:74:b8:00:26:9a:f5:43:7c:4f:16:
         dc:7a:be:26:99:85:2e:98:f8:a2:1e:22:30:32:3d:50:37:6a:
         b5:23:b7:0b:3b:bc:8f:32:cd:fc:7c:41:49:77:a1:d4:90:ae:
         3c:25:28:c9:b4:73:6c:32:c9:5e:f7:bf:6b:cb:f6:f3:92:85:
         34:db:a5:c3:57:2d:24:e0:bc:18:b7:10:0f:1f:46:26:56:fe:
         8d:19:15:87:01:84:f1:cd:a4:ba:71:e2:a6:ff:66:c4:6a:08:
         d9:77:00:85:72:97:c4:9a:93:be:98:f3:b2:f6:ed:b1:21:e9:
         b4:8d:55:d9:f0:b5:dc:17:92:14:4b:ed:63:18:69:0f:27:e5:
         49:81:8c:d1:f9:e6:c3:f5:db:33:73:37:dc:51:93:e6:91:1f:
         86:e7:1e:9b:cc:f0:d2:2a:47:1d:cd:71:f4:a1:07:65:e8:d4:
         5b:0b:b3:a2:9e:19:f2:81:cc:3c:0d:13:e4:b3:08:5c:ba:00:
         57:50:b6:8f:13:74:fa:4b:8c:8b:0a:8e:4f:25:80:c0:a8:bb:
         1b:57:94:9e:56:3f:0d:06:ce:44:9b:eb:7c:9d:5a:8e:f0:19:
         88:80:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:57 2026 by rpki-client