Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/F1Z9W7HHAdvKiDgmT1mCg2oz-xw.roa
File:                     F1Z9W7HHAdvKiDgmT1mCg2oz-xw.roa (raw, json)
Hash identifier:          fNGHCk3m1GXCv+hMOnp62VmE7wfIJeaVPBjIAYpo8pg=
Subject key identifier:   17:56:7D:5B:B1:C7:01:DB:CA:88:38:26:4F:59:82:83:6A:33:FB:1C
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       3A
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/F1Z9W7HHAdvKiDgmT1mCg2oz-xw.roa
Signing time:             Tue 31 Mar 2026 08:30:57 +0000
ROA not before:           Tue 31 Mar 2026 08:30:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37904
IP address blocks:        2403:c780:7201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: Mar 31 08:30:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=17567D5BB1C701DBCA8838264F5982836A33FB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:4d:88:2f:60:b1:30:b3:0a:a3:b5:29:33:
                    10:18:a9:9a:65:09:b4:38:7a:53:80:08:43:c5:eb:
                    0e:f7:72:23:c5:56:41:fb:c9:93:40:dc:99:84:ed:
                    d0:5e:2d:84:93:f8:95:d5:58:55:aa:1b:27:5b:a9:
                    64:52:96:c9:05:ab:99:96:48:75:74:1f:ce:a4:b8:
                    da:70:1a:58:71:00:ec:aa:b0:85:a0:31:90:01:76:
                    2c:e1:f2:f0:d9:32:c2:f8:28:61:aa:14:2a:c2:60:
                    71:a4:13:ec:3f:9a:45:8c:92:30:0f:ab:86:a4:0c:
                    71:39:e0:ec:10:d4:fc:0c:8b:70:0b:e8:fc:af:ca:
                    bc:2f:c0:3b:fa:5b:a2:a7:9f:e0:ea:86:c1:26:7b:
                    fe:77:4d:66:a9:7f:27:7f:76:de:25:05:48:09:12:
                    c1:84:ff:2b:a3:18:ef:f5:24:dc:fa:28:77:76:eb:
                    19:27:9c:0d:32:56:f3:bb:48:b5:1e:52:24:73:96:
                    58:b4:de:27:e8:3b:67:dc:f7:83:17:b6:2f:62:59:
                    9a:03:48:54:21:f4:1b:88:8e:eb:9a:6f:23:6b:ac:
                    20:4b:d2:6e:40:f4:30:81:8b:96:00:1b:85:5a:7c:
                    f6:f4:2f:09:41:7d:df:a8:85:34:e5:61:ab:0b:ad:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:56:7D:5B:B1:C7:01:DB:CA:88:38:26:4F:59:82:83:6A:33:FB:1C
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/F1Z9W7HHAdvKiDgmT1mCg2oz-xw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:7201::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:79:79:2e:28:67:c4:91:ce:d4:ea:f4:ce:9d:f6:10:1a:ba:
         2c:0d:b8:5e:2d:c4:1b:22:10:07:70:c8:ed:77:c9:ff:04:35:
         e7:32:5e:59:8c:e7:61:75:19:d8:04:49:81:f7:4d:6a:73:3d:
         f2:d3:61:3e:16:fb:ec:8d:fb:1c:3a:27:91:6d:f0:35:e0:5c:
         ce:44:36:fa:94:94:71:35:29:89:86:65:ce:fc:c4:b0:0a:76:
         b3:06:a7:7f:25:83:da:fa:3d:79:e2:f2:e6:c6:94:da:47:fe:
         ec:29:a6:71:00:98:0f:44:18:7d:72:05:9a:da:31:b9:6d:84:
         f2:c5:f8:70:66:81:72:88:8e:9a:28:ed:d1:2d:a4:a0:70:16:
         5a:95:df:1d:a5:9a:38:0c:c7:fb:46:a9:2c:e9:ae:59:49:66:
         22:77:72:62:2a:86:84:ca:53:8b:00:e9:d1:27:69:77:60:6e:
         19:f7:90:aa:7c:3f:ad:9a:fd:0b:43:f6:85:40:18:0b:c5:a3:
         26:4e:c6:e6:04:68:fa:cd:14:d0:da:76:d1:49:d7:a1:bf:75:
         89:df:25:c2:85:75:8e:03:17:94:66:46:55:7b:76:51:4f:7a:
         a2:7d:d9:84:f3:6e:3e:9a:0e:7a:d2:b4:7a:0b:d7:ea:86:3a:
         6a:cd:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:51:59 2026 by rpki-client