Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30333/QT2iS_F-VwjRNbNMQ518jTCxyCs.roa
File:                     QT2iS_F-VwjRNbNMQ518jTCxyCs.roa (raw, json)
Hash identifier:          GqnrtIY6fvYIeTY9yyqARq++KOsCRLKZ0Y5n+7MxSGI=
Subject key identifier:   41:3D:A2:4B:F1:7E:57:08:D1:35:B3:4C:43:9D:7C:8D:30:B1:C8:2B
Certificate issuer:       /CN=07813FAF207135B89B16CDB5E3701E7AE61C186C
Certificate serial:       0D
Authority key identifier: 07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/QT2iS_F-VwjRNbNMQ518jTCxyCs.roa
Signing time:             Tue 31 Mar 2026 08:46:37 +0000
ROA not before:           Tue 31 Mar 2026 08:46:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        2406:600::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07813FAF207135B89B16CDB5E3701E7AE61C186C
        Validity
            Not Before: Mar 31 08:46:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=413DA24BF17E5708D135B34C439D7C8D30B1C82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:86:e6:d7:d1:33:93:ad:52:21:02:ac:89:
                    a9:19:3a:5f:c9:c6:df:e0:ed:fe:18:4d:70:1b:30:
                    df:5d:94:ac:7e:6d:b2:d1:42:a8:f6:dd:f8:ff:6d:
                    f4:93:ee:7a:7a:39:9b:7a:e0:2e:31:60:ea:e4:a3:
                    2b:26:2e:26:02:5c:6d:36:5a:2f:6c:9d:9a:2a:b0:
                    16:66:f6:05:f5:e0:ce:bc:73:50:1d:fb:f0:78:6c:
                    ef:27:07:8a:eb:93:7b:a9:f2:2a:98:a1:bf:12:11:
                    2f:a5:32:62:5e:f1:8b:84:88:34:a2:c6:b2:f9:c1:
                    97:19:b1:ac:91:d1:d5:1a:a9:81:a4:1e:87:f3:40:
                    7c:84:ef:cc:eb:f7:6b:43:66:84:f0:8e:94:54:c4:
                    18:76:02:96:fa:67:f5:b3:4e:2b:9b:e5:5d:71:de:
                    2f:a8:cf:e7:a8:9a:2b:1a:78:a3:d0:09:b5:67:c5:
                    19:dc:c6:2d:d4:b6:95:71:1d:63:97:39:09:f7:f4:
                    77:9a:26:10:7e:f8:d9:c7:73:98:14:cb:7a:c7:02:
                    39:98:f1:1f:36:c4:b1:16:25:e0:22:be:5f:3d:88:
                    ba:8a:d9:71:a1:df:b3:0a:7d:85:46:be:53:81:b6:
                    c9:8d:65:20:4e:55:b7:a3:c8:cd:92:7c:76:5d:1b:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3D:A2:4B:F1:7E:57:08:D1:35:B3:4C:43:9D:7C:8D:30:B1:C8:2B
            X509v3 Authority Key Identifier:
                keyid:07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/QT2iS_F-VwjRNbNMQ518jTCxyCs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:43:23:a1:2f:05:e4:99:8c:4b:9c:44:40:31:13:0f:c4:85:
         a4:84:16:a1:6d:ab:d9:80:79:c0:90:d3:9f:f3:ca:c0:1d:99:
         e0:44:e2:ab:5b:f8:ce:46:e5:05:73:69:73:dc:b2:8a:bd:8f:
         ea:a7:33:4b:a2:a0:de:5f:15:12:76:48:0a:c5:38:db:a6:78:
         09:59:d5:82:04:ad:ee:fa:c1:aa:f5:5c:9a:64:0b:b7:13:ab:
         06:3a:23:32:c1:ce:12:64:13:53:e5:3f:91:02:3d:7d:e4:7e:
         3a:68:a6:3e:c4:91:b1:b7:3b:ef:f5:6e:52:e2:d5:ea:1c:8e:
         25:5d:91:b5:83:21:eb:68:71:c1:c4:de:f8:a2:6a:2b:2c:80:
         2c:2b:63:8f:07:f3:d7:e0:8c:1d:71:64:2e:ef:ec:4d:3f:b9:
         c5:fd:91:70:6a:b2:00:a6:6d:d6:0c:e8:a7:3f:73:2e:c3:65:
         47:e3:92:1c:3b:dd:da:a7:c5:cd:b2:b7:6d:59:bd:3c:b3:74:
         f7:0d:db:90:9f:0b:27:a5:54:95:1b:ac:0c:34:c2:0e:c7:f6:
         dc:d4:67:13:bc:9a:c4:80:68:51:50:1f:0b:39:7c:38:35:d6:
         c4:d6:1b:b8:fa:35:67:6a:74:c9:29:73:fe:e5:ed:f2:a0:f6:
         a7:3a:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:13 2026 by rpki-client