Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30350/6d1EY8WQZyeMKy1sdU32bxsCpt8.roa
File:                     6d1EY8WQZyeMKy1sdU32bxsCpt8.roa (raw, json)
Hash identifier:          fdl/WI9PCVcrhDx7P3nsuZvuv5GdkfrtIymu4ULEge8=
Subject key identifier:   E9:DD:44:63:C5:90:67:27:8C:2B:2D:6C:75:4D:F6:6F:1B:02:A6:DF
Certificate issuer:       /CN=EB4F0088ABA76B3F5AB1B23A4C0A9F441BC38A19
Certificate serial:       02
Authority key identifier: EB:4F:00:88:AB:A7:6B:3F:5A:B1:B2:3A:4C:0A:9F:44:1B:C3:8A:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/608AiKunaz9asbI6TAqfRBvDihk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30350/6d1EY8WQZyeMKy1sdU32bxsCpt8.roa
Signing time:             Wed 05 Aug 2026 04:21:19 +0000
ROA not before:           Wed 05 Aug 2026 04:21:19 +0000
ROA not after:            Thu 05 Aug 2027 04:09:16 +0000
asID:                     131957
IP address blocks:        2405:3840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30350/608AiKunaz9asbI6TAqfRBvDihk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30350/608AiKunaz9asbI6TAqfRBvDihk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/608AiKunaz9asbI6TAqfRBvDihk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4F0088ABA76B3F5AB1B23A4C0A9F441BC38A19
        Validity
            Not Before: Aug  5 04:21:19 2026 GMT
            Not After : Aug  5 04:09:16 2027 GMT
        Subject: CN=E9DD4463C59067278C2B2D6C754DF66F1B02A6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:15:9a:d3:d3:79:e3:3e:8c:15:98:b4:a8:
                    2f:e1:03:b2:a6:e6:29:63:56:d6:b2:4d:bd:55:54:
                    7a:65:4b:1d:c4:72:dc:dc:50:b4:0e:67:7f:ec:14:
                    1a:84:b3:fb:3d:04:2d:cf:03:f0:af:5d:59:b6:61:
                    58:2a:82:d1:20:07:2f:de:0f:92:67:5a:70:63:49:
                    ed:39:82:68:e8:8d:47:cf:50:d4:e2:87:06:89:93:
                    e9:6b:26:a0:e1:40:96:e9:fa:fe:75:83:a1:24:9b:
                    95:35:db:d8:45:da:2b:39:fb:8a:91:81:70:2d:85:
                    ff:c6:08:9c:99:f7:ef:32:ca:3a:15:d4:e1:43:10:
                    d7:ae:dd:d7:a6:b4:90:47:a1:e4:da:c6:74:98:a8:
                    93:aa:49:37:ff:01:13:f4:d0:ce:91:35:12:69:58:
                    37:95:4a:7d:0f:ec:2f:d2:35:13:29:f9:ca:7a:d2:
                    3c:98:40:82:de:73:ad:97:61:8b:18:1c:55:fc:66:
                    86:22:5f:b8:fb:71:01:1d:82:df:af:aa:e2:65:ca:
                    df:9b:39:8e:40:c3:dc:25:81:a1:96:63:e6:74:d7:
                    aa:37:e6:da:9f:cf:e8:6c:05:cd:84:4d:22:ea:c9:
                    56:20:39:21:d0:0e:48:a2:89:0c:65:a4:63:31:ff:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:44:63:C5:90:67:27:8C:2B:2D:6C:75:4D:F6:6F:1B:02:A6:DF
            X509v3 Authority Key Identifier:
                keyid:EB:4F:00:88:AB:A7:6B:3F:5A:B1:B2:3A:4C:0A:9F:44:1B:C3:8A:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30350/608AiKunaz9asbI6TAqfRBvDihk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/608AiKunaz9asbI6TAqfRBvDihk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30350/6d1EY8WQZyeMKy1sdU32bxsCpt8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3840::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:5a:5a:44:5e:ff:d2:a5:80:e2:56:ea:3d:71:3b:6b:20:
         99:a9:dc:5d:bb:2d:d3:e5:10:14:99:27:d6:77:39:08:87:cb:
         e8:12:dd:10:ba:26:29:2d:4c:ba:eb:ca:06:b4:71:1c:28:e7:
         39:cd:66:a2:da:01:34:37:89:44:5b:61:39:ca:71:6c:8d:f8:
         d9:10:cf:ac:39:f8:bd:60:a8:35:2f:c9:c9:33:52:4a:cd:35:
         9e:f0:12:78:ac:2a:61:34:ec:09:4c:c0:59:66:b3:e8:23:ca:
         cf:82:3f:26:f8:e6:59:dc:0a:16:87:e2:e7:ec:9d:8c:a9:6e:
         ee:96:a8:6a:28:8b:97:72:f2:88:e7:f2:63:3f:2f:6c:20:16:
         04:83:60:fc:cb:77:7a:0e:4f:cc:91:70:e1:44:1d:e8:c5:3d:
         64:28:1d:87:2f:a9:4f:2a:98:82:cf:7f:7e:8a:3e:16:43:a7:
         f6:45:38:5f:34:76:13:9c:40:30:24:e5:ad:2f:1b:92:68:e4:
         c9:b1:39:d9:2b:b8:98:40:2a:6a:c9:0e:04:08:8d:2b:4a:c8:
         e6:02:39:a7:2c:4d:22:08:04:fc:9f:dc:bf:c4:f9:49:37:83:
         ab:32:c4:63:b9:18:9a:3e:5d:42:5f:bc:67:5c:83:3b:89:b6:
         ef:23:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:11:45 2026 by rpki-client