Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30357/A-21TidqMja7VNbUf92tVbwCHOQ.roa
File:                     A-21TidqMja7VNbUf92tVbwCHOQ.roa (raw, json)
Hash identifier:          a8lXPyYXGTcEgWeImAOOUXxAjfUD4ehgeJ3sJtyKA+c=
Subject key identifier:   03:ED:B5:4E:27:6A:32:36:BB:54:D6:D4:7F:DD:AD:55:BC:02:1C:E4
Certificate issuer:       /CN=A147363993399A2355D9A8BC90FB61382A2E8C38
Certificate serial:       3E
Authority key identifier: A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/A-21TidqMja7VNbUf92tVbwCHOQ.roa
Signing time:             Tue 31 Mar 2026 08:23:01 +0000
ROA not before:           Tue 31 Mar 2026 08:23:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38631
IP address blocks:        2400:dcc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A147363993399A2355D9A8BC90FB61382A2E8C38
        Validity
            Not Before: Mar 31 08:23:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03EDB54E276A3236BB54D6D47FDDAD55BC021CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:a1:d3:c6:65:74:f7:cc:ac:78:ad:10:68:
                    a1:4d:46:55:e8:ca:3f:60:cd:c5:14:bd:1d:c9:11:
                    43:28:46:0c:6a:3b:ea:b4:1c:91:61:f0:ce:33:cf:
                    6c:8b:2a:a1:da:11:80:58:70:8e:e3:3e:75:50:a8:
                    70:2d:e9:d1:62:d2:0b:94:d6:32:8c:93:9b:36:d7:
                    79:1d:92:00:43:f3:bf:08:bf:21:3a:e0:4a:47:dd:
                    c7:87:24:f2:85:4f:18:54:60:da:cb:15:02:5c:c2:
                    61:c4:c5:3f:c4:cf:91:14:3b:d6:de:fb:4b:b9:64:
                    51:93:d8:0e:42:a0:5e:79:df:a0:91:5d:40:d9:a1:
                    97:4b:cb:05:dd:98:59:7e:b2:f6:bd:e0:9f:a7:31:
                    bf:17:75:43:b5:3d:fc:9f:d2:a8:45:42:9b:8a:df:
                    a2:e4:88:31:bb:b5:f0:a3:51:72:2b:f9:61:f4:84:
                    83:a9:f2:73:a1:f0:ef:79:b6:7e:53:a6:56:2c:16:
                    5f:c2:d2:a5:7d:ea:03:29:37:1c:53:47:87:56:38:
                    fc:e1:30:32:e3:34:5e:6f:ad:e4:8f:7f:6e:43:76:
                    ce:ca:b6:ed:6d:69:ec:c6:d2:15:a9:2e:f0:d5:f2:
                    d0:d9:ce:56:44:f7:c5:ad:c0:04:bb:1f:0c:95:31:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:B5:4E:27:6A:32:36:BB:54:D6:D4:7F:DD:AD:55:BC:02:1C:E4
            X509v3 Authority Key Identifier:
                keyid:A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/A-21TidqMja7VNbUf92tVbwCHOQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:68:75:02:a3:dc:e0:93:7b:69:fb:b7:3a:79:60:1b:e4:
         ab:f3:08:87:a5:fd:0d:5a:74:e4:ce:ac:bb:23:da:55:77:23:
         58:fc:85:c0:f6:58:36:10:c2:6e:f0:67:8a:09:07:51:0f:16:
         ea:1a:32:86:21:ba:05:81:7c:62:db:ea:7e:dc:e0:c1:a2:60:
         39:59:3f:25:72:8d:bc:51:12:45:39:df:cb:3c:82:2f:44:f7:
         19:3d:47:cf:d5:d7:18:d6:dd:6a:d3:f2:7f:1b:7f:06:d5:48:
         14:55:cc:f2:74:91:73:9f:85:53:69:cd:5a:0b:ba:8c:6b:40:
         6c:6b:f3:f4:b9:57:08:eb:73:52:c3:13:97:3c:a4:73:2d:f8:
         db:75:d4:c5:d3:2b:40:c5:ed:0a:64:32:df:64:b7:a5:9b:bd:
         c7:e7:09:bb:a6:2a:52:eb:38:eb:d1:e4:41:d8:19:96:32:5e:
         fc:fe:f9:e5:cd:b7:f7:73:34:3d:cf:6c:d5:19:b4:59:c5:00:
         9f:f1:49:8d:e7:ef:52:4b:d6:e4:b0:2a:43:2e:b8:0c:3f:5a:
         00:b3:37:b3:0a:3f:e1:bb:c0:6c:4d:c7:ce:a3:09:6b:ab:b7:
         d5:1d:14:fc:23:fc:9f:0e:20:4d:e7:1f:c5:96:a1:01:d8:75:
         cd:49:5e:5a
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMTQ3
MzYzOTkzMzk5QTIzNTVEOUE4QkM5MEZCNjEzODJBMkU4QzM4MB4XDTI2MDMzMTA4
MjMwMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDNFREI1NEUyNzZBMzIz
NkJCNTRENkQ0N0ZEREFENTVCQzAyMUNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4vodPGZXT3zKx4rRBooU1GVejKP2DNxRS9HckRQyhGDGo76rQc
kWHwzjPPbIsqodoRgFhwjuM+dVCocC3p0WLSC5TWMoyTmzbXeR2SAEPzvwi/ITrg
Skfdx4ck8oVPGFRg2ssVAlzCYcTFP8TPkRQ71t77S7lkUZPYDkKgXnnfoJFdQNmh
l0vLBd2YWX6y9r3gn6cxvxd1Q7U9/J/SqEVCm4rfouSIMbu18KNRciv5YfSEg6ny
c6Hw73m2flOmViwWX8LSpX3qAyk3HFNHh1Y4/OEwMuM0Xm+t5I9/bkN2zsq27W1p
7MbSFaku8NXy0NnOVkT3xa3ABLsfDJUxEM0CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQD7bVOJ2oyNrtU1tR/3a1VvAIc5DAfBgNVHSMEGDAWgBShRzY5kzmaI1XZqLyQ
+2E4Ki6MODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNTcvb1VjMk9aTTVtaU5WMmFpOGtQdGhPQ291akRnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvb1VjMk9aTTVtaU5WMmFpOGtQdGhP
Q291akRnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzU3L0EtMjFUaWRxTWphN1ZOYlVmOTJ0VmJ3Q0hPUS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkANzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAGs2h1AqPc4JN7afu3OnlgG+Sr8wiHpf0NWnTkzqy7I9pVdyNY/IXA9lg2
EMJu8GeKCQdRDxbqGjKGIboFgXxi2+p+3ODBomA5WT8lco28URJFOd/LPIIvRPcZ
PUfP1dcY1t1q0/J/G38G1UgUVczydJFzn4VTac1aC7qMa0Bsa/P0uVcI63NSwxOX
PKRzLfjbddTF0ytAxe0KZDLfZLelm73H5wm7pipS6zjr0eRB2BmWMl78/vnlzbf3
czQ9z2zVGbRZxQCf8UmN5+9SS9bksCpDLrgMP1oAszezCj/hu8BsTcfOowlrq7fV
HRT8I/yfDiBN5x/FlqEB2HXNSV5a
-----END CERTIFICATE-----
Generated at Thu Apr 2 02:40:01 2026 by rpki-client