Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30450/dHP_Hi7S306HYpXzvu1gZvBoSPM.roa
File:                     dHP_Hi7S306HYpXzvu1gZvBoSPM.roa (raw, json)
Hash identifier:          gkupOdPVH6zCIJXxYVZBy6b3GaOvyFeeoWOpxujxtws=
Subject key identifier:   74:73:FF:1E:2E:D2:DF:4E:87:62:95:F3:BE:ED:60:66:F0:68:48:F3
Certificate issuer:       /CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
Certificate serial:       0C
Authority key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/dHP_Hi7S306HYpXzvu1gZvBoSPM.roa
Signing time:             Sat 31 Jan 2026 08:11:22 +0000
ROA not before:           Sat 31 Jan 2026 08:11:22 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     38646
IP address blocks:        2402:2f60::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
        Validity
            Not Before: Jan 31 08:11:22 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=7473FF1E2ED2DF4E876295F3BEED6066F06848F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:57:f7:8d:4e:e0:b3:d7:f9:ff:47:ec:b7:
                    c8:bf:78:3b:09:76:99:f8:99:59:b2:47:af:81:80:
                    e8:48:76:49:5a:87:19:5a:fe:d2:7d:c1:59:fe:95:
                    92:39:c3:64:be:3b:4f:8a:a1:d2:78:ed:b4:fe:0d:
                    67:ab:e7:df:30:7c:96:fb:d1:57:85:63:c8:1a:b9:
                    4f:83:26:45:b7:ba:e6:fd:cd:2f:9d:c1:88:05:89:
                    15:c6:07:83:bb:6c:79:67:3c:3b:44:ed:28:a3:cf:
                    2b:61:dd:9d:05:f7:1e:91:f4:a7:58:eb:c9:24:d1:
                    18:b1:d8:ee:1d:9c:fc:d5:5c:da:47:18:28:f8:ef:
                    ad:da:0d:71:6f:0e:b9:2e:df:6d:48:a2:b3:e2:dc:
                    4e:82:27:96:5d:73:fe:b1:6e:0d:53:ca:31:37:9f:
                    bc:0a:57:d0:8e:4e:11:06:f7:42:77:3a:83:aa:c4:
                    8c:1e:f6:16:32:16:9b:88:29:b0:a8:e5:54:93:2f:
                    42:2b:4b:68:78:ff:41:51:fc:4b:ea:5c:15:45:16:
                    7d:c4:8d:2e:b9:bb:a5:25:59:b5:05:00:4b:0c:65:
                    67:78:11:fa:68:cd:d3:d0:a4:75:e3:de:15:4d:9d:
                    39:16:94:7e:ad:00:72:9f:53:82:43:03:4d:ca:00:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:73:FF:1E:2E:D2:DF:4E:87:62:95:F3:BE:ED:60:66:F0:68:48:F3
            X509v3 Authority Key Identifier:
                keyid:CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/dHP_Hi7S306HYpXzvu1gZvBoSPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:21:8a:41:9e:07:7e:7a:88:49:4a:fb:e2:68:8d:7e:4c:0f:
         23:e8:36:30:ed:a2:a3:8e:02:c9:bf:3f:f2:1d:61:65:d9:2d:
         be:6f:12:aa:1a:ef:a3:7c:98:ed:5c:60:a9:91:bf:13:ec:29:
         44:84:f5:fc:c5:bc:43:98:ce:a3:e9:24:a6:1c:f7:b6:ad:85:
         2a:1c:22:9c:92:8e:c6:6c:de:30:68:1d:5d:8a:21:5b:eb:26:
         4d:6c:b3:e7:03:99:4d:02:4c:42:4c:46:54:5a:7a:b0:ac:0b:
         e2:d0:a9:20:dc:9a:f4:fa:35:53:ab:0f:be:29:9e:8a:d8:27:
         79:d4:af:d3:d1:94:2f:6a:c3:28:0c:a8:d7:95:ea:7a:63:50:
         ae:b6:36:65:48:45:09:45:35:57:54:f3:bc:28:d8:5a:87:ae:
         04:de:e5:33:3a:a7:14:08:60:97:20:a0:85:ed:13:b2:ad:05:
         02:94:f5:33:7d:21:26:45:45:93:2f:92:6d:5a:9f:3f:fb:2e:
         0a:ce:87:d2:81:67:a1:b3:e4:08:1a:e0:5c:5e:be:f8:d5:0a:
         f4:36:cd:ae:fe:24:ff:04:cb:c1:63:a4:a5:c6:af:8b:19:32:
         a0:00:17:33:cb:76:a5:8b:c9:af:94:0b:59:42:01:09:02:92:
         3a:4f:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 15:18:21 2026 by rpki-client