Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30452/yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa
File:                     yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa (raw, json)
Hash identifier:          7z55gnucm4BxXkD5o9xT0ORUfi+V/fA/XchWkSeIqTc=
Subject key identifier:   C9:02:84:BD:DE:2A:C1:55:3D:47:C6:D2:E4:9F:00:81:B4:09:DC:4C
Certificate issuer:       /CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
Certificate serial:       07
Authority key identifier: B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa
Signing time:             Thu 21 May 2026 04:39:07 +0000
ROA not before:           Thu 21 May 2026 04:39:07 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        2402:3c60:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
        Validity
            Not Before: May 21 04:39:07 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=C90284BDDE2AC1553D47C6D2E49F0081B409DC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:29:05:aa:b1:d7:5d:69:05:be:63:a4:98:35:
                    de:d1:3a:a3:6c:3e:8f:50:d5:a8:55:47:ee:4c:0c:
                    a7:f1:10:28:b7:ab:7c:ac:a2:d8:34:6a:d2:72:57:
                    3a:a5:ae:d5:0d:8b:65:df:3b:ac:c1:3f:55:6a:23:
                    96:86:eb:e2:fa:9c:72:e0:e5:cb:48:7d:63:6e:7f:
                    01:c8:44:53:62:95:6c:91:ec:27:5a:f6:7a:d5:56:
                    c9:c6:07:bc:0d:2b:cd:8c:31:03:c0:e8:f7:ed:fb:
                    62:be:b4:e2:43:2d:aa:03:62:6d:2f:1e:71:db:ec:
                    18:95:2a:68:54:46:83:d8:6c:3b:6e:da:d9:e0:38:
                    28:d5:7e:85:8c:e8:20:70:be:71:b5:1a:a0:e2:10:
                    21:54:62:9e:1a:75:ee:70:6b:f8:30:d9:b5:30:71:
                    4b:ca:e4:5a:a2:03:e3:ca:3b:36:b9:f9:50:0f:35:
                    8d:7f:c2:58:10:e5:5f:bf:57:94:fd:0f:cd:d8:27:
                    45:9d:00:bb:09:bf:10:0c:e4:4c:85:96:3e:da:18:
                    8d:e7:0a:76:49:68:be:1b:09:71:2f:bf:48:3f:fe:
                    ba:bd:8d:7c:57:60:82:27:b1:c4:f1:cd:54:88:28:
                    c4:1d:fa:d9:e7:10:d3:7c:a5:92:12:59:2c:89:03:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:84:BD:DE:2A:C1:55:3D:47:C6:D2:E4:9F:00:81:B4:09:DC:4C
            X509v3 Authority Key Identifier:
                keyid:B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3c60:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:8a:a7:6b:a2:59:13:7d:50:15:e7:1a:91:bb:ab:ac:44:
         1c:85:a5:53:eb:69:9e:14:10:fc:7e:f5:ea:a4:f1:48:bd:ae:
         85:70:2a:a2:b8:38:87:cb:87:83:c7:c4:a6:39:89:ce:64:7d:
         06:48:19:a9:fc:f7:0f:03:c0:48:e0:c2:9f:1e:73:df:d2:92:
         8a:83:6c:1b:77:a0:a1:73:24:85:75:ef:38:b5:29:fb:4c:e2:
         69:b0:b9:81:7e:98:85:82:9a:7d:a3:45:84:09:88:70:74:1a:
         19:97:f2:8a:62:7f:d7:3e:78:60:4c:75:27:43:0c:bd:c4:03:
         dc:d2:50:e3:64:44:31:62:2f:46:46:46:12:66:67:a6:3a:f7:
         4c:43:75:2c:b5:c0:30:0d:92:b8:34:f3:e1:86:2d:fe:d4:c8:
         c5:ca:5f:ca:85:29:e6:b4:13:f6:21:86:f3:20:20:0d:f9:e3:
         e7:aa:b1:85:1e:65:2b:2a:af:e0:b8:6c:0f:b3:ea:78:eb:54:
         73:39:9c:c8:9c:6b:05:7f:86:25:c3:d7:65:4b:df:d6:53:7d:
         55:42:d5:1f:46:f2:0c:3a:28:e3:c9:e1:48:95:9d:a6:64:f8:
         a3:22:81:bf:f0:5f:d9:af:1f:35:71:25:bd:ef:06:65:e9:e8:
         d8:00:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:52:48 2026 by rpki-client