Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/LptQFbRW2qiLUo7EAy8BIl7fiks.roa
File:                     LptQFbRW2qiLUo7EAy8BIl7fiks.roa (raw, json)
Hash identifier:          R5TuzKbmha4gmJjd+vZ3C81Bc/6zf52ihReP9d8KdOY=
Subject key identifier:   2E:9B:50:15:B4:56:DA:A8:8B:52:8E:C4:03:2F:01:22:5E:DF:8A:4B
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       08
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/LptQFbRW2qiLUo7EAy8BIl7fiks.roa
Signing time:             Wed 01 Jul 2026 01:26:44 +0000
ROA not before:           Wed 01 Jul 2026 01:26:44 +0000
ROA not after:            Thu 01 Jul 2027 01:12:28 +0000
asID:                     215023
IP address blocks:        2402:6020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Jul  1 01:26:44 2026 GMT
            Not After : Jul  1 01:12:28 2027 GMT
        Subject: CN=2E9B5015B456DAA88B528EC4032F01225EDF8A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:87:43:e2:5d:43:bb:ef:97:72:b5:56:5d:
                    e1:40:04:2f:16:dc:13:ae:40:2c:71:fc:2c:fa:4e:
                    f5:84:f1:4f:d5:a5:7e:69:e6:76:2c:74:81:6d:ba:
                    4b:dd:29:3e:53:da:50:17:33:66:2d:c5:1d:e7:7c:
                    52:38:74:30:98:ff:3b:0d:0f:b5:49:91:87:18:1f:
                    a3:af:14:33:30:ef:da:c0:3e:fc:8b:05:00:21:43:
                    c4:b3:cd:70:96:f7:c5:c8:71:38:25:07:29:06:39:
                    ad:d6:37:42:c9:94:d8:24:54:bd:b8:7f:cd:bd:ef:
                    9d:59:2a:ec:8c:7e:86:4d:0a:5e:d6:97:8a:8f:20:
                    f2:93:74:9d:64:f6:b1:c7:48:d5:ba:fc:f9:9d:53:
                    01:ae:ba:c4:cf:f7:a6:14:29:0c:ce:e7:39:e2:53:
                    38:b7:a7:e8:85:76:94:8e:98:28:14:65:9b:49:ec:
                    44:ad:b6:66:f8:f3:f7:f1:6a:11:96:30:57:23:4d:
                    45:7d:a0:51:67:d8:35:fc:22:d7:ff:ba:35:03:bf:
                    0a:54:21:52:13:c0:8f:e6:bf:1b:7d:15:98:90:c1:
                    19:fc:98:74:f0:23:7b:4a:4d:c7:e7:3d:12:f2:a4:
                    08:d1:4e:70:09:db:6c:87:d9:39:15:34:6d:15:9e:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:50:15:B4:56:DA:A8:8B:52:8E:C4:03:2F:01:22:5E:DF:8A:4B
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/LptQFbRW2qiLUo7EAy8BIl7fiks.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:fe:a5:bd:81:35:21:bc:db:9e:18:34:70:cc:e3:c1:12:
         f2:ae:1c:b6:e8:73:41:84:c1:b3:89:f2:c1:60:95:67:49:07:
         e8:b8:e7:a3:eb:bc:1b:5a:b3:56:7a:f3:d8:a7:c3:36:72:9b:
         26:38:74:c5:c0:73:44:19:b5:e9:eb:92:a6:c3:7c:fa:1a:de:
         84:b0:fb:4d:0e:15:0c:9e:f4:08:dd:df:f6:c3:eb:53:22:06:
         06:96:12:be:79:b7:f8:fc:b0:1f:fd:34:39:52:74:ac:b6:1f:
         fc:ec:0b:ae:65:ab:16:7a:40:55:ef:06:27:5a:47:76:5c:f2:
         a1:f8:c3:3d:ad:44:5f:06:dc:94:e6:60:8a:7b:c4:34:f1:56:
         96:8d:1b:25:15:7e:f3:2a:04:84:8a:33:fb:af:27:a3:d9:48:
         76:d0:a9:c4:40:ae:d6:33:76:5e:26:ba:0d:a4:50:d4:7c:ca:
         2f:b4:33:89:cd:f4:4c:47:dd:fd:53:f4:0e:20:d4:5b:05:de:
         c9:25:78:05:02:89:02:ba:38:95:2a:a6:6d:0b:d4:7a:ce:fb:
         a9:2e:70:47:5b:f2:7c:ac:35:96:e7:27:f7:d5:88:b8:50:93:
         5e:01:59:2e:d3:72:39:07:7c:e2:84:0c:76:28:ef:99:6f:d5:
         57:eb:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:26:14 2026 by rpki-client