Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa
File:                     ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa (raw, json)
Hash identifier:          gp6w3fEgXiiJVCyyuQvpuGziIVbO61TMDR/eZKDzrFo=
Subject key identifier:   BD:EF:21:2E:7C:8F:89:B2:EB:25:9D:0D:8F:7A:96:3A:AD:42:B0:42
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       03
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa
Signing time:             Wed 01 Jul 2026 01:26:41 +0000
ROA not before:           Wed 01 Jul 2026 01:26:41 +0000
ROA not after:            Thu 01 Jul 2027 01:12:28 +0000
asID:                     36530
IP address blocks:        2402:6020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Jul  1 01:26:41 2026 GMT
            Not After : Jul  1 01:12:28 2027 GMT
        Subject: CN=BDEF212E7C8F89B2EB259D0D8F7A963AAD42B042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:e1:d2:89:d3:b0:19:c4:d9:d9:d4:29:98:
                    0a:a2:f7:96:eb:ec:d6:a4:24:2f:45:49:55:d0:02:
                    71:be:f8:d8:ab:30:e1:ff:b6:9f:0f:af:49:91:d2:
                    6d:aa:5f:2f:d1:4e:b5:c2:92:6d:1c:79:3c:32:7a:
                    f9:cb:28:43:65:69:a0:1e:74:6d:c7:af:6d:a3:24:
                    38:6f:f4:a1:94:61:62:49:87:a9:92:9a:a5:8a:c8:
                    52:3d:a2:47:0c:53:25:5c:57:b7:79:83:0f:eb:27:
                    72:bf:0a:34:21:17:1f:09:19:5a:cf:9d:47:d4:d5:
                    2e:fb:54:f6:bf:c0:d9:95:c1:fd:22:ec:4c:e1:0f:
                    8d:86:ac:4d:f3:0f:0c:cc:2c:e1:1b:c6:eb:05:c9:
                    62:ae:a0:66:d2:e9:09:b1:aa:50:91:02:01:4c:24:
                    11:32:21:a1:16:c6:af:de:3c:66:ea:9d:36:88:97:
                    32:14:9e:a4:0e:78:07:37:e5:3d:10:83:b4:0a:e9:
                    bc:83:a2:e9:3d:81:fd:45:8b:70:f4:f3:50:41:b3:
                    99:cd:a2:2d:f9:b0:e5:9e:b0:55:b7:dd:83:e1:ef:
                    49:52:8a:42:1d:2d:69:37:4d:ed:8e:53:8f:4b:f2:
                    67:67:5d:a4:97:f2:94:4f:78:01:0b:d9:6a:15:2a:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:21:2E:7C:8F:89:B2:EB:25:9D:0D:8F:7A:96:3A:AD:42:B0:42
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:da:b2:fb:a9:dd:99:4e:92:35:d2:3c:51:44:a2:c7:d0:
         3c:05:c0:3d:b5:e5:c4:da:8b:6a:93:25:d4:12:eb:2c:1b:24:
         98:4f:44:52:89:57:57:e7:b7:0b:55:29:b3:75:62:f5:0c:9e:
         5b:91:b2:b3:83:22:7e:b0:db:c1:fd:81:01:8c:2a:53:54:92:
         77:c9:0a:fa:72:02:83:6e:95:45:2d:a9:76:e7:38:29:63:cb:
         a5:b3:61:ab:29:88:c8:62:03:d5:39:71:85:1d:4f:cb:4f:92:
         56:ce:41:03:88:80:71:a9:52:a1:a3:b6:a5:b2:95:7a:e1:52:
         12:d0:d8:6c:be:2d:3b:d0:0e:7e:f7:ef:75:f4:87:90:bb:9f:
         2f:37:82:a1:7f:d3:30:ca:11:ec:2e:89:ee:47:a0:ea:ab:81:
         cc:8e:b0:2a:c9:40:f2:9c:f6:44:7a:82:8e:0b:f5:7a:c2:7f:
         62:07:87:35:17:63:3f:ac:c9:49:bc:a6:c8:24:91:b5:d8:c1:
         eb:ee:55:52:11:2b:45:27:ff:8c:be:3d:66:0c:59:a2:10:d3:
         42:69:b8:6a:0f:db:8b:c5:33:9e:0d:83:29:93:08:e2:d8:78:
         02:92:5e:49:a3:b6:30:24:ec:60:01:21:cf:1e:01:fe:40:09:
         de:fb:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:27:42 2026 by rpki-client