Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/lJNXnp5a4qeIu1xi5aizLbohwKw.roa
File:                     lJNXnp5a4qeIu1xi5aizLbohwKw.roa (raw, json)
Hash identifier:          ZZfbNUQz6diPwk6wSipbVynFeDUh068urMfeSodkuAU=
Subject key identifier:   94:93:57:9E:9E:5A:E2:A7:88:BB:5C:62:E5:A8:B3:2D:BA:21:C0:AC
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       84
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/lJNXnp5a4qeIu1xi5aizLbohwKw.roa
Signing time:             Tue 31 Mar 2026 07:29:41 +0000
ROA not before:           Tue 31 Mar 2026 07:29:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        2001:3a0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Mar 31 07:29:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9493579E9E5AE2A788BB5C62E5A8B32DBA21C0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:15:04:71:f4:0c:a2:ac:a6:1a:d5:08:41:
                    71:e2:8c:d9:e5:7b:0a:11:0f:77:1b:cb:4a:d0:82:
                    54:98:d1:0b:4c:d2:d0:64:ee:ed:86:a9:d9:9f:89:
                    03:83:e2:29:04:27:d4:ba:ba:29:f4:29:fa:9c:35:
                    02:d4:ca:19:5d:3a:41:aa:4e:1a:a7:36:77:f8:f8:
                    60:c8:d9:09:02:47:c5:f1:28:52:7f:4e:43:79:8f:
                    78:5f:15:e8:f2:bf:f3:8f:71:7c:21:9e:71:04:f1:
                    b6:b7:f2:f5:99:6b:4c:69:38:0a:59:32:ad:f5:ce:
                    f2:1b:80:13:96:38:49:a8:30:53:2d:63:49:14:25:
                    72:fd:ee:0f:7a:5d:af:8e:49:e5:e2:95:99:10:ba:
                    25:49:68:18:db:26:30:ac:f2:48:8f:36:65:28:b4:
                    a1:2f:f8:7f:70:b5:45:47:08:e3:ef:db:f0:51:2d:
                    aa:0b:92:1b:6c:51:c1:f6:37:92:1d:7f:4f:ae:5f:
                    bb:83:83:4e:c3:06:b5:10:59:71:ee:b6:c8:3b:5e:
                    57:b2:32:14:5f:71:b3:ed:b8:1c:41:27:c3:0a:ed:
                    e4:e5:60:e3:55:36:22:b6:b1:8b:21:cd:98:0a:c0:
                    8e:8d:b0:0a:22:84:3d:cc:23:2b:75:b6:0e:db:3d:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:57:9E:9E:5A:E2:A7:88:BB:5C:62:E5:A8:B3:2D:BA:21:C0:AC
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/lJNXnp5a4qeIu1xi5aizLbohwKw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:ee:0f:01:76:92:57:4d:56:d5:ba:81:e5:cc:c4:38:a4:
         ca:ca:a2:87:33:ad:05:7b:56:1c:94:83:9f:55:f5:42:76:d7:
         ae:8b:9f:16:ad:ff:a0:85:34:04:b2:6b:da:43:83:7e:f1:7b:
         e4:fb:b4:eb:16:11:34:b7:29:7d:c1:56:44:11:7d:0f:a0:2b:
         8c:ab:65:69:7d:dc:ae:44:56:c3:c8:27:74:ef:02:db:73:c3:
         88:ff:ce:29:70:40:36:a1:23:2f:24:0e:10:a3:66:b7:73:19:
         0d:73:42:a2:23:0c:35:8b:95:09:43:ca:a9:f1:e6:67:1c:68:
         d0:9a:02:e4:0a:7b:29:ef:79:7d:20:b4:d7:e0:26:55:4a:62:
         a3:72:94:3e:92:bd:c4:a1:be:49:2c:c9:0c:25:97:d1:f7:93:
         d4:97:93:99:3c:cc:67:95:bf:70:b7:ca:9d:99:28:66:cf:19:
         e2:03:09:8c:87:d0:1a:53:af:06:ff:bc:8b:b1:09:e4:c8:1f:
         48:82:96:2a:51:ae:26:4c:5b:74:74:4d:8f:71:c8:36:2e:ff:
         b1:64:02:3f:cf:a0:2f:ee:30:ff:c3:64:f3:ff:94:35:bc:8e:
         df:f5:26:78:fa:93:36:80:3a:86:f7:84:a8:06:58:56:99:9c:
         eb:c0:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:45 2026 by rpki-client