Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/kYBqMPpjMiobEv43q6ySkfOTw_g.roa
File:                     kYBqMPpjMiobEv43q6ySkfOTw_g.roa (raw, json)
Hash identifier:          vXsT3QQEwzpUiU28JGnx5BGde4TBK6iryYkQmBKc0vY=
Subject key identifier:   91:80:6A:30:FA:63:32:2A:1B:12:FE:37:AB:AC:92:91:F3:93:C3:F8
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       5D
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/kYBqMPpjMiobEv43q6ySkfOTw_g.roa
Signing time:             Tue 31 Mar 2026 07:39:31 +0000
ROA not before:           Tue 31 Mar 2026 07:39:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        2001:260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Mar 31 07:39:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=91806A30FA63322A1B12FE37ABAC9291F393C3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:68:8f:61:7b:a3:a5:f4:ad:ef:ca:27:32:
                    61:f8:cc:45:96:ca:cc:a8:6e:a1:b9:18:b8:8b:3d:
                    f7:86:46:c3:d6:c5:49:73:50:62:1d:b5:3a:b0:00:
                    6a:9c:ed:28:07:9f:1e:62:8e:f5:4a:38:8b:b6:7b:
                    f4:f2:65:42:6e:3c:04:52:ec:a9:98:e2:af:6b:f5:
                    1e:36:30:42:c7:4a:40:8f:94:a4:52:b0:b0:ff:b9:
                    4d:b0:9b:77:2c:74:95:4d:ca:13:e9:ee:d9:ac:6a:
                    ca:15:e9:29:11:cc:e1:39:3d:05:b7:bf:61:20:90:
                    c1:19:51:fb:89:e2:fa:db:0d:06:1b:97:43:c6:ee:
                    b6:5f:14:7b:ba:11:3b:ed:2f:35:ba:ee:22:9d:ab:
                    41:90:27:63:48:90:a1:d0:c5:56:27:6e:62:ef:62:
                    ce:2e:17:3a:b0:08:4d:8e:e3:7e:99:c5:d6:8e:ba:
                    4f:98:d7:bd:fb:68:77:15:47:9a:16:dd:cf:44:4d:
                    3d:ec:e9:93:8b:12:a0:03:a1:09:79:f5:05:ff:a5:
                    5a:9f:b8:3e:c6:3f:3a:25:d5:f0:e9:65:5a:4f:e0:
                    2c:9f:6e:a3:9f:c9:35:79:c0:65:28:cd:57:e5:50:
                    e0:a0:c1:70:c8:b8:70:8d:fe:d4:36:24:25:da:00:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:6A:30:FA:63:32:2A:1B:12:FE:37:AB:AC:92:91:F3:93:C3:F8
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/kYBqMPpjMiobEv43q6ySkfOTw_g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:84:a2:31:af:f5:bd:85:71:03:39:b0:b1:b5:69:02:9f:
         ad:ab:b5:ed:ce:64:0f:8b:71:08:73:46:57:54:6d:34:51:cf:
         a2:3b:ea:59:9b:e3:85:b9:aa:5d:b8:f9:5c:95:1c:90:0b:3c:
         4c:6e:2c:f4:c3:3a:82:ea:52:92:e4:23:38:b1:b4:4c:01:86:
         82:97:e4:15:fa:ec:c0:ea:44:83:a7:d0:af:01:52:bc:14:6e:
         e0:66:28:18:01:00:3e:73:13:67:2e:65:68:b5:d2:2b:57:92:
         ca:bc:2b:72:f1:2a:58:92:b9:ef:bb:3d:80:b7:ba:1b:0c:66:
         33:1a:1c:26:91:1c:94:87:a4:21:7a:12:75:73:0d:73:4c:cc:
         78:19:dc:05:01:9d:f1:96:a3:ac:22:09:03:3e:f6:27:56:5d:
         44:24:24:ad:c0:d8:e0:05:e7:a0:cf:23:af:6c:ab:b5:5c:c6:
         ef:96:07:75:29:05:7f:53:4a:c5:e8:e7:67:be:a9:5d:17:82:
         12:45:e5:c0:82:e5:b4:1f:08:8f:6c:e5:0d:50:b2:6b:4f:02:
         c5:b6:8f:54:c3:10:ae:94:94:11:b4:bf:54:3a:c5:ff:41:52:
         7e:29:d7:96:42:44:d4:07:cd:8c:56:dd:a8:a8:7c:af:92:bb:
         5c:40:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:49 2026 by rpki-client