Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa
File:                     RDIk5hrN0ald4OGYg_5FgprwQIM.roa (raw, json)
Hash identifier:          EX/Vjrh1GlLfZ0J9T5Hu1n9/m2yOUv/Myc1QMxjjt4g=
Subject key identifier:   44:32:24:E6:1A:CD:D1:A9:5D:E0:E1:98:83:FE:45:82:9A:F0:40:83
Certificate issuer:       /CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Certificate serial:       1C
Authority key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa
Signing time:             Tue 31 Mar 2026 08:43:23 +0000
ROA not before:           Tue 31 Mar 2026 08:43:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        2001:2f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
        Validity
            Not Before: Mar 31 08:43:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=443224E61ACDD1A95DE0E19883FE45829AF04083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:ec:b4:c1:7e:4e:4c:f9:09:4e:09:6d:50:
                    9a:db:10:b9:cf:10:e4:94:e2:82:0c:43:bd:61:ac:
                    89:ae:b3:bb:37:75:1e:7f:dd:ae:d1:4b:ad:3b:5f:
                    a2:3b:1b:91:21:46:89:c0:f4:53:fb:a1:f5:5f:04:
                    d1:b0:21:dd:67:1e:ae:3f:40:b0:a8:f4:4c:34:55:
                    c4:90:fb:c0:e2:7d:7f:21:5b:c7:0d:3d:ad:c4:b6:
                    48:df:46:b4:62:7d:bc:a9:0a:39:6e:ea:86:f1:6d:
                    30:aa:60:4e:52:a2:86:2d:7b:a2:f5:f8:fe:8d:d5:
                    d7:4c:f1:8c:18:21:6a:0b:2e:d5:23:a0:c5:81:b8:
                    ee:9a:d2:51:6a:44:2b:6e:3b:c7:45:f6:6c:a7:08:
                    8c:9e:0d:0b:2a:05:e2:c6:ee:91:23:35:33:a3:72:
                    f7:15:0b:92:c0:37:4f:6d:b1:d6:bb:52:db:da:e5:
                    bb:7a:67:9a:a2:28:ef:ae:ea:79:b1:38:7b:7e:19:
                    68:1f:72:6c:91:90:9e:54:9c:d4:bb:f1:d0:cc:78:
                    fb:52:0f:9f:61:5a:8e:9d:fb:6b:fa:54:fc:f5:f6:
                    b2:e2:9f:ac:9b:f9:c4:aa:dd:e4:3d:0d:05:30:2c:
                    ab:37:b7:96:cb:f7:88:45:76:a0:1b:ca:cd:ca:3d:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:32:24:E6:1A:CD:D1:A9:5D:E0:E1:98:83:FE:45:82:9A:F0:40:83
            X509v3 Authority Key Identifier:
                keyid:C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:f1:0c:c8:78:7e:59:00:86:c2:57:27:fb:c9:26:b8:16:b0:
         91:47:20:34:be:76:4b:fd:dd:07:38:35:ca:80:07:14:5b:85:
         9f:4b:f1:1b:29:9b:e7:05:aa:fc:06:bd:4f:95:49:ec:b2:9c:
         82:18:84:d4:56:2d:06:9e:b5:c9:82:38:fe:b0:2e:9e:d6:05:
         a2:d7:b5:c6:59:2e:bd:08:61:ad:af:95:4c:94:a0:f5:e0:5f:
         75:fe:ed:fd:9a:fd:1a:58:63:6b:bd:42:99:4d:5a:4a:47:f9:
         a2:38:f5:e8:ef:35:eb:9c:9f:df:6a:a9:6e:74:9e:8f:68:09:
         82:63:03:38:76:86:58:2b:30:e3:c2:65:66:7f:8c:a8:af:e7:
         51:9a:c5:e5:52:9e:30:fa:a7:8c:6e:3c:1f:3a:e6:28:6d:0c:
         bb:52:6b:4a:f7:46:b6:9d:02:7b:b9:3d:33:a9:50:48:ca:97:
         d0:ea:69:e1:19:dd:39:8e:1d:e1:8b:c2:9d:3c:91:ef:16:b2:
         e8:31:24:c3:3e:89:d3:43:19:a4:ca:28:5c:c2:7a:1d:b4:4a:
         d9:6f:0d:a1:ca:02:9b:03:4e:30:02:89:e4:35:9d:8d:14:ee:
         bb:87:8b:0a:a8:21:b4:32:fe:6e:d4:d3:cb:73:c2:09:e8:48:
         56:a6:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:44 2026 by rpki-client