Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/n0WsRarl1ZCtf98gKMbQOVj7mvo.roa
File:                     n0WsRarl1ZCtf98gKMbQOVj7mvo.roa (raw, json)
Hash identifier:          8OSeF4xfCuzs8/nODPvQ+pG9DoxfVNSddcdjhezJN7c=
Subject key identifier:   9F:45:AC:45:AA:E5:D5:90:AD:7F:DF:20:28:C6:D0:39:58:FB:9A:FA
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       73
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/n0WsRarl1ZCtf98gKMbQOVj7mvo.roa
Signing time:             Tue 31 Mar 2026 07:30:11 +0000
ROA not before:           Tue 31 Mar 2026 07:30:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        2001:d70::/30 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Mar 31 07:30:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9F45AC45AAE5D590AD7FDF2028C6D03958FB9AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:3b:dd:fd:90:75:8d:a9:88:ff:71:0c:82:
                    ca:41:c2:7d:27:11:47:16:ff:72:a3:8a:4b:56:06:
                    09:fb:77:dd:9d:fc:f5:d4:2f:18:20:bd:56:4b:06:
                    59:1c:76:8b:df:f0:4f:e1:a6:68:0e:fc:02:a9:33:
                    86:37:37:a9:eb:6c:d6:fe:84:14:98:94:bf:71:cc:
                    61:a6:69:94:2d:89:20:dc:ee:e5:6d:78:21:9c:ce:
                    ed:59:b5:32:ac:df:17:4e:77:64:1a:2c:66:5b:f2:
                    20:91:77:01:45:ba:5b:03:e6:9c:d9:2d:32:87:19:
                    4a:90:73:c7:e0:4c:51:5b:b8:5a:87:34:8b:8b:ce:
                    7b:ad:a4:04:4c:13:8a:af:18:94:ab:8f:a8:2e:ef:
                    26:77:1e:d7:81:84:13:88:61:d1:89:56:81:9f:00:
                    68:6c:17:94:5d:a3:71:e4:dc:2d:1a:b8:37:b1:7d:
                    a6:35:e0:15:81:2b:19:b0:7d:62:c2:68:45:37:30:
                    5f:7a:82:3a:e6:59:21:93:72:b4:16:51:f5:10:e7:
                    d3:72:f9:6b:1e:eb:f2:eb:aa:ab:b5:b9:96:e7:5e:
                    3e:5f:34:33:6a:50:d4:17:5f:b4:19:f8:4c:53:1e:
                    8b:32:8b:ea:56:a0:76:52:ce:19:0f:a7:0a:cd:62:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:AC:45:AA:E5:D5:90:AD:7F:DF:20:28:C6:D0:39:58:FB:9A:FA
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/n0WsRarl1ZCtf98gKMbQOVj7mvo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d70::/30

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:3a:d9:b8:28:b5:be:05:f5:79:24:33:dd:45:1e:d4:e7:
         09:74:94:0d:d2:97:2c:4a:1d:ee:40:3d:75:6a:03:32:02:9a:
         48:22:98:dd:f9:11:2a:e4:e4:1e:fe:0c:38:b5:2e:76:fb:c7:
         63:f0:d1:f6:5a:27:27:1d:b3:d7:b3:3c:62:fa:fe:5f:0f:47:
         b3:cd:e7:5b:35:4e:a9:03:9d:43:4b:54:84:55:cc:d6:de:a4:
         0c:e3:e8:49:a6:69:67:c9:9e:0e:82:ec:f1:f3:f6:d6:08:cd:
         22:6f:2a:a7:23:85:ec:a9:df:8d:cc:7f:37:f1:a4:13:86:ee:
         09:1b:9c:15:de:fa:17:96:04:f5:4c:5e:b7:8c:25:db:f5:a2:
         15:0d:8c:e9:22:fd:29:7b:7b:64:8b:1b:4a:90:d9:91:9c:17:
         fe:00:bd:68:cc:6e:10:a4:52:db:3d:ee:a8:b9:c9:44:f7:9f:
         db:4d:ce:64:d6:64:3b:30:e3:e7:d1:eb:4b:81:71:ac:2d:c9:
         a2:a8:66:6f:fb:47:f2:d7:30:38:b4:31:cd:49:17:a6:0c:61:
         38:86:df:26:2f:8a:cb:15:4e:d4:af:9c:37:83:3d:d0:57:28:
         9b:6a:3c:5b:88:73:a6:a7:b8:91:07:e0:6c:ca:17:51:9c:90:
         d1:44:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:17 2026 by rpki-client