Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa
File:                     yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa (raw, json)
Hash identifier:          4oGPyDRlbMyBJQhWWZrWGolOutsGKOJZG3WGwOaM5cU=
Subject key identifier:   C9:A4:DC:F2:11:EE:44:56:D1:B7:64:39:31:82:69:A3:31:C1:28:30
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       72
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa
Signing time:             Tue 31 Mar 2026 07:30:11 +0000
ROA not before:           Tue 31 Mar 2026 07:30:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37899
IP address blocks:        2001:a000::/21 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Mar 31 07:30:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C9A4DCF211EE4456D1B76439318269A331C12830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:5b:90:a2:6d:12:4a:6c:16:7b:04:63:14:
                    7b:f8:b4:27:57:c8:fe:7e:3c:1e:58:2d:0e:c7:ab:
                    44:74:bf:b7:47:a0:0c:db:77:c6:fd:4c:7c:4a:e7:
                    ed:39:37:80:4b:c5:e0:ef:18:66:d5:91:46:d1:1d:
                    fe:42:06:e5:36:51:46:47:f6:7d:f9:f1:91:ac:16:
                    b4:e5:4b:80:77:e4:62:ad:33:d9:32:4e:6f:ee:b1:
                    e6:0b:a3:ad:54:0d:bb:ac:31:64:f3:94:68:6c:cc:
                    1c:9f:b7:f6:42:85:d6:3c:12:8e:8f:f1:51:19:a0:
                    5a:57:49:ab:0c:1e:0a:d2:b9:d2:e6:20:c6:7a:7e:
                    1f:b3:ed:2b:7e:60:da:84:06:d1:c1:66:d9:dd:b5:
                    fb:30:f4:a5:62:b0:4e:a8:8f:a3:db:ca:88:8d:c1:
                    33:40:68:67:43:77:77:d6:00:b8:d7:c7:47:4f:eb:
                    0c:9e:d4:e5:30:46:17:a3:e5:87:a4:6f:ba:c1:50:
                    16:cc:92:34:4c:ce:d0:51:74:64:3e:41:50:e4:e5:
                    62:c0:f8:a9:4b:ab:80:a5:63:67:b0:00:a9:5f:bd:
                    94:67:8c:21:14:bd:85:36:a2:e9:7e:48:c5:aa:90:
                    be:da:db:90:c4:32:25:84:00:6c:53:8c:3c:0b:b5:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:DC:F2:11:EE:44:56:D1:B7:64:39:31:82:69:A3:31:C1:28:30
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:a000::/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:8b:db:51:d8:66:bd:45:27:9d:b6:f0:ba:64:5f:77:b4:
         ff:07:a4:6c:b2:94:fb:c5:a2:09:19:01:9b:bb:27:de:ee:62:
         da:c0:3a:4d:8e:e3:93:b6:37:b4:24:75:07:d0:05:b1:68:28:
         46:7a:9d:58:2d:7a:34:c8:b0:e4:5b:40:46:23:f6:3d:2a:9f:
         a2:d8:b1:ad:4d:ad:7f:00:a5:95:e5:89:9e:6e:cd:eb:b1:f1:
         e6:90:12:aa:48:17:67:36:39:fe:70:37:7f:80:2a:d9:40:43:
         af:42:20:e4:04:ad:06:41:28:ed:48:57:04:cc:46:55:cc:7e:
         39:29:13:07:f0:a0:2b:cb:79:e9:ee:17:64:41:4a:31:19:7a:
         30:9e:87:1e:36:c0:e3:5b:51:ee:bf:66:bb:df:96:0a:a7:0d:
         75:a6:d3:d9:ab:82:ff:75:47:eb:d7:92:eb:d4:98:29:d1:eb:
         9e:39:c6:48:a2:ef:3d:9d:37:9b:85:0b:0d:cb:b4:fc:40:c7:
         79:69:b2:32:fb:1f:31:fc:13:e3:b6:a9:2a:ec:f6:b9:3d:2f:
         bb:93:ac:a4:fa:b1:2b:a8:be:39:49:66:38:f2:e2:28:5d:4d:
         a1:65:b6:0a:e3:46:c2:b2:6d:44:75:6c:ef:64:0a:90:73:c5:
         f1:3c:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:42 2026 by rpki-client