Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa
File:                     k39UZTGw8MMgso8QUpbN-0WBN-E.roa (raw, json)
Hash identifier:          oxLbdj4R35Waf+1JEpFiMKkp+FvDnqkx2PcuebX7AsQ=
Subject key identifier:   93:7F:54:65:31:B0:F0:C3:20:B2:8F:10:52:96:CD:FB:45:81:37:E1
Certificate issuer:       /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Certificate serial:       2F
Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa
Signing time:             Tue 31 Mar 2026 08:35:25 +0000
ROA not before:           Tue 31 Mar 2026 08:35:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        2405:6580::/29 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
        Validity
            Not Before: Mar 31 08:35:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=937F546531B0F0C320B28F105296CDFB458137E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:54:20:7c:26:22:fa:9f:4f:bf:4b:a3:3c:
                    8d:81:6e:43:52:84:03:57:f0:89:38:bb:48:97:af:
                    46:96:44:1a:35:bf:3c:0d:e3:e5:39:f6:87:8b:25:
                    de:18:bd:b4:90:c2:94:7b:c0:df:6d:0c:01:d9:3f:
                    6d:cb:6d:52:bf:1d:69:f7:8f:93:c8:cb:dc:43:cb:
                    aa:5c:b6:0b:21:2f:16:85:e7:af:5c:f4:35:52:ea:
                    a6:69:87:05:d8:94:f3:22:71:55:6c:f2:5c:f4:2c:
                    a6:df:c3:dd:d7:ff:55:91:00:9a:3b:c8:30:0b:0b:
                    96:c9:ee:3c:85:d7:8f:2d:26:21:93:83:57:f8:ad:
                    a4:36:ac:85:46:29:01:2c:d9:d3:6a:72:b2:31:7a:
                    0e:88:a5:65:82:d0:39:90:06:12:80:61:55:f0:e4:
                    26:75:04:93:8d:64:ce:d8:d8:56:3d:fc:ca:26:09:
                    41:ec:a7:b6:67:05:7e:5e:2e:e0:d9:ad:6f:ef:e1:
                    e0:f9:b9:ea:a3:56:21:2a:27:dc:b2:f5:04:0d:a7:
                    a7:97:24:d1:81:f0:13:1d:09:33:cf:1d:69:c4:46:
                    11:90:6a:2d:66:87:bc:d6:53:04:a8:3f:dd:b2:f1:
                    82:01:70:d6:2a:a7:be:a1:7c:56:d6:38:cb:1f:98:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7F:54:65:31:B0:F0:C3:20:B2:8F:10:52:96:CD:FB:45:81:37:E1
            X509v3 Authority Key Identifier:
                keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6580::/29

    Signature Algorithm: sha256WithRSAEncryption
         cf:84:da:19:80:0d:8a:a7:cf:e4:43:c1:62:59:1e:ce:24:fc:
         30:06:0d:f7:4e:93:15:38:0e:e3:3d:4b:a3:12:58:e6:92:92:
         00:7f:a9:c6:5b:20:a3:68:d7:e3:ec:1f:07:08:ed:c5:28:03:
         05:2c:de:6a:06:6f:a5:29:68:3c:ab:02:9d:dd:06:77:90:04:
         f1:b7:d8:ac:df:7a:af:03:33:99:aa:a8:9a:94:46:7f:ed:0b:
         ad:35:9c:a8:08:51:f7:ed:08:20:19:45:62:51:c1:b5:ff:3b:
         93:63:96:ac:e1:87:ef:ee:6b:ad:7e:06:69:1d:12:f0:57:ba:
         56:9f:b0:13:45:c2:80:00:7a:ce:c7:89:02:8c:0c:38:00:fb:
         70:a3:6e:94:70:f1:cd:1c:20:82:35:5c:b7:67:cf:5c:21:7f:
         07:35:e2:eb:0a:43:d8:47:58:6b:12:25:94:c6:af:a1:e6:eb:
         7a:fb:30:06:1b:17:f6:19:a7:7f:9f:cf:5d:3d:ec:f0:29:7c:
         f0:e6:f6:09:10:24:86:74:f6:a1:d3:f5:05:19:a7:3f:83:42:
         50:54:f8:64:ab:27:75:10:5a:e7:ab:ae:99:51:15:95:e5:a9:
         be:b4:f9:0a:b7:b6:28:be:6b:e5:bc:2a:8a:e0:e2:c6:2e:f7:
         1d:04:de:a3
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTgx
NkY1REVGMDIzQTlDQjRBNDBCQkQzQ0M2M0ZGREY5MTAzRUEzMB4XDTI2MDMzMTA4
MzUyNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTM3RjU0NjUzMUIwRjBD
MzIwQjI4RjEwNTI5NkNERkI0NTgxMzdFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLNVCB8JiL6n0+/S6M8jYFuQ1KEA1fwiTi7SJevRpZEGjW/PA3j
5Tn2h4sl3hi9tJDClHvA320MAdk/bcttUr8dafePk8jL3EPLqly2CyEvFoXnr1z0
NVLqpmmHBdiU8yJxVWzyXPQspt/D3df/VZEAmjvIMAsLlsnuPIXXjy0mIZODV/it
pDashUYpASzZ02pysjF6DoilZYLQOZAGEoBhVfDkJnUEk41kztjYVj38yiYJQeyn
tmcFfl4u4Nmtb+/h4Pm56qNWISon3LL1BA2np5ck0YHwEx0JM88dacRGEZBqLWaH
vNZTBKg/3bLxggFw1iqnvqF8VtY4yx+YG5UCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSTf1RlMbDwwyCyjxBSls37RYE34TAfBgNVHSMEGDAWgBRegW9d7wI6nLSkC708
xj/9+RA+ozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjUvWG9GdlhlOENPcHkwcEF1OVBNWV9fZmtRUHFNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWG9GdlhlOENPcHkwcEF1OVBNWV9f
ZmtRUHFNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDY1L2szOVVaVEd3OE1NZ3NvOFFVcGJOLTBXQk4tRS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMkBWWAMA0GCSqGSIb3DQEBCwUA
A4IBAQDPhNoZgA2Kp8/kQ8FiWR7OJPwwBg33TpMVOA7jPUujEljmkpIAf6nGWyCj
aNfj7B8HCO3FKAMFLN5qBm+lKWg8qwKd3QZ3kATxt9is33qvAzOZqqialEZ/7Qut
NZyoCFH37QggGUViUcG1/zuTY5as4Yfv7mutfgZpHRLwV7pWn7ATRcKAAHrOx4kC
jAw4APtwo26UcPHNHCCCNVy3Z89cIX8HNeLrCkPYR1hrEiWUxq+h5ut6+zAGGxf2
Gad/n89dPezwKXzw5vYJECSGdPah0/UFGac/g0JQVPhkqyd1EFrnq66ZURWV5am+
tPkKt7YovmvlvCqK4OLGLvcdBN6j
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:51 2026 by rpki-client