Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa
File:                     3vHw4MqDJkdC5SmWih0k4J7hgwg.roa (raw, json)
Hash identifier:          5hQQ9HE1kETQfw1FVQ6/sNi+hHKi4bl4ZT4B/PazhO4=
Subject key identifier:   DE:F1:F0:E0:CA:83:26:47:42:E5:29:96:8A:1D:24:E0:9E:E1:83:08
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       2F
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa
Signing time:             Tue 31 Mar 2026 08:37:56 +0000
ROA not before:           Tue 31 Mar 2026 08:37:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        2405:7000:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Mar 31 08:37:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DEF1F0E0CA83264742E529968A1D24E09EE18308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:2b:a0:69:f7:3d:59:7f:ca:b0:d1:1d:d7:
                    b7:e5:ed:77:b0:b1:7b:32:c5:2f:94:94:8d:b8:85:
                    66:40:52:c7:80:87:07:dc:99:71:29:e3:d8:f6:df:
                    4e:7c:bb:56:2b:b4:71:29:c7:aa:ea:74:57:fd:a7:
                    86:f8:48:2c:f4:94:88:90:bd:ca:52:24:3c:e2:10:
                    45:50:f5:24:44:c7:a1:e9:fa:83:22:fa:5a:c4:6b:
                    c0:5d:8d:45:05:98:58:7e:02:9b:ee:86:fa:94:09:
                    56:50:a0:8b:40:93:73:d3:9a:5a:8c:4d:41:e1:01:
                    9a:48:be:ad:5c:0e:a2:9f:09:cb:22:70:8b:ee:64:
                    5d:cc:d9:5a:11:e4:61:45:2d:e9:88:1b:12:d1:c7:
                    fe:e7:49:0d:bb:b8:ad:bf:32:95:2c:0a:25:a5:85:
                    3c:4e:45:c8:26:d4:9d:e7:c6:58:79:b6:fc:8d:8e:
                    3e:f8:0b:9e:04:c8:8d:57:56:6d:0e:a7:cc:4a:59:
                    ab:4c:77:14:ee:9f:7f:78:96:47:cd:29:62:75:59:
                    d6:7b:f0:c5:05:1a:ae:92:8a:d7:a9:ba:c1:3e:9b:
                    f4:7b:c9:86:53:7b:6d:dd:a3:07:55:c5:9c:e0:f0:
                    48:b1:ce:0e:d5:64:7c:73:e3:af:d5:b8:c5:b9:13:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F1:F0:E0:CA:83:26:47:42:E5:29:96:8A:1D:24:E0:9E:E1:83:08
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/3vHw4MqDJkdC5SmWih0k4J7hgwg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:6e:a5:23:33:20:4b:59:82:8e:8c:9e:3a:2c:fc:39:7e:
         a6:be:05:e0:c0:bf:c8:00:29:da:b9:74:3b:c5:7c:f3:61:b1:
         b7:14:41:22:0d:9d:7c:3d:dc:65:54:d3:ea:9c:d8:d6:e2:f6:
         fd:a8:51:e4:eb:a2:2b:b5:ba:24:87:81:92:3f:72:a1:c3:66:
         27:b8:0f:17:29:dd:d3:39:84:ce:88:e0:17:d1:a5:01:2d:a3:
         f3:51:47:72:d6:0f:a5:86:ce:95:ef:d7:ac:62:72:00:ec:25:
         70:61:a0:4f:7c:68:f6:36:ab:17:fe:c1:92:e2:77:98:59:33:
         56:c3:cb:41:31:4d:f1:22:86:21:cd:c7:8e:bd:85:1a:21:d6:
         6f:aa:41:1d:62:b3:21:79:1d:8f:30:f1:8a:0b:51:89:7c:c7:
         3c:5f:92:97:99:ed:91:c0:e3:a0:14:b2:61:aa:e3:d7:08:71:
         88:7b:13:44:bf:e1:c8:71:8c:d6:17:be:4f:54:5e:87:1f:c3:
         b8:da:87:e9:cb:35:be:08:4f:59:a3:92:6c:5d:33:7d:1e:d6:
         28:05:42:f8:81:86:34:d2:22:7e:a9:47:a8:d0:af:d9:a3:c8:
         b5:da:a7:e2:56:32:d4:3a:9b:26:a4:96:c7:9a:d0:e2:dc:be:
         e0:3b:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:12 2026 by rpki-client