Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/5lpZqAWb3HUznCL1MpkyJs-C7ZE.roa
File:                     5lpZqAWb3HUznCL1MpkyJs-C7ZE.roa (raw, json)
Hash identifier:          CTaYfHI9U4AyEO6pX+rz1HEcho5K6XVCeDm6iLi3vHc=
Subject key identifier:   E6:5A:59:A8:05:9B:DC:75:33:9C:22:F5:32:99:32:26:CF:82:ED:91
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       2E
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/5lpZqAWb3HUznCL1MpkyJs-C7ZE.roa
Signing time:             Tue 31 Mar 2026 08:37:55 +0000
ROA not before:           Tue 31 Mar 2026 08:37:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        2405:7000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Mar 31 08:37:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E65A59A8059BDC75339C22F532993226CF82ED91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:7d:51:03:47:e2:e3:3a:ec:69:c3:dc:63:
                    35:32:2c:cc:f3:b3:ce:01:b8:17:f7:e1:c3:35:41:
                    2c:f9:b7:f5:84:3d:5a:48:ff:84:8f:29:ec:9e:78:
                    92:3e:cc:63:41:c6:d3:c7:ef:a5:57:72:f3:a5:80:
                    6b:aa:79:09:cd:85:f4:cf:4e:3c:97:3e:78:2e:43:
                    b3:ca:bb:70:0d:9b:d3:c9:4e:82:eb:fb:e3:8c:f2:
                    de:f9:bf:63:e4:a0:fa:0e:67:bb:c4:c7:87:a5:3b:
                    9c:87:55:4e:a9:15:c3:85:0e:96:af:ae:01:58:01:
                    d9:0f:bb:c4:40:35:35:af:6b:df:42:6c:a5:12:53:
                    8b:0d:b7:c1:32:28:17:b1:51:ea:72:f0:a7:a0:3b:
                    60:35:4b:9c:7f:07:fc:5f:f5:f2:76:f2:d8:57:b2:
                    f1:f7:ef:a1:4e:49:e4:34:45:ab:7a:d5:b2:1c:1a:
                    5f:8e:22:28:5a:99:06:f3:2d:fa:1f:c3:11:59:bd:
                    af:50:57:4c:1c:dc:2b:a5:5e:04:3a:fa:d0:5f:09:
                    f3:b4:3e:aa:a1:57:b6:b0:1e:8b:a0:bb:91:aa:2d:
                    b7:b7:f6:50:28:ad:ca:ea:e4:75:dd:5f:a7:b6:e7:
                    06:83:ad:32:59:db:be:73:e2:71:62:48:e8:44:ee:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5A:59:A8:05:9B:DC:75:33:9C:22:F5:32:99:32:26:CF:82:ED:91
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/5lpZqAWb3HUznCL1MpkyJs-C7ZE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:52:95:5c:3f:d8:14:4c:3d:14:bd:78:cb:49:29:24:66:
         36:5f:92:51:7b:ce:38:53:31:e5:e4:44:c0:8d:c4:b0:6c:21:
         20:9a:2f:6a:a0:09:af:04:27:b6:4c:b0:f6:a6:49:82:34:4d:
         b5:9e:0f:dd:43:db:84:00:bf:30:d9:b5:bc:03:32:63:b4:58:
         c1:8e:6e:c1:3c:4d:e0:a7:84:c2:d7:81:c4:54:12:f3:2e:41:
         00:86:9d:28:5a:00:cf:a3:0f:b5:61:2b:88:9d:ad:ed:19:13:
         c7:3c:f9:62:38:05:e4:ab:82:cd:9e:45:23:bb:24:3c:96:45:
         9c:02:70:96:44:06:c5:f3:eb:04:d3:4f:6f:6a:32:ae:22:93:
         a8:1b:45:94:ea:0a:7c:99:d3:ac:fe:42:71:9a:99:bb:ea:94:
         1b:c8:46:61:f4:9e:e8:32:63:41:d8:8f:0f:3c:e7:a2:59:f6:
         19:46:9a:c4:7b:11:c4:40:9b:01:af:76:bb:25:75:cc:b9:9c:
         8b:01:fb:93:85:d3:f1:03:d7:a2:36:03:20:90:28:b6:59:66:
         67:d5:8d:65:1e:34:48:f7:ef:be:8a:5a:06:bc:52:8e:31:dc:
         9b:92:d6:c4:25:3a:4d:41:34:d5:35:14:f7:20:d9:22:ce:f3:
         f3:69:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client