Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/hN0Ncjt-nc2WQweKxFP49r7AXSA.roa
File:                     hN0Ncjt-nc2WQweKxFP49r7AXSA.roa (raw, json)
Hash identifier:          /iUFQhwgD0Tia43a461V6DY9N0CZu0JL1lKLFRhg5is=
Subject key identifier:   84:DD:0D:72:3B:7E:9D:CD:96:43:07:8A:C4:53:F8:F6:BE:C0:5D:20
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       29
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/hN0Ncjt-nc2WQweKxFP49r7AXSA.roa
Signing time:             Sun 01 Feb 2026 01:36:06 +0000
ROA not before:           Sun 01 Feb 2026 01:36:06 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        2405:7000:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Feb  1 01:36:06 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=84DD0D723B7E9DCD9643078AC453F8F6BEC05D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:c0:4d:34:2e:b3:ef:05:ee:8e:68:a5:03:
                    71:47:a1:54:e2:ad:de:38:8c:47:46:82:50:fe:3c:
                    e6:79:a5:da:8d:e0:2c:22:93:92:2e:90:ad:67:3d:
                    4e:cd:fd:0c:42:81:0f:5a:f2:7f:b6:e0:8c:dc:28:
                    88:ed:59:bd:9c:84:3a:e7:c5:48:e7:0a:a7:b3:2c:
                    57:ff:2f:9e:84:37:1d:c0:04:6e:52:9f:72:ff:d2:
                    a8:bc:5d:2f:d5:0b:2e:4a:32:d1:d8:03:c1:6d:6e:
                    b0:da:c6:ef:6b:da:43:26:d2:a7:61:08:c2:d5:eb:
                    73:5e:6d:1d:95:29:b5:8c:59:ba:6e:2e:2d:67:0c:
                    d9:74:e0:56:7b:6e:68:f9:20:51:af:57:dc:d9:89:
                    2a:78:94:41:a7:ae:c2:f7:66:e5:0c:1d:2b:ae:6f:
                    5d:08:fc:de:df:1b:33:cd:13:58:02:92:b4:8d:ff:
                    fd:82:d1:b6:07:6c:7c:75:5a:76:13:e3:2f:9d:b7:
                    72:4e:77:bc:19:1a:d0:79:9a:03:64:b6:75:82:5b:
                    88:73:79:88:cf:54:5b:72:1b:e4:ca:4d:10:1b:3c:
                    57:84:42:3c:61:39:c7:8d:c7:e3:98:5e:6b:05:76:
                    2c:46:19:a4:0c:79:1a:43:73:fc:3d:a1:c5:fe:79:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:0D:72:3B:7E:9D:CD:96:43:07:8A:C4:53:F8:F6:BE:C0:5D:20
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/hN0Ncjt-nc2WQweKxFP49r7AXSA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:aa:6b:68:d5:50:6f:bb:e5:9e:0c:52:bc:ff:94:14:53:01:
         2c:50:e3:11:a3:cb:d7:46:6e:7f:22:5e:68:64:28:9a:36:18:
         a7:a3:01:c6:b7:00:9b:a9:3f:49:c3:0c:42:f7:78:9e:13:d7:
         7b:34:68:50:2d:79:6f:95:74:20:8d:e1:b3:64:db:07:38:c1:
         2b:6c:ae:ad:79:35:f5:93:2f:a6:d4:69:65:3e:33:2a:c3:4a:
         d4:8b:dc:20:0a:52:3d:51:0f:f1:fc:fc:da:98:38:cf:97:77:
         09:a4:c0:2a:9a:88:65:02:c1:97:bd:8d:03:77:d5:30:4e:b3:
         22:b0:e2:71:1a:94:fa:85:49:fe:56:5d:0a:bc:65:7a:21:c7:
         df:2c:cd:43:f7:a0:84:8f:ec:04:29:67:15:5e:a8:b0:f7:0c:
         84:7c:8f:2e:bb:85:20:4c:db:22:7a:17:0a:30:34:04:70:e0:
         e5:55:2b:23:33:3e:c2:dc:31:40:49:d3:66:5a:3f:79:34:25:
         da:db:19:9e:74:ea:0b:a7:70:04:e9:a9:de:7b:a3:bc:7d:25:
         b3:9b:c4:b7:da:db:af:d9:a2:9d:df:95:18:ed:6e:39:7e:14:
         42:65:00:0a:3e:2f:9d:04:66:19:ec:36:11:67:b4:d2:11:c8:
         8d:ec:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:00 2026 by rpki-client