Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/3k17CuaLruG5ZgeFTQN96gDSImo.roa
File:                     3k17CuaLruG5ZgeFTQN96gDSImo.roa (raw, json)
Hash identifier:          hhfen8G95lh15vcz/5/LkG5C5P4oG0qXulBDM0oCaGk=
Subject key identifier:   DE:4D:7B:0A:E6:8B:AE:E1:B9:66:07:85:4D:03:7D:EA:00:D2:22:6A
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       77
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/3k17CuaLruG5ZgeFTQN96gDSImo.roa
Signing time:             Tue 31 Mar 2026 07:27:13 +0000
ROA not before:           Tue 31 Mar 2026 07:27:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38639
IP address blocks:        2402:c800:ff7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Mar 31 07:27:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE4D7B0AE68BAEE1B96607854D037DEA00D2226A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:23:dc:db:b2:da:50:0c:ba:1d:2b:ca:0e:
                    0c:23:1b:b8:f6:16:13:02:a0:b5:a0:2d:c2:c5:4e:
                    f2:64:20:33:1e:7a:48:b6:e1:81:d7:a6:fc:27:2f:
                    3c:c1:fa:78:38:74:f0:e1:1a:29:ef:d4:14:ef:69:
                    8e:27:57:0b:07:64:f0:e9:cc:ba:cd:19:23:1a:e2:
                    56:85:67:72:18:86:54:d2:b0:e7:f2:87:cf:1f:08:
                    09:63:3c:7f:13:c2:21:01:40:cc:b9:49:0c:cc:f1:
                    cb:31:11:a3:8a:70:bc:bc:d2:d3:fd:63:f5:83:37:
                    ec:78:4e:53:cb:48:34:89:78:8c:56:5f:11:98:40:
                    87:90:78:0c:da:03:a1:b5:f9:d6:09:75:91:10:31:
                    56:8d:f1:ab:22:db:e6:44:03:ad:2a:c4:0f:4b:07:
                    c4:37:ba:74:4e:f8:80:0c:cb:06:81:a0:17:be:2a:
                    53:94:24:b8:b7:e4:e4:35:78:46:dc:21:96:84:cf:
                    e4:fe:50:f2:a6:f8:03:1a:02:bb:bc:6b:cb:9d:3a:
                    5b:38:51:13:64:ee:35:f3:a5:80:36:87:e4:8b:3a:
                    e1:69:78:d5:c8:cc:c1:09:bf:71:33:0e:b6:dc:27:
                    90:61:bc:fd:76:7d:92:a0:68:59:cc:35:2c:b1:8b:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4D:7B:0A:E6:8B:AE:E1:B9:66:07:85:4D:03:7D:EA:00:D2:22:6A
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/3k17CuaLruG5ZgeFTQN96gDSImo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ff7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:2a:cb:12:8f:e4:27:88:37:8e:71:8a:4c:7f:fc:4a:6c:
         a0:3f:5d:4b:de:7d:1f:a6:57:de:94:2b:9f:35:57:3e:f0:a5:
         b2:73:ae:31:ca:60:05:8a:3a:a5:ef:67:5f:5d:55:fa:a3:a9:
         a5:0f:1c:a5:e0:70:c4:be:18:3c:07:21:0c:d4:c6:ba:20:5f:
         db:9e:93:cc:83:1f:89:e0:1a:49:37:a8:02:a7:32:be:96:8d:
         af:78:2c:d5:7e:35:b9:c2:98:0b:22:ed:39:af:de:42:aa:f7:
         f3:b7:ac:b9:21:75:1c:85:ed:cb:91:6d:02:18:b9:b3:20:13:
         b4:d7:a7:34:89:32:1b:50:f2:95:45:42:a4:b4:6c:65:de:7d:
         ab:a1:42:53:c8:f1:17:44:e1:1a:99:96:eb:89:38:61:2f:da:
         98:03:86:80:ac:73:f8:c6:38:b7:a2:83:97:cb:29:6a:1a:e9:
         09:bf:1e:99:17:54:ca:0a:66:80:4e:cd:35:88:c7:17:2a:d0:
         2b:0c:ed:11:67:e8:7a:3d:9d:0c:a4:ae:d3:05:76:c3:18:60:
         90:4e:39:87:33:a0:93:14:b0:13:10:4e:3b:89:67:d8:29:76:
         32:4f:37:36:4f:52:ff:da:26:f6:7e:26:b7:0e:87:0b:d8:8a:
         5d:73:a5:2f
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw
MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI2MDMzMTA3
MjcxM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREU0RDdCMEFFNjhCQUVF
MUI5NjYwNzg1NEQwMzdERUEwMEQyMjI2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKkbI9zbstpQDLodK8oODCMbuPYWEwKgtaAtwsVO8mQgMx56SLbh
gdem/CcvPMH6eDh08OEaKe/UFO9pjidXCwdk8OnMus0ZIxriVoVnchiGVNKw5/KH
zx8ICWM8fxPCIQFAzLlJDMzxyzERo4pwvLzS0/1j9YM37HhOU8tINIl4jFZfEZhA
h5B4DNoDobX51gl1kRAxVo3xqyLb5kQDrSrED0sHxDe6dE74gAzLBoGgF74qU5Qk
uLfk5DV4RtwhloTP5P5Q8qb4AxoCu7xry506WzhRE2TuNfOlgDaH5Is64Wl41cjM
wQm/cTMOttwnkGG8/XZ9kqBoWcw1LLGLB4kCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBTeTXsK5ouu4blmB4VNA33qANIiajAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O
yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO
U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDkxLzNrMTdDdWFMcnVHNVpnZUZUUU45NmdEU0ltby5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAsgA/3swDQYJKoZIhvcNAQEL
BQADggEBAFveKssSj+QniDeOcYpMf/xKbKA/XUvefR+mV96UK581Vz7wpbJzrjHK
YAWKOqXvZ19dVfqjqaUPHKXgcMS+GDwHIQzUxrogX9uek8yDH4ngGkk3qAKnMr6W
ja94LNV+NbnCmAsi7Tmv3kKq9/O3rLkhdRyF7cuRbQIYubMgE7TXpzSJMhtQ8pVF
QqS0bGXefauhQlPI8RdE4RqZluuJOGEv2pgDhoCsc/jGOLeig5fLKWoa6Qm/HpkX
VMoKZoBOzTWIxxcq0CsM7RFn6Ho9nQykrtMFdsMYYJBOOYczoJMUsBMQTjuJZ9gp
djJPNzZPUv/aJvZ+JrcOhwvYil1zpS8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:17 2026 by rpki-client