Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Xs6ot03uIiu2qlIep9gYop_NzLI.roa
File:                     Xs6ot03uIiu2qlIep9gYop_NzLI.roa (raw, json)
Hash identifier:          37xma5X7kQAbdqLDhPhFgn1LGElDlkE1Bq9Snl6+blE=
Subject key identifier:   5E:CE:A8:B7:4D:EE:22:2B:B6:AA:52:1E:A7:D8:18:A2:9F:CD:CC:B2
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       74
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Xs6ot03uIiu2qlIep9gYop_NzLI.roa
Signing time:             Tue 31 Mar 2026 07:27:11 +0000
ROA not before:           Tue 31 Mar 2026 07:27:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37900
IP address blocks:        2402:c800:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Mar 31 07:27:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5ECEA8B74DEE222BB6AA521EA7D818A29FCDCCB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:93:23:a6:a4:98:27:29:34:6f:f1:c3:62:
                    ed:f3:ac:07:2f:c8:ff:62:eb:b4:8c:9c:6c:7b:ee:
                    7e:68:68:9e:7c:ee:76:08:c7:df:a7:f6:2b:9c:61:
                    c1:9a:b4:d0:f8:67:36:7b:fd:91:15:75:9d:3d:2c:
                    f7:dd:af:aa:8c:a7:4e:23:ed:52:38:7f:92:9a:f3:
                    a4:bb:4f:b3:63:a0:20:99:ec:ba:17:6a:76:20:5d:
                    fb:70:d4:8c:fa:15:2e:80:46:9e:6a:8e:08:34:52:
                    1b:cf:84:a9:88:9c:98:bd:ac:62:c4:b5:37:db:64:
                    22:27:f3:50:e6:a8:f9:55:a8:1e:df:3d:b7:8e:95:
                    9f:36:bb:38:db:6a:8c:91:5a:ea:0b:7e:dd:62:2c:
                    9a:0b:a8:03:f7:53:ef:d4:e5:33:39:27:02:c9:98:
                    d2:3f:c8:fe:8f:c8:15:c1:db:b0:11:e9:1e:7a:b1:
                    70:a7:53:22:13:65:a2:cf:b7:95:67:78:01:39:40:
                    f9:12:90:6b:23:aa:d1:0e:ac:be:b1:58:06:01:fc:
                    fa:e6:dc:2c:a1:e9:cf:76:e3:47:15:c8:9f:d8:2d:
                    49:62:34:b8:57:90:65:5a:4b:ef:6f:e7:bd:ca:51:
                    55:c3:8e:45:db:d8:7b:84:71:5c:40:5e:21:3c:77:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CE:A8:B7:4D:EE:22:2B:B6:AA:52:1E:A7:D8:18:A2:9F:CD:CC:B2
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Xs6ot03uIiu2qlIep9gYop_NzLI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:57:b6:ce:90:e7:de:cb:53:be:ed:a2:82:95:72:8e:ae:54:
         cc:01:03:ef:c3:03:59:3f:71:5c:99:87:01:89:df:f5:1c:ee:
         74:70:83:fb:4b:06:a3:84:79:33:5b:db:e8:38:bc:e6:6b:d2:
         b0:22:8a:c9:08:59:c0:48:e5:64:0d:5d:c3:db:9e:b2:78:aa:
         28:3f:91:21:f8:a6:04:9f:2a:b6:e1:1e:12:68:b0:0d:ef:de:
         0e:41:fe:12:0a:4c:74:34:be:4a:42:81:53:58:c4:cb:35:f1:
         e0:06:37:21:48:c7:0d:4d:02:0b:0b:c5:91:56:4d:e1:04:c7:
         24:21:86:41:40:6e:df:2e:ac:32:60:c3:f7:d0:25:1e:66:bd:
         2b:e6:44:77:d6:3c:24:da:fc:99:a9:51:01:14:ea:4c:a3:0d:
         a5:eb:eb:20:57:79:c7:aa:ab:ba:3e:03:6e:a4:9e:d3:5c:d1:
         42:e1:26:9f:60:fb:e0:18:d6:5c:19:9c:66:fc:e0:2e:9d:51:
         14:72:e0:68:92:b3:ff:fd:2f:9a:11:95:ca:77:8b:d5:ba:4a:
         bc:e7:af:a7:c2:af:24:5a:f7:be:93:c7:20:9c:58:27:ad:11:
         da:89:74:bb:4a:ec:da:27:da:50:e4:74:38:2e:93:42:26:7d:
         ed:ca:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:21 2026 by rpki-client