Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/vni_LKl07HO-59rJsILWJQrEUUo.roa
File:                     vni_LKl07HO-59rJsILWJQrEUUo.roa (raw, json)
Hash identifier:          qLi1pJcayFKSXRNJwU8RshlDjLsBcxqmusDRKwpjrz0=
Subject key identifier:   BE:78:BF:2C:A9:74:EC:73:BE:E7:DA:C9:B0:82:D6:25:0A:C4:51:4A
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       79
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/vni_LKl07HO-59rJsILWJQrEUUo.roa
Signing time:             Tue 31 Mar 2026 07:27:14 +0000
ROA not before:           Tue 31 Mar 2026 07:27:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38639
IP address blocks:        2402:c800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Mar 31 07:27:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE78BF2CA974EC73BEE7DAC9B082D6250AC4514A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:0b:f6:d5:59:3b:ef:19:3b:d1:46:74:5a:
                    ab:4d:f6:5e:28:23:ce:83:ba:8f:25:24:c1:16:ef:
                    72:82:2d:42:17:ca:7b:34:36:a1:82:cf:5c:4e:e5:
                    c1:5e:90:ce:d0:65:2d:ea:c2:4b:a7:27:22:a4:99:
                    9b:73:f9:fb:5a:89:c2:9a:08:67:23:1f:d4:5a:da:
                    1d:d2:83:94:42:18:8d:0e:34:7c:d1:f4:95:c3:04:
                    b4:bd:4b:e7:64:fa:3e:7b:00:5b:3f:d5:8b:84:55:
                    c7:46:8f:f7:1c:44:ed:33:5b:ec:d1:3a:4c:5a:f7:
                    3d:83:f2:4d:1f:16:e6:b6:9a:af:f0:03:7c:a4:c5:
                    db:c4:1d:e7:a6:03:a1:12:e4:ea:2e:8d:df:40:e2:
                    b7:62:78:8d:25:a7:d0:9d:7c:68:ef:54:b4:d0:97:
                    75:37:84:fe:23:c9:e0:c8:be:cd:42:82:58:4e:b0:
                    21:d7:aa:65:ee:75:5f:f8:52:6b:1a:0e:14:3d:c2:
                    f4:2f:62:9c:47:df:24:83:f8:59:90:d3:67:75:33:
                    b0:75:75:a7:30:9e:34:d5:81:90:aa:5b:53:b7:99:
                    f3:ca:69:cb:43:e8:bf:d4:36:03:9b:27:12:b7:87:
                    c8:8e:fb:b5:01:23:be:2c:2e:6a:49:0c:54:89:51:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:BF:2C:A9:74:EC:73:BE:E7:DA:C9:B0:82:D6:25:0A:C4:51:4A
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/vni_LKl07HO-59rJsILWJQrEUUo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:83:c6:e6:01:91:e2:55:3c:84:3d:e6:7f:44:f0:7f:e7:47:
         6f:e7:74:7c:86:6a:9a:d7:ec:7f:53:c4:7c:01:4d:25:93:5a:
         6d:e9:af:73:01:ea:05:20:52:66:6d:6d:b4:62:be:f4:19:9d:
         76:71:90:4c:79:64:2c:c7:9b:be:ae:bb:4a:ac:3b:34:62:2e:
         ff:42:e7:da:c9:d5:82:e4:1d:4e:72:1e:4c:62:9d:2e:6f:dc:
         c1:30:bf:23:b2:24:11:0f:fb:0f:ba:ed:31:b4:ed:ae:77:7f:
         91:42:1e:76:e6:04:28:3e:43:96:97:8f:fa:d3:bc:7c:ad:82:
         16:52:c2:32:9a:b3:4b:85:2d:0e:1c:59:f7:c0:36:0d:3f:18:
         ee:4c:de:39:a9:a4:26:f5:fc:c5:7f:0f:2b:0e:06:88:ff:0e:
         27:28:f8:d9:bf:90:43:e1:28:62:38:90:09:9c:39:11:22:dc:
         d4:28:dc:72:d9:4d:f8:1d:43:b9:2c:c4:d4:45:8c:df:79:a5:
         ba:80:73:e4:76:6a:e5:bc:f7:e1:8a:b3:e1:13:26:99:61:02:
         02:c8:1d:a6:47:7b:c4:30:90:2e:0c:a8:78:13:04:73:a6:73:
         92:1a:fa:08:60:9f:93:f5:69:21:c1:40:ce:56:f6:e0:df:5b:
         c8:79:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:13 2026 by rpki-client