Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/_xQBo6gBj9E_6BuJ3aCjpbw8NNg.roa
File:                     _xQBo6gBj9E_6BuJ3aCjpbw8NNg.roa (raw, json)
Hash identifier:          FrcrLkEdgjXGZ7ZA/r7foEE2ZaCgPJZhD+ycg05tsbY=
Subject key identifier:   FF:14:01:A3:A8:01:8F:D1:3F:E8:1B:89:DD:A0:A3:A5:BC:3C:34:D8
Certificate issuer:       /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
Certificate serial:       40
Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/_xQBo6gBj9E_6BuJ3aCjpbw8NNg.roa
Signing time:             Tue 31 Mar 2026 08:23:22 +0000
ROA not before:           Tue 31 Mar 2026 08:23:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24257
IP address blocks:        2400:3000:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
        Validity
            Not Before: Mar 31 08:23:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FF1401A3A8018FD13FE81B89DDA0A3A5BC3C34D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:50:35:2e:73:94:f1:e9:e9:13:e7:0d:b3:
                    b4:ae:43:3e:da:6b:d7:9e:f2:6c:7f:af:85:02:7e:
                    b3:fb:e1:79:28:71:d1:02:8d:8b:b4:14:22:cf:0b:
                    55:f9:65:3c:2a:ef:92:65:94:91:8e:4e:6e:33:a6:
                    a0:70:26:9d:df:72:b7:28:3c:ea:d2:52:90:2a:a1:
                    7a:6a:94:07:eb:9d:13:d5:a4:3c:57:75:5a:ac:57:
                    bd:25:74:fa:24:61:8b:65:95:99:d8:8c:31:6b:3d:
                    9c:71:3b:28:69:f9:56:14:d8:8c:3b:50:ce:ac:28:
                    6a:76:54:e3:ba:c5:2a:f9:fc:07:7e:a7:c1:3e:75:
                    dc:eb:68:23:1c:26:95:f3:58:ec:40:c5:72:8a:d9:
                    aa:6b:6c:e9:09:f6:9a:1a:84:e4:45:a2:d5:66:15:
                    16:d9:3f:e3:6d:04:4e:95:89:a3:3f:d1:c6:8c:79:
                    a4:fc:05:3d:bf:8a:99:c2:85:4f:1d:61:47:c8:3c:
                    cc:8f:5c:8a:c0:5a:7f:dc:7c:9a:5c:3c:de:24:c7:
                    1f:7e:24:8b:41:ef:cc:a0:20:a2:4e:e1:fc:e2:48:
                    64:33:ab:5b:ce:6d:94:2b:8b:af:c3:27:3d:92:b7:
                    f2:65:91:c9:a1:d7:af:c8:b6:3f:38:82:7e:bf:15:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:01:A3:A8:01:8F:D1:3F:E8:1B:89:DD:A0:A3:A5:BC:3C:34:D8
            X509v3 Authority Key Identifier:
                keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/_xQBo6gBj9E_6BuJ3aCjpbw8NNg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3000:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:61:4f:f2:9c:a3:6f:4a:2f:7c:ff:12:aa:14:b4:b4:7c:45:
         af:2a:fd:ed:bc:da:e8:b1:bb:4c:ae:ce:58:c9:de:a6:f8:d2:
         6a:37:31:9e:aa:7b:6a:c8:40:1a:1f:41:76:c8:15:03:9e:c1:
         4f:85:51:05:34:b3:6e:9c:ff:65:99:6f:21:bb:2b:d5:0c:fe:
         14:79:46:35:d3:ed:b0:4b:2a:6c:e7:17:ce:99:c3:95:e3:08:
         27:26:84:64:bd:fd:6a:9c:ea:d6:31:ee:81:f5:5b:0d:aa:da:
         78:7f:3b:16:fb:e2:50:fb:4a:b3:e5:4f:2f:8a:ad:c8:25:26:
         de:62:f7:4e:44:34:3c:e8:02:16:5b:09:1d:9b:23:38:da:2d:
         97:f0:21:e3:2a:b1:64:06:7b:3a:50:84:6a:54:84:7e:9b:b8:
         ea:dd:2b:15:84:8f:a4:b8:c6:af:ea:bb:cf:3f:4a:03:12:c5:
         91:9f:53:e7:9a:d7:e8:88:31:60:ae:bf:63:d8:84:f8:99:09:
         15:8d:6b:e1:e2:07:d1:28:10:62:de:55:de:a5:15:10:d4:60:
         84:78:dc:c5:b5:5c:2a:3e:a2:47:50:b2:ca:41:c3:90:e0:e7:
         89:0f:47:8b:e2:d4:10:f1:71:63:d7:c7:ea:4e:55:be:fc:be:
         54:ee:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:01 2026 by rpki-client