Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/l-dvpv_abSOesCLbehy-HLIQm94.roa
File:                     l-dvpv_abSOesCLbehy-HLIQm94.roa (raw, json)
Hash identifier:          5iKz5UXzmTq5Q6x9aILFpUwv+qgOF2clSe/miaj0ESs=
Subject key identifier:   97:E7:6F:A6:FF:DA:6D:23:9E:B0:22:DB:7A:1C:BE:1C:B2:10:9B:DE
Certificate issuer:       /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
Certificate serial:       3E
Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/l-dvpv_abSOesCLbehy-HLIQm94.roa
Signing time:             Tue 31 Mar 2026 08:23:21 +0000
ROA not before:           Tue 31 Mar 2026 08:23:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7527
IP address blocks:        2400:3000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
        Validity
            Not Before: Mar 31 08:23:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97E76FA6FFDA6D239EB022DB7A1CBE1CB2109BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:89:62:92:5d:9a:b6:13:3b:b5:3c:84:3c:
                    52:eb:22:3d:1b:bf:3e:70:24:c3:30:90:f3:9a:e2:
                    2c:e1:ad:8e:08:85:21:47:71:2c:72:e0:89:de:b5:
                    fd:2a:d2:e8:42:bc:95:ca:fc:bd:74:1a:71:06:10:
                    28:5b:7c:eb:7d:2f:30:95:2f:c5:63:35:f9:58:38:
                    be:ab:0d:f0:24:7b:1e:62:02:e8:6e:a0:40:07:93:
                    15:22:50:53:2e:9b:31:a2:ac:4d:d6:25:80:60:bd:
                    ba:27:2b:29:1f:02:79:a6:b7:42:29:6f:b4:74:42:
                    9f:8d:72:91:c1:31:06:7b:d6:5f:01:47:66:f3:6a:
                    25:35:7a:37:cd:f9:d5:84:ca:b0:f3:13:f6:2c:7a:
                    f2:c3:b8:0d:11:82:f3:45:94:bf:bc:27:a3:8d:b0:
                    bb:7f:8f:d4:e7:f5:92:d0:5f:eb:b5:14:ac:68:91:
                    ed:06:49:f0:fd:aa:0f:10:f1:f3:0d:b3:a6:fd:73:
                    45:7c:0e:99:44:c5:64:3f:69:a0:3b:da:29:38:51:
                    01:e1:96:4f:f4:ae:e5:81:00:78:9c:8f:93:95:fe:
                    53:7f:04:6c:a7:ea:80:ef:fb:b3:03:5f:4b:ac:df:
                    a8:6c:58:dd:e0:11:7e:4f:8f:c2:ae:95:8c:4e:0f:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E7:6F:A6:FF:DA:6D:23:9E:B0:22:DB:7A:1C:BE:1C:B2:10:9B:DE
            X509v3 Authority Key Identifier:
                keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/l-dvpv_abSOesCLbehy-HLIQm94.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:28:db:cd:14:71:55:f2:0a:2a:97:c9:09:7f:b9:ab:15:
         7a:a9:62:a0:1f:cd:32:26:52:b8:9b:b6:16:22:45:31:eb:2a:
         38:22:4b:2b:a6:bf:12:e1:b7:e2:60:50:3a:f3:a6:83:95:2c:
         d7:76:e9:28:f6:cf:9b:29:fd:3a:b5:84:b0:bc:d6:2b:75:5e:
         d3:12:64:cb:54:39:83:e8:46:91:0e:6a:44:c8:a0:31:c7:78:
         4a:08:09:ff:82:3d:3c:7e:dc:62:95:08:0b:4d:42:69:b8:fa:
         2b:4c:08:38:e8:2d:c7:00:e1:25:af:46:4d:50:a8:e2:d0:eb:
         eb:04:26:0c:e3:34:80:b5:23:0e:b4:8d:fb:9c:b2:7a:c6:4f:
         73:f8:f7:7b:3e:3a:bb:a4:9b:61:22:4e:ad:1e:48:59:b8:0e:
         9d:e5:a4:28:c4:ee:3d:2b:64:8e:f3:30:0c:c1:ed:7e:e1:4c:
         b8:86:34:48:7e:7f:6d:44:ea:e8:c2:e4:32:a8:95:b6:fb:8a:
         a3:f0:e8:11:03:c0:7a:5e:b2:fa:90:02:94:73:78:71:e1:15:
         87:06:a2:ca:c0:f9:5b:46:fa:4a:f2:43:f7:91:c5:c8:0d:99:
         a5:62:96:df:1a:85:94:60:4d:8b:df:19:31:38:d4:e6:05:9f:
         a1:a6:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:37 2026 by rpki-client