Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
File:                     zKIUaZnlIyXSx3w7Z64n5sarKvo.roa (raw, json)
Hash identifier:          erWbHkCBjw+FzGUuZ5zip3fQSza7gObgTbJtyZsgSoE=
Subject key identifier:   CC:A2:14:69:99:E5:23:25:D2:C7:7C:3B:67:AE:27:E6:C6:AB:2A:FA
Certificate issuer:       /CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
Certificate serial:       3A
Authority key identifier: 93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
Signing time:             Sun 01 Feb 2026 01:29:57 +0000
ROA not before:           Sun 01 Feb 2026 01:29:57 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        2401:3200::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
        Validity
            Not Before: Feb  1 01:29:57 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=CCA2146999E52325D2C77C3B67AE27E6C6AB2AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:25:84:2c:03:91:e5:21:a6:52:3a:e6:47:
                    7c:32:b8:07:a5:b8:1f:e6:5d:cd:4b:f0:14:59:fa:
                    58:39:bd:2b:7d:5f:08:00:63:66:a0:57:71:eb:c8:
                    69:a5:62:3f:78:2b:14:f2:1a:27:db:0d:24:2c:10:
                    c4:f7:f7:7a:94:f3:4c:38:fb:fb:3c:c4:59:e4:fe:
                    ab:63:6f:55:9c:72:5b:ce:bc:fe:82:7e:d5:5f:f2:
                    98:61:11:d1:fc:02:f8:ae:10:65:0a:bb:00:e8:ab:
                    1f:0e:2b:ad:d9:d1:4f:83:c6:67:ec:02:ab:58:a4:
                    0a:11:7a:9b:19:e2:bf:31:27:c6:b9:91:1c:a4:5e:
                    ba:82:c3:39:ee:2a:17:6d:99:fd:e0:41:71:e1:7c:
                    83:05:f4:62:2a:a3:73:b9:0f:c6:68:4d:65:96:99:
                    d3:b2:80:40:a0:14:22:c1:c8:8f:67:a4:f0:3b:39:
                    25:32:99:8d:ac:a4:9a:4b:a1:fa:10:5b:56:06:9c:
                    14:44:5d:5b:58:a7:54:71:45:c8:4c:69:b3:e1:0b:
                    c5:e3:7d:6f:9b:7e:67:94:54:7a:a5:9a:7a:79:f3:
                    06:5c:63:04:59:f6:9f:58:96:8d:13:31:ad:fa:0f:
                    6c:62:5f:99:e9:83:7c:e0:d4:b4:a4:c1:e4:54:d1:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:14:69:99:E5:23:25:D2:C7:7C:3B:67:AE:27:E6:C6:AB:2A:FA
            X509v3 Authority Key Identifier:
                keyid:93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/zKIUaZnlIyXSx3w7Z64n5sarKvo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:e5:08:94:70:16:b9:b7:13:27:ba:c9:93:c4:d2:b7:a8:
         9a:03:21:77:32:43:80:33:71:47:af:a0:6f:e2:42:b1:1c:71:
         e1:1f:a9:d4:90:9c:73:89:98:1c:fb:72:22:45:1a:57:63:8f:
         3b:69:4e:a3:03:23:08:ca:25:94:47:91:6b:15:56:38:90:f7:
         58:d5:da:c5:2f:d1:85:ab:06:7f:7b:25:9c:86:92:6b:6b:11:
         e7:7e:af:7b:80:eb:5b:df:63:c8:a0:52:3f:53:ca:f5:34:8c:
         32:73:39:e5:f8:cc:2d:22:2d:d9:41:44:49:4a:99:e2:68:eb:
         ff:a8:26:41:f9:62:4a:1f:8f:35:60:a6:0e:9d:fc:d2:e5:50:
         d8:8a:dd:5b:6c:c9:e7:cb:16:71:b2:b5:df:47:34:19:90:6a:
         03:55:7a:eb:2e:5c:76:ab:73:9e:a1:a8:12:d3:5b:22:8b:73:
         80:d1:1c:11:e6:4c:62:a4:7e:d0:c6:22:68:67:ca:64:32:b6:
         c7:82:ed:1a:af:ac:ea:aa:b6:78:4d:07:8e:2b:f7:09:0b:49:
         60:d8:7e:db:5e:f0:65:e6:a9:9f:fa:72:d6:a8:bc:d9:be:01:
         8d:b7:a1:3d:de:de:69:63:fa:e0:41:3a:bd:3c:d9:59:84:c5:
         69:c1:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:16 2026 by rpki-client