Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa
File:                     A3gaKL0kTtqM1heSYf71sqGvCRI.roa (raw, json)
Hash identifier:          bziBQQyO9W1fAvII7/mK9zIuJxmS1cUG7kQCNnIkDrM=
Subject key identifier:   03:78:1A:28:BD:24:4E:DA:8C:D6:17:92:61:FE:F5:B2:A1:AF:09:12
Certificate issuer:       /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial:       4A
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa
Signing time:             Tue 31 Mar 2026 08:15:16 +0000
ROA not before:           Tue 31 Mar 2026 08:15:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17676
IP address blocks:        2403:9900::/24 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
        Validity
            Not Before: Mar 31 08:15:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03781A28BD244EDA8CD6179261FEF5B2A1AF0912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:65:ab:63:c0:be:2b:54:57:2d:f2:78:4e:20:
                    f3:e3:3e:51:7b:f4:77:5f:f1:a9:eb:fd:67:50:70:
                    82:63:b2:eb:8a:16:bf:61:0f:91:41:9a:72:ef:98:
                    11:64:b2:09:c7:87:5d:b3:3f:dd:78:02:78:83:e1:
                    a6:a1:86:6b:da:80:4a:54:dc:a4:f1:58:9e:36:1d:
                    89:6d:11:ce:31:1e:66:ee:28:0d:49:64:5a:fa:88:
                    c5:17:e0:ac:f4:01:ab:b0:18:d7:72:3c:52:a3:09:
                    1c:e9:a4:b4:41:f9:3e:81:2e:e2:f4:67:e6:50:3d:
                    b7:94:1d:76:69:df:98:35:dd:8f:60:08:45:ad:8a:
                    2d:da:5d:91:7d:30:ff:82:ad:11:83:bd:64:e2:2e:
                    16:55:bb:c1:34:81:c9:c1:d4:a0:6f:88:49:18:69:
                    77:3f:f6:83:78:f9:02:ec:5b:ce:94:5b:7a:71:00:
                    eb:c1:bd:88:8a:a1:1d:3d:a3:94:47:b5:7f:9f:fd:
                    42:c5:0a:a5:2f:cf:c1:03:68:09:e2:6b:b0:bb:f3:
                    12:6a:30:67:71:15:b3:23:4a:33:2e:e9:54:f4:16:
                    58:7b:8b:21:8e:c1:0a:ae:04:81:70:0a:7a:bd:93:
                    cf:0a:6a:7e:82:d1:f6:87:a8:88:06:c6:c7:9c:a8:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:1A:28:BD:24:4E:DA:8C:D6:17:92:61:FE:F5:B2:A1:AF:09:12
            X509v3 Authority Key Identifier:
                keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/A3gaKL0kTtqM1heSYf71sqGvCRI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9900::/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:d1:f5:d8:88:3f:24:a0:7d:b9:bc:f0:e3:f2:73:48:14:
         94:40:0a:aa:bc:0f:3f:27:e9:e3:ac:41:ef:98:c6:1f:cc:16:
         42:4d:8a:9a:fc:16:16:a8:67:32:3c:0f:95:75:d8:8a:d2:23:
         68:22:44:90:0d:04:75:b9:4a:c2:02:18:dc:60:92:6a:6d:15:
         81:e1:f7:ac:37:75:91:83:20:4a:d1:84:28:4e:8a:b4:3d:f6:
         5f:52:5d:e7:00:43:2e:40:72:26:c3:cd:bc:6b:17:05:55:d6:
         c8:f1:f2:07:2d:4e:71:c3:c9:b0:3c:6c:6a:7c:ba:83:ab:15:
         e0:d5:9d:12:82:fe:44:f7:3e:43:3a:ed:bc:7a:ff:47:02:e9:
         d1:07:bc:ff:ec:43:55:b1:6c:43:6d:5b:f6:79:f1:8c:6d:ad:
         76:92:9d:e8:ad:b2:8b:19:c9:52:40:3c:df:c3:d2:1e:a9:ad:
         a0:dd:d2:4b:dd:f0:63:db:af:55:c2:82:c3:49:8b:2a:85:d5:
         31:99:ff:80:e6:ee:67:d4:1c:f0:96:19:02:e4:15:c5:8f:91:
         0d:29:8f:e2:54:27:da:b6:32:d6:06:6f:de:7c:75:4d:ca:fe:
         6b:e5:c8:aa:77:40:53:d7:3c:88:7d:f8:7e:64:e5:03:a4:4d:
         b7:99:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:23 2026 by rpki-client