Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
File:                     _bp6dKnskGFcsbZm4cdST917bCY.roa (raw, json)
Hash identifier:          1OWYsbOBmXpeXjOm7vb+Wf57hk2wyMbrLVy36kQM9eE=
Subject key identifier:   FD:BA:7A:74:A9:EC:90:61:5C:B1:B6:66:E1:C7:52:4F:DD:7B:6C:26
Certificate issuer:       /CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
Certificate serial:       02
Authority key identifier: C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
Signing time:             Tue 24 Feb 2026 09:24:27 +0000
ROA not before:           Tue 24 Feb 2026 09:24:27 +0000
ROA not after:            Wed 24 Feb 2027 09:07:11 +0000
asID:                     38633
IP address blocks:        2403:8e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
        Validity
            Not Before: Feb 24 09:24:27 2026 GMT
            Not After : Feb 24 09:07:11 2027 GMT
        Subject: CN=FDBA7A74A9EC90615CB1B666E1C7524FDD7B6C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:96:05:a2:ed:ed:2a:fd:cd:a7:d9:09:da:
                    3b:f0:ed:cd:e8:d7:c9:dc:1e:e9:06:1c:dd:c1:9c:
                    54:3d:d2:1f:7e:35:4c:29:04:c4:48:7f:39:91:9e:
                    2b:8e:f8:59:00:43:da:74:b8:4a:75:f8:97:b9:31:
                    bc:1c:c4:72:ef:12:bf:56:e9:29:00:12:e3:51:ff:
                    2d:49:68:44:48:ff:fc:cb:ae:f5:3a:a4:0c:60:9f:
                    2e:da:04:e1:90:05:85:e8:06:f9:55:da:dc:af:1b:
                    e1:00:cf:c4:45:5c:ba:47:8e:e8:31:e3:e6:9d:a2:
                    23:ae:a4:5a:1a:21:0f:62:4e:98:0e:68:4c:d8:c8:
                    de:0f:27:8e:3e:28:55:b5:b8:a8:70:95:e7:d0:3a:
                    fd:70:9d:11:cf:99:2b:aa:3c:47:c3:96:d5:f2:c9:
                    3e:d0:db:4a:e3:66:f9:52:01:a8:9e:d3:7b:a6:b1:
                    f1:05:88:4a:cb:f5:f2:24:10:66:6f:f4:47:fe:ab:
                    ff:38:65:69:85:af:08:12:6c:50:ce:d7:74:7b:0d:
                    bf:2a:3c:45:60:83:66:f7:1e:44:e6:4f:dd:c1:b6:
                    32:b0:9d:88:e3:38:6b:2f:14:46:72:be:0d:62:d5:
                    e4:41:c9:23:d6:82:b5:8c:12:e9:fb:d5:ad:d4:8c:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BA:7A:74:A9:EC:90:61:5C:B1:B6:66:E1:C7:52:4F:DD:7B:6C:26
            X509v3 Authority Key Identifier:
                keyid:C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:bd:17:ca:81:d7:88:b5:d8:a4:a0:28:a8:4b:1d:1d:d6:
         14:17:f2:aa:c7:fc:9f:c4:de:a3:a5:f6:1b:63:cb:af:54:12:
         31:62:c9:fe:07:d5:02:c7:ee:17:54:6d:e9:44:a0:01:5f:ad:
         63:6f:e9:4d:07:1b:75:da:cf:38:f5:69:b9:8f:10:c5:0c:92:
         98:87:6c:a7:3f:89:0b:83:aa:87:5c:d4:54:c5:07:9b:86:91:
         58:70:68:3b:57:10:d3:80:c6:51:6f:f0:2c:44:a0:c7:f0:7e:
         f3:37:e1:a7:40:8e:51:64:ce:d7:0a:93:bd:8e:a8:b0:39:5b:
         4b:1f:a9:ce:7b:e5:84:44:11:f4:14:f3:0d:f4:58:f4:cb:1f:
         71:9e:7b:82:33:e8:3b:73:f3:09:1b:ec:fd:0d:82:e9:cf:35:
         48:b0:41:df:9d:e1:06:6a:89:01:a0:04:a1:47:52:ee:5c:e5:
         ba:c1:c6:e5:ca:1b:ff:f7:bf:94:b0:5e:20:76:3e:b8:3f:b2:
         8e:88:d3:3e:41:10:77:74:cb:01:ad:87:43:50:1f:a5:21:0b:
         c4:76:2b:85:09:11:cc:4e:50:f8:93:dc:7b:06:e9:67:36:34:
         62:a0:af:8d:3e:b1:15:df:68:b3:51:73:f8:09:f9:df:0a:42:
         dc:6e:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:01 2026 by rpki-client