Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/Rw-U0l4yXPR0vIU6BfivWXYCFB0.roa
File:                     Rw-U0l4yXPR0vIU6BfivWXYCFB0.roa (raw, json)
Hash identifier:          miV7OBWZOq7hFEwSZqJJgnAHQOr1OmYgZGNs+Jbe7PA=
Subject key identifier:   47:0F:94:D2:5E:32:5C:F4:74:BC:85:3A:05:F8:AF:59:76:02:14:1D
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       73
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/Rw-U0l4yXPR0vIU6BfivWXYCFB0.roa
Signing time:             Tue 31 Mar 2026 07:29:48 +0000
ROA not before:           Tue 31 Mar 2026 07:29:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55391
IP address blocks:        2409:10::/28 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Mar 31 07:29:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=470F94D25E325CF474BC853A05F8AF597602141D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:ae:75:48:bc:1b:3e:dc:68:1e:d8:69:d0:
                    33:c2:be:0c:be:72:c7:b2:5d:f0:4f:e2:8f:03:c7:
                    e1:94:9b:f6:63:75:8a:d5:ab:06:fb:c8:be:f9:b7:
                    d1:35:75:a4:00:27:fe:1e:1f:f7:d8:71:bc:2f:57:
                    85:1d:e3:52:5c:4e:85:6f:de:61:86:bd:b6:30:06:
                    b2:6f:dc:a2:89:83:51:e6:26:4f:1c:bb:66:0c:88:
                    f0:17:df:1a:ea:dc:30:41:99:4f:e8:18:0e:9c:13:
                    a3:f0:d4:81:6c:9a:b8:7c:01:d4:1e:b5:54:cc:1d:
                    de:57:5f:7c:65:36:82:13:7d:b4:15:a5:fe:ec:ae:
                    dc:5b:da:3f:93:19:91:a8:79:0b:8b:6a:b4:a5:33:
                    21:30:26:56:0f:7a:ae:bf:bc:d2:fd:11:34:01:1f:
                    cf:b5:31:ea:28:3e:51:6c:63:cf:71:43:a3:ba:73:
                    d2:59:39:a4:14:ca:18:15:48:52:c4:a9:f4:b9:51:
                    81:bd:0e:9e:d4:3e:58:2f:94:29:1b:84:b7:6b:37:
                    cb:7a:f8:da:88:27:f4:5c:20:53:04:3e:50:a2:37:
                    16:d5:a4:da:e0:aa:c5:5f:ad:6c:9a:09:b1:7c:bd:
                    ba:f2:3c:73:28:da:5e:e8:7b:eb:5d:4b:51:2e:5b:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:94:D2:5E:32:5C:F4:74:BC:85:3A:05:F8:AF:59:76:02:14:1D
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/Rw-U0l4yXPR0vIU6BfivWXYCFB0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:10::/28

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:76:f8:bc:07:42:65:f2:98:e7:5e:09:a8:cc:42:e3:b2:
         4b:6b:cd:04:32:d8:d0:07:91:c8:b2:10:d8:22:0d:f5:7e:c4:
         2c:f0:bc:a6:e0:22:48:d3:24:ee:90:e2:d4:ca:94:97:8c:14:
         be:c4:bc:ab:b0:29:40:6e:38:cd:b7:b6:10:2c:2e:16:e2:76:
         ab:5a:8a:05:ec:57:75:b3:e9:77:ce:9c:fb:4d:f7:06:eb:b0:
         a8:01:ac:5a:63:57:ad:29:0f:6b:35:a2:4c:4d:a9:cd:f6:5c:
         a2:09:98:1d:92:6b:4b:3d:6b:3d:ec:40:2d:ac:d8:33:5b:e4:
         36:e9:53:ac:c9:15:13:97:96:fb:42:3e:4f:7a:b0:df:d3:ea:
         a9:6f:52:e6:81:de:45:1c:44:89:13:dc:35:c8:98:37:07:b0:
         e1:bb:2d:f1:f8:65:fb:ae:5d:e2:33:a1:fe:36:4c:80:7e:44:
         81:4e:b3:3d:b3:99:a3:7e:e0:14:f8:68:e1:d5:58:be:57:d4:
         07:3f:09:e3:84:a4:ed:06:d8:97:01:73:ef:f5:a0:3e:9a:87:
         61:fb:f7:7e:0c:20:25:08:e3:73:2f:34:d5:a3:38:72:f6:7b:
         d8:b8:dd:6a:f9:c7:4e:20:8e:bd:37:c1:d4:c5:eb:b4:c8:ba:
         5c:ee:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:44 2026 by rpki-client