Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/TgzBv3lM-fcPhpyEW31Z-IMahSA.roa
File:                     TgzBv3lM-fcPhpyEW31Z-IMahSA.roa (raw, json)
Hash identifier:          AzkEBwiwXNavN02mVR1kF8Q1JYG8IVjhzDsfyD7XZ2Q=
Subject key identifier:   4E:0C:C1:BF:79:4C:F9:F7:0F:86:9C:84:5B:7D:59:F8:83:1A:85:20
Certificate issuer:       /CN=157E088BE15A585F688D86A671D88F0150C3EDBA
Certificate serial:       3F
Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/TgzBv3lM-fcPhpyEW31Z-IMahSA.roa
Signing time:             Tue 31 Mar 2026 08:16:19 +0000
ROA not before:           Tue 31 Mar 2026 08:16:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        2400:df00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA
        Validity
            Not Before: Mar 31 08:16:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4E0CC1BF794CF9F70F869C845B7D59F8831A8520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:89:2d:c5:d2:50:42:1c:5e:f5:cd:fa:d3:
                    b7:05:2e:36:31:0d:66:9f:14:ae:8e:44:0a:c4:c6:
                    fd:10:42:43:cb:e1:cd:53:29:54:33:3f:ba:30:7d:
                    ea:99:89:f2:85:fe:f8:a8:88:ee:a2:ae:e0:6e:bc:
                    cb:ea:2a:8b:f7:7e:86:43:ff:d4:20:9a:f8:63:58:
                    1f:5e:2d:1b:8b:2c:4b:86:3a:92:3c:29:5c:48:02:
                    b9:1f:21:a9:6e:05:5c:1e:61:d6:ed:10:5a:44:b7:
                    61:98:e4:77:37:61:1f:9e:12:b6:0f:61:0d:e2:f3:
                    71:d0:23:f1:4e:76:2a:c4:28:96:40:62:2c:66:90:
                    e4:52:18:16:46:e6:02:49:d7:19:88:45:f5:4b:5c:
                    cd:f0:b2:eb:9e:a9:9e:02:41:c9:1a:b2:2c:9e:3c:
                    69:85:8a:03:80:b8:30:97:5a:59:b0:f3:ea:47:2a:
                    97:11:0d:08:db:b0:2a:ae:06:ec:cf:8d:54:d3:db:
                    c0:d1:4e:14:fa:45:c4:07:31:3f:7e:91:f3:c0:74:
                    13:2b:1b:15:51:c8:f5:02:9f:e1:33:2a:b4:67:fa:
                    0e:e7:a1:3c:62:32:c5:73:ca:9e:6f:d3:68:96:71:
                    fb:2f:99:0f:40:68:81:3a:3f:16:df:a4:18:7b:38:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0C:C1:BF:79:4C:F9:F7:0F:86:9C:84:5B:7D:59:F8:83:1A:85:20
            X509v3 Authority Key Identifier:
                keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/TgzBv3lM-fcPhpyEW31Z-IMahSA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:6e:de:a1:43:f5:ab:81:56:0f:d1:03:45:1f:82:00:41:
         b8:f2:bc:9d:84:d4:40:b5:36:e1:7a:ce:c5:13:aa:ca:71:42:
         05:c9:07:a0:fc:f7:83:75:4a:9b:21:67:e3:8e:f5:8e:33:77:
         00:b7:d9:68:8e:33:ca:de:38:50:40:37:70:77:2f:e9:ba:1b:
         0a:0f:cf:ef:cd:bd:3e:e1:3f:bc:a6:9a:1e:34:00:47:3d:85:
         c4:c6:93:55:6b:87:4b:52:c9:7b:95:c6:df:2f:b2:07:ec:5c:
         b7:d4:5b:2c:7d:b1:12:73:c7:81:44:26:8c:64:80:b8:a2:f7:
         d7:1a:9a:8a:8e:56:42:ad:a8:f7:e9:85:87:5f:f6:b8:fb:f1:
         e7:5d:da:ba:ad:0a:9e:ce:24:ee:d7:3e:6f:89:7c:60:d2:b7:
         c4:99:e4:8d:38:b7:fd:40:99:09:b1:f1:8f:7d:7f:16:f1:dd:
         ff:e1:2b:01:a2:f3:09:1c:0f:0a:1c:85:20:34:44:10:6c:20:
         e5:33:e3:8c:34:bf:8a:e9:d3:75:c4:a9:3b:c0:89:8f:41:a6:
         e4:7a:a4:cc:10:f5:16:8b:57:f5:b1:9a:1b:1c:a9:e7:cd:34:
         c7:ed:ab:cc:e1:c0:c6:2b:eb:61:22:ee:5c:2e:45:d1:b6:61:
         ce:40:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:26 2026 by rpki-client