Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/iplR-s-N6LkrlR0eZcRNyA9h_V4.roa
File:                     iplR-s-N6LkrlR0eZcRNyA9h_V4.roa (raw, json)
Hash identifier:          M5ff8gJPsgs0U+1ynXtUbAxLiTBwytni+iYsDMO11u0=
Subject key identifier:   8A:99:51:FA:CF:8D:E8:B9:2B:95:1D:1E:65:C4:4D:C8:0F:61:FD:5E
Certificate issuer:       /CN=157E088BE15A585F688D86A671D88F0150C3EDBA
Certificate serial:       3C
Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/iplR-s-N6LkrlR0eZcRNyA9h_V4.roa
Signing time:             Sun 01 Feb 2026 01:29:50 +0000
ROA not before:           Sun 01 Feb 2026 01:29:50 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        2400:df00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA
        Validity
            Not Before: Feb  1 01:29:50 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=8A9951FACF8DE8B92B951D1E65C44DC80F61FD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:07:95:7f:25:69:28:c5:37:0e:58:4c:a5:
                    7d:7b:fb:3a:7f:6e:66:a5:96:ee:e2:a3:a2:18:7a:
                    bf:6a:62:f8:da:84:87:10:5b:ec:fa:55:13:7b:9f:
                    f4:96:50:a5:a6:d4:e0:63:1b:a4:fb:d1:6d:53:13:
                    cc:a6:90:63:81:43:09:79:f8:04:67:d9:34:89:f4:
                    c1:3a:93:7c:77:f0:f1:0e:18:83:5a:b0:73:70:15:
                    80:d4:76:d3:af:88:c4:dc:02:a1:70:93:9f:0e:1d:
                    69:25:58:07:65:bc:31:02:c2:c9:0b:9c:8b:18:9c:
                    60:ec:47:33:f7:08:04:ec:8e:13:4f:d1:a3:76:8d:
                    99:b3:0e:af:95:08:75:d5:98:9a:1f:2e:3d:8e:7b:
                    a4:bb:82:8d:7a:a3:55:a9:64:83:68:bd:d1:e3:8d:
                    57:7c:41:6e:4f:2c:51:14:f3:e1:db:cb:ad:a4:54:
                    8d:5f:0c:f6:37:7b:aa:f1:21:c9:65:fb:66:56:ba:
                    cc:93:44:c0:5f:44:64:84:43:44:f9:2b:28:46:0f:
                    b1:be:67:38:5f:1e:7a:57:a3:5c:05:94:37:3e:17:
                    a7:2c:56:f3:8c:36:8e:48:9c:e6:00:85:0d:79:56:
                    5d:6f:1f:cf:eb:6a:fb:c7:6c:fb:6a:c2:9f:fa:51:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:51:FA:CF:8D:E8:B9:2B:95:1D:1E:65:C4:4D:C8:0F:61:FD:5E
            X509v3 Authority Key Identifier:
                keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/iplR-s-N6LkrlR0eZcRNyA9h_V4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:14:81:d9:45:1f:d1:1b:7a:e6:94:26:73:3d:f5:7d:da:
         60:0c:15:16:86:c7:15:1c:c0:bc:9f:ee:fe:8f:da:a9:69:f1:
         6d:7e:6b:4e:b9:0b:02:56:dd:92:e8:b7:d7:fd:c5:cc:83:1b:
         42:a4:5a:56:c9:46:ac:14:d7:76:dd:68:7d:e9:3f:1d:f7:df:
         79:cc:3b:c2:fc:6d:cd:0f:69:fc:8b:40:a5:78:29:7f:4b:1d:
         0c:21:09:2d:70:f2:b4:59:8e:10:9c:31:ce:1e:89:75:17:4b:
         ee:d3:84:37:7d:54:a0:89:b2:36:7e:30:4d:49:fc:7a:c4:a0:
         66:b6:37:3f:05:ed:d7:8d:79:d7:8a:aa:b4:97:64:1d:f2:ce:
         84:68:c0:5b:4e:86:80:cb:3a:12:50:99:6f:0b:29:df:8b:b9:
         d3:15:02:53:23:b6:7b:b8:c6:b4:1c:37:41:a1:f1:80:be:f7:
         09:e2:a1:d8:83:f5:3b:15:fa:cb:5d:02:cf:a5:51:f4:af:2e:
         aa:72:6a:65:09:c3:1c:25:5c:47:8f:11:d1:9b:dc:7b:60:0f:
         89:3e:3c:0f:3a:d3:98:22:3d:dd:63:f1:13:91:46:6f:ae:bd:
         b5:3e:a0:51:8a:5b:80:69:44:f9:b3:45:bb:2b:cb:19:54:2e:
         e6:5f:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:54:54 2026 by rpki-client