Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30201/9LOgxG59ZSRnk6D2sv3H1jvhwqo.roa
File:                     9LOgxG59ZSRnk6D2sv3H1jvhwqo.roa (raw, json)
Hash identifier:          LpehkTLQlRbGpm1z2zgI1v/Q0+YR1Eu9dKeKaMDoYUQ=
Subject key identifier:   F4:B3:A0:C4:6E:7D:65:24:67:93:A0:F6:B2:FD:C7:D6:3B:E1:C2:AA
Certificate issuer:       /CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202
Certificate serial:       43
Authority key identifier: F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/9LOgxG59ZSRnk6D2sv3H1jvhwqo.roa
Signing time:             Tue 31 Mar 2026 08:15:51 +0000
ROA not before:           Tue 31 Mar 2026 08:15:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17530
IP address blocks:        2401:bf00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202
        Validity
            Not Before: Mar 31 08:15:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4B3A0C46E7D65246793A0F6B2FDC7D63BE1C2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6b:96:46:69:92:28:d6:46:bb:87:65:13:14:
                    06:11:59:85:a7:3e:45:a9:22:25:51:23:b7:a2:4d:
                    e0:b5:e9:0e:00:c6:57:88:2e:cf:e8:c5:64:a6:ea:
                    24:2a:37:3c:8b:d5:a8:a2:8a:82:31:a6:06:83:82:
                    86:ee:87:e7:be:fd:4e:1c:1b:1a:e5:8a:a0:81:50:
                    bd:ec:56:58:4a:93:65:b2:80:fc:0d:0f:ee:c5:33:
                    33:a0:cc:62:82:e8:df:79:60:ab:96:c1:1e:81:30:
                    db:de:55:b5:9d:67:38:46:0c:8e:02:9d:8b:2f:a1:
                    0b:fd:1f:08:31:b3:cc:77:2e:25:fc:0b:d5:09:c3:
                    61:ce:2a:78:f0:4e:3d:b3:31:9e:4d:72:7b:17:bc:
                    79:2e:22:65:16:48:59:05:8b:4e:50:e4:5f:0a:ae:
                    f6:e8:10:84:38:15:6e:cd:22:b2:89:1f:b4:4c:21:
                    39:fc:f9:d5:36:fa:72:d8:31:42:53:7f:32:3c:5d:
                    6f:0b:20:37:25:1d:66:a9:01:96:aa:09:72:ff:c8:
                    4a:03:6c:b9:21:fd:f1:c8:d7:f0:0a:9c:b5:f4:f9:
                    30:f9:4c:aa:86:86:ce:92:5c:77:4d:4e:8f:bf:3b:
                    54:aa:af:84:88:13:21:81:e4:03:c6:88:77:09:19:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:A0:C4:6E:7D:65:24:67:93:A0:F6:B2:FD:C7:D6:3B:E1:C2:AA
            X509v3 Authority Key Identifier:
                keyid:F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/9LOgxG59ZSRnk6D2sv3H1jvhwqo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:2b:50:e1:ea:01:a8:bb:2c:c8:b7:db:7f:cf:2d:4f:f4:
         36:d5:4a:37:44:36:70:35:74:a2:59:12:b7:6b:83:38:38:4a:
         e5:7f:ff:97:de:da:2b:04:68:11:b4:e8:9e:f3:cf:1b:53:b3:
         3d:d4:80:5b:9f:54:a3:9b:13:df:92:c0:e9:c8:ed:89:84:99:
         2d:f3:5e:c2:57:87:a1:67:bb:3f:54:4e:ac:ac:69:26:db:0c:
         54:26:d6:e2:17:61:ea:0a:b9:ae:11:4a:20:50:87:66:2f:5b:
         10:ca:ce:a8:5c:53:ec:9a:39:4c:88:5d:fd:97:04:6c:ee:2e:
         3f:3b:b6:16:13:3b:41:6a:fb:35:df:8b:43:88:d2:02:e9:84:
         0f:e7:2b:e4:cf:49:93:f9:b2:8c:c9:28:ac:c0:b8:61:80:f9:
         83:18:bc:6b:ec:95:66:66:29:76:ce:67:bb:29:ec:cb:04:7e:
         97:94:79:cc:01:ab:8e:10:39:c8:ee:d2:30:bf:ed:b0:06:1d:
         c2:f4:03:a9:0c:05:75:b8:84:1c:ff:73:2b:b5:a9:b5:9c:2a:
         82:f3:99:46:ac:f6:d9:ab:11:9e:3c:70:37:3c:59:8c:21:df:
         da:bc:59:96:99:7a:71:b4:58:6a:e0:62:32:64:a5:21:a8:2d:
         a7:a7:2c:d8
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDJD
Q0FGQUREMURCMEQ1Nzc1MUIyMEQ3NzI5Q0E0REE4RjREMjAyMB4XDTI2MDMzMTA4
MTU1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjRCM0EwQzQ2RTdENjUy
NDY3OTNBMEY2QjJGREM3RDYzQkUxQzJBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPVrlkZpkijWRruHZRMUBhFZhac+RakiJVEjt6JN4LXpDgDGV4gu
z+jFZKbqJCo3PIvVqKKKgjGmBoOChu6H5779ThwbGuWKoIFQvexWWEqTZbKA/A0P
7sUzM6DMYoLo33lgq5bBHoEw295VtZ1nOEYMjgKdiy+hC/0fCDGzzHcuJfwL1QnD
Yc4qePBOPbMxnk1yexe8eS4iZRZIWQWLTlDkXwqu9ugQhDgVbs0isokftEwhOfz5
1Tb6ctgxQlN/MjxdbwsgNyUdZqkBlqoJcv/ISgNsuSH98cjX8AqctfT5MPlMqoaG
zpJcd01Oj787VKqvhIgTIYHkA8aIdwkZLH0CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBT0s6DEbn1lJGeToPay/cfWO+HCqjAfBgNVHSMEGDAWgBTwLMr63R2w1XdRsg13
KcpNqPTSAjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMDEvOEN6Sy10MGRzTlYzVWJJTmR5bktUYWowMGdJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOEN6Sy10MGRzTlYzVWJJTmR5bktU
YWowMGdJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjAxLzlMT2d4RzU5WlNSbms2RDJzdjNIMWp2aHdxby5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAb8AMA0GCSqGSIb3DQEBCwUA
A4IBAQAo5ytQ4eoBqLssyLfbf88tT/Q21Uo3RDZwNXSiWRK3a4M4OErlf/+X3tor
BGgRtOie888bU7M91IBbn1SjmxPfksDpyO2JhJkt817CV4ehZ7s/VE6srGkm2wxU
JtbiF2HqCrmuEUogUIdmL1sQys6oXFPsmjlMiF39lwRs7i4/O7YWEztBavs134tD
iNIC6YQP5yvkz0mT+bKMySiswLhhgPmDGLxr7JVmZil2zme7KezLBH6XlHnMAauO
EDnI7tIwv+2wBh3C9AOpDAV1uIQc/3Mrtam1nCqC85lGrPbZqxGePHA3PFmMId/a
vFmWmXpxtFhq4GIyZKUhqC2npyzY
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:57 2026 by rpki-client