Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa
File:                     9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa (raw, json)
Hash identifier:          lsy8+7dooD6I9g2JZGlQSsVfAjoZA7ZNKKngM9HMiUQ=
Subject key identifier:   F6:0C:90:25:88:59:7D:D3:FA:BB:FF:66:1D:DB:E7:61:7B:59:78:7D
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       A1
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa
Signing time:             Tue 31 Mar 2026 07:29:56 +0000
ROA not before:           Tue 31 Mar 2026 07:29:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/29 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar 31 07:29:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F60C902588597DD3FABBFF661DDBE7617B59787D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:74:b1:7e:19:54:ae:8c:3c:2b:e0:f6:dc:
                    3c:a8:2a:fa:a7:4d:c6:9e:61:d2:32:18:19:f2:23:
                    d9:53:2e:92:7a:7a:81:53:3b:5e:db:2d:5a:7e:b4:
                    c5:4b:f0:7c:48:75:2f:59:17:65:16:bd:e0:b8:c6:
                    79:d9:5f:bd:e2:26:fd:99:c1:03:4b:7c:52:64:41:
                    bb:27:dd:09:86:44:5a:e0:80:a7:09:a9:a3:c2:c5:
                    a7:b4:1f:7b:e1:43:3d:e5:bc:f5:1c:fb:32:14:0e:
                    72:2f:9b:1b:d8:f0:1f:50:fd:16:9c:4b:0c:83:0d:
                    b7:da:bd:c0:0a:5e:77:41:1e:19:a1:6c:f1:59:83:
                    4c:87:0c:a4:e0:1f:2e:0c:80:07:06:82:72:fb:d3:
                    76:aa:d2:ec:0b:f3:c3:18:90:0d:9a:ce:17:f1:a9:
                    24:e8:4c:04:bd:36:89:35:91:56:4b:55:25:a5:87:
                    fa:47:74:0c:a6:ad:9d:fc:a3:ed:ac:71:bd:97:e7:
                    cd:5d:12:2d:8d:45:ff:39:cc:bf:49:6a:68:ec:3c:
                    27:e2:eb:66:74:b7:4f:2f:d1:92:40:7b:4a:9d:99:
                    d6:e9:60:8c:59:a9:7d:be:bf:96:cc:cd:5c:68:5c:
                    80:df:73:1e:d5:b0:f5:3c:cc:2f:b2:6b:a1:4e:cd:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:90:25:88:59:7D:D3:FA:BB:FF:66:1D:DB:E7:61:7B:59:78:7D
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:e6:9b:a2:e0:44:45:39:b6:ec:2d:2c:0b:ef:cf:85:32:33:
         0b:1b:e7:fe:67:cd:ba:60:22:35:38:1e:86:69:0d:58:e5:b4:
         90:08:42:b2:ba:f4:f9:09:e1:b2:9d:af:91:16:2d:f2:33:6f:
         7d:ef:b5:31:cc:dd:31:04:dd:17:62:fe:fc:5c:92:0e:40:e2:
         fc:cb:93:66:aa:f9:95:6b:fa:00:fe:61:b6:f8:4b:c3:df:a9:
         0c:98:25:34:f5:d9:c9:47:4b:4d:51:2b:9d:02:10:7a:3b:ad:
         c6:5d:cd:bd:3c:b4:76:fb:83:fc:77:f9:f4:2c:8a:d6:41:7f:
         24:0f:82:c4:41:89:ff:5d:3b:86:2e:26:b8:2b:c8:ac:b7:bf:
         f2:7a:ac:ff:94:d0:15:cb:87:50:c6:35:ad:64:25:9f:be:0a:
         ec:bc:39:f3:94:cf:ba:4b:52:4d:28:8c:9e:67:25:79:45:d5:
         45:71:09:7c:d3:bc:5e:51:ef:c2:6b:b2:32:81:ff:0f:8c:a0:
         a4:dd:84:d4:24:86:62:9f:60:d5:5a:84:1a:f2:c1:a5:13:35:
         e4:49:93:f3:a9:4e:c0:94:29:af:48:45:8d:39:81:88:6c:30:
         3e:3f:6b:00:47:8e:0a:24:6b:75:1c:7c:75:e3:49:20:d1:64:
         c1:a8:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:05 2026 by rpki-client