Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa
File:                     OITn45Io2RFQMF0zZhp26v-0WwM.roa (raw, json)
Hash identifier:          DKckB9U1zQZGJGUn61RJZV27ae4JXvZ0738ypEoXzBI=
Subject key identifier:   38:84:E7:E3:92:28:D9:11:50:30:5D:33:66:1A:76:EA:FF:B4:5B:03
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       9E
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa
Signing time:             Tue 31 Mar 2026 07:29:54 +0000
ROA not before:           Tue 31 Mar 2026 07:29:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar 31 07:29:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3884E7E39228D91150305D33661A76EAFFB45B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:fb:aa:75:db:96:a8:9b:22:c1:17:20:f5:
                    30:60:de:0c:d6:8d:f2:ea:36:95:91:4c:44:62:e5:
                    be:79:3d:b8:5d:5a:4d:c5:c5:e7:74:ad:7a:9a:be:
                    5a:e1:2f:9b:12:f1:91:e8:3e:88:a2:27:15:5f:51:
                    ff:cc:9f:ad:78:b4:c2:13:5c:e9:ac:96:da:79:cc:
                    1c:ea:75:41:86:c4:46:c3:e9:3d:96:9e:25:9c:f8:
                    3c:2e:ec:87:58:c3:ec:4b:f3:ee:d3:51:89:bf:81:
                    14:3f:05:da:e5:90:27:7c:60:c1:e5:64:ea:0a:fd:
                    2d:58:88:c7:1d:79:82:ec:2e:57:d8:59:81:bf:99:
                    85:7f:b3:44:b4:a7:89:b5:b1:2b:f0:e3:ea:3b:50:
                    1f:7a:92:6f:3c:3e:7b:2e:e4:13:37:6d:36:0f:52:
                    c4:f5:28:d2:01:1b:7e:ed:5e:dc:42:7b:da:35:fb:
                    dc:1a:8d:b1:70:fd:c6:0f:44:d9:58:eb:53:c7:3a:
                    8d:d0:3a:af:02:62:b3:9c:b6:82:59:86:b4:2c:51:
                    d6:44:96:33:b6:a9:9d:0b:c0:71:c2:aa:18:6b:a4:
                    92:64:6c:85:1f:27:2f:cc:5f:4d:63:87:02:62:f3:
                    77:e2:4c:bb:c2:aa:fd:7a:52:c2:3e:32:bb:72:21:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:E7:E3:92:28:D9:11:50:30:5D:33:66:1A:76:EA:FF:B4:5B:03
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/30

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:91:5d:e9:ba:97:84:5d:7e:87:35:32:70:c4:f8:9d:4b:
         d8:65:02:bf:4e:de:c5:e5:04:fa:55:4b:6d:27:9a:04:c3:af:
         e7:42:f6:48:7a:4b:a3:ef:1c:0d:97:72:bc:f0:e1:1d:e7:01:
         60:29:ab:49:be:d4:4a:d0:23:39:99:a7:d2:39:50:eb:de:68:
         7c:c9:76:39:cc:27:ac:95:f9:0b:ce:0a:f0:da:68:35:f7:5a:
         6c:6a:d2:5f:49:6e:d6:d3:37:be:35:e0:bb:8a:f7:93:b6:4c:
         8f:b5:62:70:33:aa:de:84:84:79:31:e8:e1:c3:a3:c2:47:21:
         b0:3a:c0:bd:59:eb:d0:2b:e2:57:21:5d:92:f9:2c:f6:41:58:
         d1:ac:d6:ab:e0:cd:19:78:48:4a:cf:d6:3b:c2:58:95:d3:0d:
         02:f4:63:c8:79:9d:dd:91:8b:36:f5:be:39:e7:5a:36:64:a0:
         18:82:ad:4d:95:18:27:af:54:b9:66:b6:67:e2:e9:f5:ae:8b:
         c8:eb:9d:27:3c:14:0b:a3:ca:ae:e8:15:ef:30:70:5a:ec:ae:
         4d:f7:f2:b0:46:a8:9b:b5:e1:bb:cb:4d:50:d7:35:6d:80:de:
         c7:e1:36:fe:3b:b8:18:3f:f9:85:25:4d:7b:b9:ed:02:b6:ac:
         d7:68:f3:1d
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAzMzEw
NzI5NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4ODRFN0UzOTIyOEQ5
MTE1MDMwNUQzMzY2MUE3NkVBRkZCNDVCMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHovuqdduWqJsiwRcg9TBg3gzWjfLqNpWRTERi5b55PbhdWk3F
xed0rXqavlrhL5sS8ZHoPoiiJxVfUf/Mn614tMITXOmsltp5zBzqdUGGxEbD6T2W
niWc+Dwu7IdYw+xL8+7TUYm/gRQ/BdrlkCd8YMHlZOoK/S1YiMcdeYLsLlfYWYG/
mYV/s0S0p4m1sSvw4+o7UB96km88Pnsu5BM3bTYPUsT1KNIBG37tXtxCe9o1+9wa
jbFw/cYPRNlY61PHOo3QOq8CYrOctoJZhrQsUdZEljO2qZ0LwHHCqhhrpJJkbIUf
Jy/MX01jhwJi83fiTLvCqv16UsI+MrtyIa4hAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQUOITn45Io2RFQMF0zZhp26v+0WwMwHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDIyOC9PSVRuNDVJbzJSRlFNRjB6WmhwMjZ2LTBXd00ucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJAa7ADANBgkqhkiG9w0BAQsF
AAOCAQEALd2RXem6l4Rdfoc1MnDE+J1L2GUCv07exeUE+lVLbSeaBMOv50L2SHpL
o+8cDZdyvPDhHecBYCmrSb7UStAjOZmn0jlQ695ofMl2OcwnrJX5C84K8NpoNfda
bGrSX0lu1tM3vjXgu4r3k7ZMj7VicDOq3oSEeTHo4cOjwkchsDrAvVnr0CviVyFd
kvks9kFY0azWq+DNGXhISs/WO8JYldMNAvRjyHmd3ZGLNvW+OedaNmSgGIKtTZUY
J69UuWa2Z+Lp9a6LyOudJzwUC6PKrugV7zBwWuyuTffysEaom7Xhu8tNUNc1bYDe
x+E2/ju4GD/5hSVNe7ntAras12jzHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:48 2026 by rpki-client