Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30250/TuLoQrN5giEDvFdcSMToTIs9P94.roa
File:                     TuLoQrN5giEDvFdcSMToTIs9P94.roa (raw, json)
Hash identifier:          fu3fvNnnsoHwmVbblKvyZpIfEYSWlMH+uyAL63qv+B4=
Subject key identifier:   4E:E2:E8:42:B3:79:82:21:03:BC:57:5C:48:C4:E8:4C:8B:3D:3F:DE
Certificate issuer:       /CN=EEF0120076917264CD0FE2E6A759B4A499AB5FDF
Certificate serial:       12
Authority key identifier: EE:F0:12:00:76:91:72:64:CD:0F:E2:E6:A7:59:B4:A4:99:AB:5F:DF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/TuLoQrN5giEDvFdcSMToTIs9P94.roa
Signing time:             Thu 12 Feb 2026 00:23:39 +0000
ROA not before:           Thu 12 Feb 2026 00:23:39 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     18274
IP address blocks:        2407:3300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEF0120076917264CD0FE2E6A759B4A499AB5FDF
        Validity
            Not Before: Feb 12 00:23:39 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=4EE2E842B379822103BC575C48C4E84C8B3D3FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:e1:e0:95:6e:66:21:33:97:5d:19:6e:00:
                    1e:51:57:b1:81:c9:9a:af:9d:c5:34:c4:76:ac:04:
                    92:08:af:30:c4:f9:8a:08:c7:a5:17:1d:4c:44:1f:
                    b0:52:54:64:8b:eb:b3:23:d1:e5:b0:59:83:bd:f7:
                    a8:2f:76:e8:25:62:23:31:46:d5:ef:77:a8:ea:00:
                    c0:af:02:bc:24:ea:7b:5d:12:b7:f3:d2:a8:9a:99:
                    a5:b1:d6:fe:5c:28:04:54:d1:73:89:59:0d:e1:ce:
                    b0:84:ac:6e:26:d2:c1:e1:aa:f9:74:9d:be:d8:4f:
                    c0:2c:7b:ae:0a:7a:ed:67:49:f3:b7:3f:19:0a:f6:
                    a5:07:7b:2f:a9:38:10:eb:87:03:04:37:8d:82:1e:
                    c8:67:56:c4:b6:82:90:b5:44:f3:44:03:be:3a:d0:
                    5f:ef:45:46:a3:d5:c3:c8:82:5a:c1:77:14:22:5a:
                    fc:4f:8b:4f:ba:95:e8:71:64:af:aa:fe:59:66:25:
                    a5:b4:aa:9f:02:60:7c:d8:23:a3:49:6a:a5:f6:58:
                    17:3d:fb:56:3e:7b:5b:2e:4d:18:62:25:94:81:5d:
                    64:b2:22:c1:9d:01:0a:e4:af:9e:ec:e1:dc:56:4a:
                    a6:34:fb:ca:09:0b:bd:72:e5:c1:f4:b8:1d:95:06:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:E8:42:B3:79:82:21:03:BC:57:5C:48:C4:E8:4C:8B:3D:3F:DE
            X509v3 Authority Key Identifier:
                keyid:EE:F0:12:00:76:91:72:64:CD:0F:E2:E6:A7:59:B4:A4:99:AB:5F:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/7vASAHaRcmTND-Lmp1m0pJmrX98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7vASAHaRcmTND-Lmp1m0pJmrX98.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30250/TuLoQrN5giEDvFdcSMToTIs9P94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:3300::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:43:cd:c3:83:36:77:bf:db:57:b4:0e:55:84:ab:06:37:
         df:38:69:28:87:c5:a9:36:ec:5f:91:f6:41:d3:17:7f:20:fe:
         89:94:af:da:fa:b7:36:74:cc:56:6f:0f:7b:f7:50:cb:53:d8:
         e6:ac:b5:3c:8f:3a:98:c1:47:cc:a6:b1:b6:4c:a5:e4:e4:73:
         1c:36:56:3e:28:d4:bb:b1:9e:b3:44:16:10:19:69:85:43:21:
         d9:c6:d6:6c:69:aa:51:76:9f:2c:cd:13:86:39:f7:91:7b:c3:
         de:6a:1b:fd:b7:59:a2:86:aa:8e:a2:19:33:2a:96:9d:ab:4c:
         f3:b5:82:00:b8:0d:7b:a1:f0:67:60:9d:d6:3b:b2:9d:d9:fa:
         0c:1b:12:57:e1:41:f0:99:ae:af:d2:5e:bc:e7:a3:71:43:b7:
         e3:55:cc:5c:8e:74:75:f6:ba:ca:5f:70:19:d3:91:cf:b4:d3:
         fd:9f:89:0e:43:d7:c9:1b:21:a4:8f:b9:9a:fe:1f:df:72:03:
         1b:b4:dd:94:bb:3a:62:a9:61:c1:11:66:a1:95:20:7f:1e:1d:
         a5:0e:4e:16:35:b3:44:6a:7d:a0:13:0e:db:ad:c0:5d:6c:1d:
         70:63:ee:2e:85:28:f7:8e:df:ec:5a:4f:80:9d:7a:2d:b2:3f:
         1c:93:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:44 2026 by rpki-client