Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30252/TTjikqLLRLXCPpKmLXWdRwVGnAo.roa
File:                     TTjikqLLRLXCPpKmLXWdRwVGnAo.roa (raw, json)
Hash identifier:          74pM8aSrcGvXkwQWsgc+khDafZMswuyk1GcZeO9RO0o=
Subject key identifier:   4D:38:E2:92:A2:CB:44:B5:C2:3E:92:A6:2D:75:9D:47:05:46:9C:0A
Certificate issuer:       /CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Certificate serial:       38
Authority key identifier: B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/TTjikqLLRLXCPpKmLXWdRwVGnAo.roa
Signing time:             Tue 31 Mar 2026 08:24:46 +0000
ROA not before:           Tue 31 Mar 2026 08:24:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45677
IP address blocks:        2407:8f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
        Validity
            Not Before: Mar 31 08:24:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4D38E292A2CB44B5C23E92A62D759D4705469C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:07:3a:9a:c2:d0:6a:d7:23:67:2c:0a:c8:
                    fd:08:eb:5f:e5:3d:0b:4e:49:a6:20:a5:3b:3d:10:
                    84:04:d7:d3:0c:5b:a0:e8:0a:85:e5:72:0e:da:45:
                    43:57:c5:5e:45:0c:3c:71:83:0c:ae:cc:dc:4f:3a:
                    53:2b:f6:9f:5c:53:05:dd:07:bd:c1:01:86:af:ef:
                    b4:92:f2:0f:1a:6e:69:b7:ea:6d:c3:54:d9:8a:4e:
                    32:ef:2f:8c:90:58:6a:2f:ac:99:89:7f:c1:e6:1f:
                    43:37:18:83:1f:40:e8:e8:09:a3:ef:9f:1c:ed:5c:
                    6c:d5:c5:bc:bc:7e:f2:65:30:bb:c9:c7:89:bc:9c:
                    f6:e5:69:1d:7a:39:2f:d3:af:b8:2f:ed:dc:85:d1:
                    f0:42:96:ce:ae:bb:13:ac:05:74:d7:9b:8c:5d:2f:
                    5b:37:fa:c9:7b:c0:21:91:1c:4a:66:f5:75:ee:2c:
                    ff:b3:be:9d:d2:2f:e4:26:f4:c4:09:16:21:8a:82:
                    01:f6:19:93:c7:eb:d0:91:4e:e6:7a:22:eb:f2:05:
                    2f:66:f9:ab:4f:3d:24:f5:75:3c:bb:27:1a:12:ef:
                    76:bb:45:23:34:54:95:62:60:e6:4f:0c:c3:9e:d9:
                    5b:68:da:fe:16:26:c3:3a:ee:c4:98:c9:66:2c:78:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:38:E2:92:A2:CB:44:B5:C2:3E:92:A6:2D:75:9D:47:05:46:9C:0A
            X509v3 Authority Key Identifier:
                keyid:B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/TTjikqLLRLXCPpKmLXWdRwVGnAo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:8f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:12:7f:6c:50:c0:1a:77:e2:26:4f:d0:8c:f2:8d:29:82:f7:
         c8:64:3f:1b:b6:b1:3d:de:ab:0f:ca:1a:77:bd:1d:6e:11:46:
         bf:6a:d8:10:bb:4c:81:13:c3:3b:74:fc:1c:ae:d7:e5:72:31:
         b0:41:f4:b8:18:09:4e:e3:95:70:eb:1d:cc:4d:c1:84:d3:02:
         0e:74:0a:3e:90:36:ce:5a:81:7c:ca:d7:7a:57:67:f6:a0:6d:
         9a:44:59:6e:5c:b8:ec:49:f5:6b:94:ca:42:9a:13:87:a1:d3:
         9d:a9:36:64:a5:a4:e9:6a:d3:54:f8:42:eb:b8:c3:e1:25:38:
         c5:67:c3:74:ae:5e:6f:cd:19:fc:a1:c2:a0:84:0b:be:fa:f3:
         7b:11:e6:4b:a9:7f:10:90:1a:31:72:41:12:c3:3e:1b:d1:c7:
         99:32:a5:e6:da:8e:f8:a2:c9:6a:86:43:db:09:60:29:73:4a:
         54:60:40:2f:ea:2d:33:65:e6:41:ab:54:48:20:04:d7:8a:ca:
         36:ff:22:93:2f:47:29:d7:ca:88:32:b2:02:c6:c0:1c:d6:bd:
         93:90:32:5b:a7:fe:83:cc:a9:18:26:bd:c0:ab:5a:c0:73:60:
         94:0c:ff:65:56:ee:a9:0d:a0:dd:e9:ed:14:fa:bf:52:3a:11:
         40:a4:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:20 2026 by rpki-client