Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dKzHqSH6d6GIZAwh2NM7nLg-iyg.roa
File:                     dKzHqSH6d6GIZAwh2NM7nLg-iyg.roa (raw, json)
Hash identifier:          oGJ7jClvJiLj6ksCeoa91eFladlEuCYkQf5rLH++StE=
Subject key identifier:   74:AC:C7:A9:21:FA:77:A1:88:64:0C:21:D8:D3:3B:9C:B8:3E:8B:28
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       70
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dKzHqSH6d6GIZAwh2NM7nLg-iyg.roa
Signing time:             Tue 31 Mar 2026 07:47:36 +0000
ROA not before:           Tue 31 Mar 2026 07:47:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59103
IP address blocks:        2401:af80:9011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Mar 31 07:47:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=74ACC7A921FA77A188640C21D8D33B9CB83E8B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:7c:f5:41:c2:04:7a:a9:b6:9d:68:e3:09:
                    2e:15:bc:fc:91:0b:4a:74:73:b7:33:f2:94:f5:08:
                    b1:aa:3c:f0:19:55:1d:1f:25:d4:49:43:ab:60:88:
                    bb:f3:82:f5:f2:bf:c7:f0:6d:69:2c:7a:58:a3:e9:
                    ae:01:cc:29:43:75:af:15:e7:5b:e1:55:52:aa:bc:
                    28:9c:78:84:65:33:fc:3b:3d:83:3e:17:e2:fb:94:
                    72:cb:04:8d:71:7d:ff:20:17:05:02:d2:26:dd:5e:
                    15:a9:60:a8:18:9b:fd:cc:33:55:f9:ab:50:6f:ad:
                    78:fb:d0:0b:14:5d:d2:20:42:de:41:cc:47:5a:39:
                    b8:3f:56:2f:27:e8:f3:4f:17:92:b4:9e:19:8d:58:
                    6c:ca:bb:06:83:3f:18:ff:1d:2f:a5:a7:52:e4:1b:
                    df:fa:f9:00:3b:b5:2e:c8:d1:b7:24:85:24:94:4e:
                    61:8b:d5:7b:56:bf:81:b4:e9:12:69:df:bd:e5:5d:
                    09:4b:45:cd:93:c3:f6:b6:71:03:61:c2:d7:28:30:
                    51:f7:34:48:1a:fc:f4:71:65:33:ae:42:20:b6:42:
                    66:45:29:08:e6:23:08:e6:58:85:48:25:52:93:51:
                    58:ec:7e:82:bb:c8:60:7d:ae:c8:90:06:5f:33:37:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AC:C7:A9:21:FA:77:A1:88:64:0C:21:D8:D3:3B:9C:B8:3E:8B:28
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dKzHqSH6d6GIZAwh2NM7nLg-iyg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:36:b6:8a:86:e3:5b:45:49:42:7a:31:b4:71:ea:23:78:01:
         be:bf:0a:f2:6d:21:bf:7a:9f:96:09:51:77:2c:da:b0:b4:81:
         0b:83:fb:52:2e:ee:09:c8:ac:5b:26:ea:8c:42:66:a6:ba:b5:
         3a:76:e4:1d:0b:5b:a7:2c:9c:ef:b1:c7:69:74:64:71:ed:cd:
         9c:86:67:c4:d0:c0:4c:aa:57:41:67:13:22:70:9d:2a:cc:28:
         5f:62:2c:de:5a:5f:cb:5d:b2:2b:df:12:6b:94:84:d4:64:4c:
         13:ee:a8:2b:db:46:0d:68:c8:2b:f8:19:2d:36:d4:7a:8a:5d:
         fb:33:11:35:85:1b:03:3d:c5:02:b8:db:29:c0:70:a9:fb:ba:
         50:d0:ae:d7:c0:63:19:32:48:73:ae:e9:31:f9:0a:59:51:ec:
         40:c0:fb:2f:73:2a:b3:05:22:1f:bd:a7:1a:89:1d:dd:13:ec:
         99:bc:82:4d:55:34:da:b5:2c:50:59:77:43:28:54:a7:e2:e4:
         e7:78:bb:33:94:3b:fb:ed:70:55:c0:44:0b:7e:62:0c:dd:83:
         dd:16:d0:1a:55:d9:55:94:9a:b5:ee:aa:58:03:6e:d4:9c:40:
         32:f6:89:45:1a:f2:48:f5:cc:8c:0b:93:41:96:ba:41:f3:a4:
         2b:e1:ba:46
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjk5
RkU2OUE4MzIxOTFGODQ3QzMzQjI0MzQ0MkU5RDY4QUQxNDMzMB4XDTI2MDMzMTA3
NDczNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzRBQ0M3QTkyMUZBNzdB
MTg4NjQwQzIxRDhEMzNCOUNCODNFOEIyODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8nfPVBwgR6qbadaOMJLhW8/JELSnRztzPylPUIsao88BlVHR8l
1ElDq2CIu/OC9fK/x/BtaSx6WKPprgHMKUN1rxXnW+FVUqq8KJx4hGUz/Ds9gz4X
4vuUcssEjXF9/yAXBQLSJt1eFalgqBib/cwzVfmrUG+tePvQCxRd0iBC3kHMR1o5
uD9WLyfo808XkrSeGY1YbMq7BoM/GP8dL6WnUuQb3/r5ADu1LsjRtySFJJROYYvV
e1a/gbTpEmnfveVdCUtFzZPD9rZxA2HC1ygwUfc0SBr89HFlM65CILZCZkUpCOYj
COZYhUglUpNRWOx+grvIYH2uyJAGXzM3Nx0CAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBR0rMepIfp3oYhkDCHY0zucuD6LKDAfBgNVHSMEGDAWgBSrmf5pqDIZH4R8M7JD
RC6daK0UMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNjcvcTVuLWFhZ3lHUi1FZkRPeVEwUXVuV2l0RkRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcTVuLWFhZ3lHUi1FZkRPeVEwUXVu
V2l0RkRNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjY3L2RLekhxU0g2ZDZHSVpBd2gyTk03bkxnLWl5Zy5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAa+AkBEwDQYJKoZIhvcNAQEL
BQADggEBAFY2toqG41tFSUJ6MbRx6iN4Ab6/CvJtIb96n5YJUXcs2rC0gQuD+1Iu
7gnIrFsm6oxCZqa6tTp25B0LW6csnO+xx2l0ZHHtzZyGZ8TQwEyqV0FnEyJwnSrM
KF9iLN5aX8tdsivfEmuUhNRkTBPuqCvbRg1oyCv4GS021HqKXfszETWFGwM9xQK4
2ynAcKn7ulDQrtfAYxkySHOu6TH5CllR7EDA+y9zKrMFIh+9pxqJHd0T7Jm8gk1V
NNq1LFBZd0MoVKfi5Od4uzOUO/vtcFXARAt+Ygzdg90W0BpV2VWUmrXuqlgDbtSc
QDL2iUUa8kj1zIwLk0GWukHzpCvhukY=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:54 2026 by rpki-client