Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dmcBLSTjFOqbuZFN-NqNr2HXgCE.roa
File:                     dmcBLSTjFOqbuZFN-NqNr2HXgCE.roa (raw, json)
Hash identifier:          Sw3F68PzesW9qoesAf5C8DvCi59T9WMHkB0lAxqgCWk=
Subject key identifier:   76:67:01:2D:24:E3:14:EA:9B:B9:91:4D:F8:DA:8D:AF:61:D7:80:21
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       71
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dmcBLSTjFOqbuZFN-NqNr2HXgCE.roa
Signing time:             Tue 31 Mar 2026 07:47:36 +0000
ROA not before:           Tue 31 Mar 2026 07:47:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59103
IP address blocks:        2401:af80:9011::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Mar 31 07:47:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7667012D24E314EA9BB9914DF8DA8DAF61D78021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:77:3c:fe:76:f2:46:29:06:0a:82:b2:57:11:
                    54:b1:a0:5b:60:90:4e:69:67:12:8d:34:53:75:de:
                    b8:5a:1d:7f:88:dd:fe:f0:cb:c7:8f:fc:38:59:fe:
                    5f:b1:5b:15:e1:0c:7c:68:7f:00:b9:46:ac:53:7c:
                    d8:13:fd:ee:14:ec:94:ae:2f:e6:9c:ed:a8:42:84:
                    87:f4:25:3b:a6:20:7f:6a:1a:1e:a0:23:eb:7f:3d:
                    7b:b9:8b:41:88:d4:d9:e3:a9:c0:42:7e:97:11:16:
                    5b:c7:21:c0:68:88:c3:e9:65:48:0c:fc:a9:e0:50:
                    e7:b8:58:26:88:45:f2:c9:3b:d7:e8:c9:0a:f1:c1:
                    26:7a:7e:7c:07:ad:1b:1c:58:ab:9e:91:c0:38:eb:
                    dd:9e:8d:c2:30:ae:71:50:0e:9c:ba:01:36:66:fb:
                    27:7a:1f:36:4e:cc:5b:76:43:d6:9f:87:7b:32:c6:
                    16:36:40:5c:9e:97:fc:e5:27:6c:60:49:49:a1:ec:
                    b3:80:42:8c:61:48:56:2d:96:ab:0d:ef:66:a9:fb:
                    49:83:1e:05:3f:ce:6b:a4:42:7d:1e:22:4c:cb:42:
                    73:16:35:56:66:21:f6:19:0c:af:eb:70:92:c8:d7:
                    77:d7:1e:d6:ec:fe:49:7f:5e:c4:b3:28:5c:d7:9f:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:01:2D:24:E3:14:EA:9B:B9:91:4D:F8:DA:8D:AF:61:D7:80:21
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/dmcBLSTjFOqbuZFN-NqNr2HXgCE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:80:f7:cd:1d:e9:89:d2:ce:51:b4:17:31:bb:37:7f:e8:
         e9:78:1d:ec:13:53:39:41:2a:03:a7:c6:ba:50:6d:24:de:55:
         16:bc:c7:ec:a8:97:30:a2:11:05:a5:17:9f:62:2c:43:d1:91:
         9b:9f:f0:ac:10:e8:a0:04:83:34:42:bc:34:cb:75:f6:72:7b:
         58:f9:96:89:e7:65:98:58:62:74:b2:ce:cc:26:5a:83:5a:d5:
         57:ce:27:62:1f:f1:18:54:bf:ef:96:9b:f2:3c:e5:4c:08:80:
         00:c0:39:71:cc:f4:d5:e0:31:5e:12:05:f6:7d:fb:d0:93:cf:
         d5:67:23:3b:72:44:d7:58:a9:93:2d:ab:92:44:d5:81:1e:f3:
         81:ec:a1:e9:09:54:57:89:c5:66:9f:39:51:66:df:00:e7:9a:
         48:85:67:61:af:04:58:d1:e0:4b:6b:eb:b5:55:8d:68:d0:b8:
         7e:93:e2:f7:f0:d3:ce:2a:4e:9f:80:8c:55:d4:c8:df:6e:3b:
         b6:e9:73:a7:4a:19:b2:87:d2:ca:08:e1:65:5d:6f:83:90:07:
         de:23:d6:ee:67:d8:54:64:38:d9:16:a0:ef:8c:fa:2e:ee:0a:
         71:22:a7:7c:97:63:c4:0e:ff:7c:0e:0b:af:49:8b:23:55:c8:
         a5:9d:60:31
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjk5
RkU2OUE4MzIxOTFGODQ3QzMzQjI0MzQ0MkU5RDY4QUQxNDMzMB4XDTI2MDMzMTA3
NDczNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzY2NzAxMkQyNEUzMTRF
QTlCQjk5MTRERjhEQThEQUY2MUQ3ODAyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPB3PP528kYpBgqCslcRVLGgW2CQTmlnEo00U3XeuFodf4jd/vDL
x4/8OFn+X7FbFeEMfGh/ALlGrFN82BP97hTslK4v5pztqEKEh/QlO6Ygf2oaHqAj
6389e7mLQYjU2eOpwEJ+lxEWW8chwGiIw+llSAz8qeBQ57hYJohF8sk71+jJCvHB
Jnp+fAetGxxYq56RwDjr3Z6NwjCucVAOnLoBNmb7J3ofNk7MW3ZD1p+HezLGFjZA
XJ6X/OUnbGBJSaHss4BCjGFIVi2Wqw3vZqn7SYMeBT/Oa6RCfR4iTMtCcxY1VmYh
9hkMr+twksjXd9ce1uz+SX9exLMoXNefTbcCAwEAAaOCAeEwggHdMB0GA1UdDgQW
BBR2ZwEtJOMU6pu5kU342o2vYdeAITAfBgNVHSMEGDAWgBSrmf5pqDIZH4R8M7JD
RC6daK0UMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNjcvcTVuLWFhZ3lHUi1FZkRPeVEwUXVuV2l0RkRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcTVuLWFhZ3lHUi1FZkRPeVEwUXVu
V2l0RkRNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjY3L2RtY0JMU1RqRk9xYnVaRk4tTnFOcjJIWGdDRS5yb2Ew
IwYIKwYBBQUHAQcBAf8EFDASMBAEAgACMAoDCAAkAa+AkBEAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6J4D3zR3pidLOUbQXMbs3f+jpeB3sE1M5QSoDp8a6UG0k3lUWvMfs
qJcwohEFpRefYixD0ZGbn/CsEOigBIM0Qrw0y3X2cntY+ZaJ52WYWGJ0ss7MJlqD
WtVXzidiH/EYVL/vlpvyPOVMCIAAwDlxzPTV4DFeEgX2ffvQk8/VZyM7ckTXWKmT
LauSRNWBHvOB7KHpCVRXicVmnzlRZt8A55pIhWdhrwRY0eBLa+u1VY1o0Lh+k+L3
8NPOKk6fgIxV1Mjfbju26XOnShmyh9LKCOFlXW+DkAfeI9buZ9hUZDjZFqDvjPou
7gpxIqd8l2PEDv98DguvSYsjVcilnWAx
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:25 2026 by rpki-client