Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/JNr6AUJWdW1qXztq4cmuF3VTrVg.roa
File:                     JNr6AUJWdW1qXztq4cmuF3VTrVg.roa (raw, json)
Hash identifier:          Ye6cJOoRTSX6IeVjU8ARIUVU5Z5cBR5xs6To8Y/Lc8c=
Subject key identifier:   24:DA:FA:01:42:56:75:6D:6A:5F:3B:6A:E1:C9:AE:17:75:53:AD:58
Certificate issuer:       /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Certificate serial:       2C
Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/JNr6AUJWdW1qXztq4cmuF3VTrVg.roa
Signing time:             Tue 31 Mar 2026 08:35:19 +0000
ROA not before:           Tue 31 Mar 2026 08:35:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        2402:3000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
        Validity
            Not Before: Mar 31 08:35:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=24DAFA014256756D6A5F3B6AE1C9AE177553AD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:af:04:92:c8:86:39:34:f2:54:1b:39:b9:
                    94:e7:62:26:e4:b9:68:85:ba:fe:7d:35:b5:73:e6:
                    02:84:71:98:7c:4c:32:f5:ba:8c:58:8d:85:75:79:
                    cf:1b:3d:a9:fd:9c:46:13:63:44:a8:66:68:72:68:
                    7d:a9:9a:0f:10:cd:2c:66:ec:5f:45:9c:17:25:72:
                    1a:d4:f8:5a:14:4e:81:44:17:31:3f:93:83:c1:5c:
                    b9:78:df:ec:c5:68:e2:f6:2a:9f:49:12:eb:f0:84:
                    c2:c6:ad:9e:0d:61:e4:3e:ec:db:58:d4:56:99:40:
                    cb:1c:0d:06:5e:95:e9:61:bd:a5:d2:08:48:c6:57:
                    78:84:06:08:2c:09:f6:e7:73:dd:55:01:eb:f8:7f:
                    61:64:f8:b9:7c:a6:fc:87:ad:bc:b3:8c:36:6a:5d:
                    4d:35:eb:4b:13:e5:b9:de:be:48:87:d5:2d:04:ae:
                    f6:a0:be:9e:67:7d:e2:c5:cd:1d:9a:3c:4a:6f:ea:
                    f8:33:36:9c:87:02:7b:40:3e:a2:95:01:b8:31:e5:
                    3a:c8:f0:fe:21:81:47:8a:fa:5f:c1:00:e1:8f:55:
                    24:31:e1:71:da:e9:5d:8d:a2:88:33:77:03:d2:d2:
                    62:86:9a:fc:40:ca:b4:b7:0e:87:88:89:e6:1b:bc:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DA:FA:01:42:56:75:6D:6A:5F:3B:6A:E1:C9:AE:17:75:53:AD:58
            X509v3 Authority Key Identifier:
                keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/JNr6AUJWdW1qXztq4cmuF3VTrVg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:5d:69:8f:3a:ea:b2:1e:29:d2:36:7d:f3:ac:5d:f8:24:
         80:67:30:31:5d:f6:8f:13:fd:36:d6:91:7d:55:e4:7e:18:2b:
         92:b3:43:2a:cf:c3:33:a4:38:ba:bd:f8:f3:8b:2d:fa:2a:0d:
         86:70:83:52:b9:59:8a:d7:40:a7:2a:b4:90:17:1e:57:34:b4:
         6f:6f:4c:58:fb:c0:5b:a5:a0:5d:bf:af:38:23:3d:b7:0e:3e:
         ac:14:69:bb:07:5c:98:5b:c9:b6:ab:61:57:d8:4b:4d:30:35:
         ed:7f:3a:9f:a0:59:c4:f7:69:a5:c5:a9:a6:02:14:4a:d9:5a:
         c6:65:5a:ab:be:4d:71:4e:36:3e:50:da:eb:f7:fd:10:71:38:
         78:2c:23:e2:48:9e:0b:87:23:1e:0b:90:ee:f9:49:c3:8a:ec:
         05:49:7a:fc:2f:12:24:f0:38:77:60:cb:7d:bb:09:9d:7e:b0:
         64:ad:bd:2e:80:c6:1f:e4:c2:a1:39:fe:b9:52:f6:14:36:8a:
         8e:81:62:d1:b7:65:85:d1:b1:76:33:3f:c4:50:54:e9:4c:4b:
         c1:2b:c4:62:24:f7:f3:df:0f:5e:14:45:65:5a:14:d6:92:27:
         aa:53:9d:9a:9c:38:f2:04:97:a2:9d:5a:7d:e3:d8:2b:a3:28:
         75:b2:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:48 2026 by rpki-client