Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30313/QWRhudhIgd99aOOFF3w_yvriSMY.roa
File:                     QWRhudhIgd99aOOFF3w_yvriSMY.roa (raw, json)
Hash identifier:          Gs2Dk3PteDia9syoPIXpVNdBIJg4SNX4znftKX1l+Gg=
Subject key identifier:   41:64:61:B9:D8:48:81:DF:7D:68:E3:85:17:7C:3F:CA:FA:E2:48:C6
Certificate issuer:       /CN=EEFF0E9F5207E09C3C995CF5C0763E35E9EC9782
Certificate serial:       24
Authority key identifier: EE:FF:0E:9F:52:07:E0:9C:3C:99:5C:F5:C0:76:3E:35:E9:EC:97:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7v8On1IH4Jw8mVz1wHY-Nensl4I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30313/QWRhudhIgd99aOOFF3w_yvriSMY.roa
Signing time:             Tue 31 Mar 2026 08:40:19 +0000
ROA not before:           Tue 31 Mar 2026 08:40:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24289
IP address blocks:        2401:dd40::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30313/7v8On1IH4Jw8mVz1wHY-Nensl4I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30313/7v8On1IH4Jw8mVz1wHY-Nensl4I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7v8On1IH4Jw8mVz1wHY-Nensl4I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFF0E9F5207E09C3C995CF5C0763E35E9EC9782
        Validity
            Not Before: Mar 31 08:40:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=416461B9D84881DF7D68E385177C3FCAFAE248C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:41:a4:b6:f2:e5:3b:62:ef:4a:79:dc:a5:4c:
                    0b:7b:e4:13:03:da:0b:4a:92:80:b0:ca:0e:34:e8:
                    04:3c:f0:d9:fa:b8:19:2c:0b:f2:33:a8:99:7b:aa:
                    79:69:41:8b:e8:c8:95:37:60:d4:97:f7:ff:10:95:
                    cc:d7:03:48:cc:cc:9f:09:93:61:ff:f6:80:08:09:
                    ad:ae:8a:ca:60:e0:b9:9c:a5:c8:21:e2:b8:a1:93:
                    19:0a:46:b6:77:85:c4:46:d4:0b:2d:36:65:05:a4:
                    f8:1e:96:97:eb:60:fe:1a:92:64:1c:e5:30:e5:d0:
                    08:69:34:aa:5e:59:da:43:b9:a2:cd:1e:7c:da:01:
                    03:53:6c:89:7f:17:ab:66:f7:cb:84:a0:93:6d:73:
                    3c:cd:26:13:c2:b7:b8:a5:d9:ef:a4:24:ea:62:6b:
                    de:35:a9:5d:6b:f6:b9:06:19:ec:11:29:d3:37:38:
                    ae:76:e9:da:91:2c:c5:bc:a6:cb:4a:9d:0e:0b:40:
                    5a:2d:f8:8d:44:69:57:b4:a1:35:f5:f4:6c:92:d4:
                    c6:9a:4d:d9:dc:f4:4b:e6:c5:b6:f0:e7:80:f8:e1:
                    a1:96:e4:17:2d:68:48:3a:6c:82:85:d2:b0:0e:0c:
                    cf:99:79:95:58:d2:08:02:b9:23:5d:eb:65:eb:74:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:61:B9:D8:48:81:DF:7D:68:E3:85:17:7C:3F:CA:FA:E2:48:C6
            X509v3 Authority Key Identifier:
                keyid:EE:FF:0E:9F:52:07:E0:9C:3C:99:5C:F5:C0:76:3E:35:E9:EC:97:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30313/7v8On1IH4Jw8mVz1wHY-Nensl4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7v8On1IH4Jw8mVz1wHY-Nensl4I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30313/QWRhudhIgd99aOOFF3w_yvriSMY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:dd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:c8:4a:f5:d6:84:a5:83:7a:a9:91:da:64:04:a6:d9:da:
         3f:e0:8f:7d:73:7e:3f:49:af:1e:d1:47:b0:0b:04:d0:f1:42:
         07:26:f0:56:35:98:1d:0f:93:f0:72:f5:d4:f3:b0:a2:36:76:
         9f:f2:b4:a7:8d:87:45:46:4b:87:9d:9c:73:1a:33:8f:16:e0:
         00:33:b0:39:07:01:4e:94:f3:4b:c3:c6:97:af:25:65:3b:d8:
         e2:6a:15:b3:c6:d2:c7:5b:3b:f1:dc:49:f3:cb:c2:9f:b8:d6:
         e9:37:a7:b6:1b:a0:4f:52:06:bc:da:10:61:b3:06:96:08:f8:
         33:db:fc:0a:ce:b5:74:ff:1d:db:58:ce:d4:94:ef:cc:b7:32:
         24:ba:cb:ec:52:30:b7:75:e8:16:e3:62:9b:59:88:8e:ad:17:
         4f:0b:c9:fc:7f:07:ff:07:bb:6a:84:70:61:da:2c:50:37:49:
         59:d7:a7:a5:e0:6b:db:77:39:d8:96:18:c0:4d:53:dc:bb:2b:
         25:8c:90:11:67:29:d5:25:f5:8d:73:f2:41:64:a5:a0:13:38:
         5d:a9:56:14:e5:2c:df:f1:24:19:b6:fa:79:3b:0f:9f:d4:2f:
         e0:a0:d6:4a:5d:a2:42:23:98:18:66:68:66:fc:dd:7a:2c:8a:
         b0:9e:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:29 2026 by rpki-client