Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30322/QwOL6LAmtbVBougoQFNS07tsqpk.roa
File:                     QwOL6LAmtbVBougoQFNS07tsqpk.roa (raw, json)
Hash identifier:          6b0roA3ZwL2ahCo6ut6RxTYQU3+i1KryKwsn1VvnFOc=
Subject key identifier:   43:03:8B:E8:B0:26:B5:B5:41:A2:E8:28:40:53:52:D3:BB:6C:AA:99
Certificate issuer:       /CN=E730FF02D763BBAA54870773BA15B0DF355BA587
Certificate serial:       2D
Authority key identifier: E7:30:FF:02:D7:63:BB:AA:54:87:07:73:BA:15:B0:DF:35:5B:A5:87
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5zD_Atdju6pUhwdzuhWw3zVbpYc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30322/QwOL6LAmtbVBougoQFNS07tsqpk.roa
Signing time:             Tue 31 Mar 2026 08:33:56 +0000
ROA not before:           Tue 31 Mar 2026 08:33:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24259
IP address blocks:        2402:b9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30322/5zD_Atdju6pUhwdzuhWw3zVbpYc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30322/5zD_Atdju6pUhwdzuhWw3zVbpYc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5zD_Atdju6pUhwdzuhWw3zVbpYc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E730FF02D763BBAA54870773BA15B0DF355BA587
        Validity
            Not Before: Mar 31 08:33:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=43038BE8B026B5B541A2E828405352D3BB6CAA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:af:36:05:ff:7c:f6:97:c8:9f:62:27:fb:
                    c1:7d:dc:72:97:95:61:18:47:ac:0a:97:24:77:46:
                    2f:fb:87:f2:9d:aa:ce:5f:a7:91:06:5f:7a:31:92:
                    a0:1b:72:75:28:28:21:34:2a:68:c1:ce:24:36:dc:
                    68:e8:81:2b:5b:89:f3:74:99:dc:87:6b:da:00:25:
                    05:d7:e1:a6:ae:3b:2c:d5:d9:b4:81:ea:28:e6:91:
                    6c:4b:f5:81:3d:14:20:e5:3e:3e:88:30:b8:49:e4:
                    5c:fa:9c:f4:3c:62:cd:3d:fe:72:20:89:1e:ef:6d:
                    27:bc:f7:97:95:19:35:40:c8:30:65:39:35:4a:3e:
                    32:ed:8a:c9:71:e8:4c:d5:d8:fa:09:c2:13:9b:28:
                    ec:51:8b:22:85:dd:3f:22:d4:b5:5c:f0:92:82:24:
                    67:84:8d:1c:e0:50:00:1c:2f:c8:07:b0:52:83:fa:
                    cb:2b:7a:52:0e:56:b6:c5:bd:53:c2:bc:ac:48:26:
                    cf:a0:37:78:72:b2:ae:33:54:4f:2d:62:54:24:2f:
                    ab:b2:37:56:4e:c5:08:01:aa:41:5b:74:ed:04:8b:
                    13:4e:70:e8:7c:3f:be:ca:80:e0:3b:2c:b1:a2:da:
                    e8:67:d0:6c:46:fa:b4:e6:dd:f3:8e:e7:c4:08:b1:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:8B:E8:B0:26:B5:B5:41:A2:E8:28:40:53:52:D3:BB:6C:AA:99
            X509v3 Authority Key Identifier:
                keyid:E7:30:FF:02:D7:63:BB:AA:54:87:07:73:BA:15:B0:DF:35:5B:A5:87

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30322/5zD_Atdju6pUhwdzuhWw3zVbpYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5zD_Atdju6pUhwdzuhWw3zVbpYc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30322/QwOL6LAmtbVBougoQFNS07tsqpk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:b9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:0b:54:e4:0c:c9:09:ed:39:28:25:5b:15:f6:69:67:ca:
         c4:3e:fc:31:70:0a:82:be:56:da:e3:1b:65:04:65:c0:7a:36:
         05:b0:1b:04:fe:31:65:a7:93:ed:dc:b1:82:0a:75:8d:f1:5e:
         2b:a7:90:82:e9:9c:a1:08:ae:94:c5:b6:6e:84:74:84:30:36:
         86:3e:e8:b8:42:1b:96:88:41:ca:d8:c1:93:73:1a:05:2c:08:
         de:03:32:86:a7:0b:45:26:8c:5c:9e:aa:59:47:c1:97:d2:2c:
         95:51:46:45:b4:14:8f:64:c2:54:cb:b3:b4:90:1e:77:14:70:
         8d:cf:70:59:95:98:ab:8e:aa:a7:ef:c2:c3:39:af:1c:e4:c3:
         79:37:5b:df:bc:bd:ea:7b:3c:49:3e:43:8d:9b:70:dc:b4:b9:
         5e:43:a2:d5:7b:ce:ed:37:c9:70:83:a3:db:5d:a5:c8:26:95:
         29:9d:6c:97:a0:94:54:01:39:c3:c1:4b:db:cf:59:50:fc:21:
         34:97:ec:c4:43:64:6e:2d:1a:d8:26:bf:70:27:a5:99:80:4d:
         57:d1:82:7e:db:71:d7:1b:b0:d3:9c:8a:40:26:82:57:bb:a3:
         bd:c0:e7:54:70:3b:b9:7d:2e:5d:03:fe:ac:88:f4:b5:f1:2e:
         e6:dc:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:27 2026 by rpki-client