Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30334/79wmjIC6pQYPG-8iJXGYXnLdM3E.roa
File:                     79wmjIC6pQYPG-8iJXGYXnLdM3E.roa (raw, json)
Hash identifier:          STUrQeBU9q9gvw7ObwTEb33feXXxjbNNQ7UvzJGyZJQ=
Subject key identifier:   EF:DC:26:8C:80:BA:A5:06:0F:1B:EF:22:25:71:98:5E:72:DD:33:71
Certificate issuer:       /CN=1D8418AACE385E3A773B78E02EEA81E493DF97A2
Certificate serial:       02
Authority key identifier: 1D:84:18:AA:CE:38:5E:3A:77:3B:78:E0:2E:EA:81:E4:93:DF:97:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HYQYqs44Xjp3O3jgLuqB5JPfl6I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/79wmjIC6pQYPG-8iJXGYXnLdM3E.roa
Signing time:             Fri 04 Sep 2026 01:45:02 +0000
ROA not before:           Fri 04 Sep 2026 01:45:02 +0000
ROA not after:            Sat 04 Sep 2027 01:32:31 +0000
asID:                     18268
IP address blocks:        2403:3200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/HYQYqs44Xjp3O3jgLuqB5JPfl6I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/HYQYqs44Xjp3O3jgLuqB5JPfl6I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HYQYqs44Xjp3O3jgLuqB5JPfl6I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 15:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8418AACE385E3A773B78E02EEA81E493DF97A2
        Validity
            Not Before: Sep  4 01:45:02 2026 GMT
            Not After : Sep  4 01:32:31 2027 GMT
        Subject: CN=EFDC268C80BAA5060F1BEF222571985E72DD3371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:bb:0c:1d:31:16:87:07:3c:9d:d8:34:38:
                    4a:1d:7f:15:b3:62:65:a2:e3:6f:97:6d:e4:0d:cb:
                    23:97:e4:9b:da:7b:ae:a9:4d:32:81:52:9b:33:c4:
                    93:17:fb:10:d5:9b:6b:1e:b1:b3:a2:16:c0:80:e8:
                    6e:97:96:23:8c:b3:f2:57:2c:17:b6:50:1d:40:a8:
                    7f:57:ab:24:2d:ba:98:ee:cc:ed:be:4a:41:d1:f1:
                    cf:1f:e9:7b:17:32:c4:8a:5b:b9:3e:54:a6:cb:c3:
                    ad:2e:e3:60:78:49:1e:94:b8:1c:d9:9d:28:20:20:
                    be:4f:34:ab:a3:65:ad:de:3b:f2:bb:76:55:55:6d:
                    60:f7:39:ae:85:16:87:f5:18:d2:8b:d0:2d:7d:8b:
                    1f:dd:20:f9:2d:34:dd:4c:4e:47:44:fc:fe:a8:25:
                    3d:49:e0:40:e9:2c:15:fb:52:48:b2:c6:36:5f:93:
                    ce:22:eb:a6:cf:19:bf:43:ac:b7:bd:be:d5:56:a2:
                    3d:e5:6a:ca:42:cf:c9:89:88:06:57:17:17:63:78:
                    41:71:3c:05:b5:2c:fe:f9:e1:27:93:0d:e9:a4:5c:
                    96:6c:99:c0:01:d4:01:f1:52:7c:03:e6:10:eb:27:
                    96:4d:7f:c2:d4:1b:48:6f:24:b2:b3:80:e2:70:18:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:26:8C:80:BA:A5:06:0F:1B:EF:22:25:71:98:5E:72:DD:33:71
            X509v3 Authority Key Identifier:
                keyid:1D:84:18:AA:CE:38:5E:3A:77:3B:78:E0:2E:EA:81:E4:93:DF:97:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/HYQYqs44Xjp3O3jgLuqB5JPfl6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HYQYqs44Xjp3O3jgLuqB5JPfl6I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/79wmjIC6pQYPG-8iJXGYXnLdM3E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:bf:c6:58:9c:71:cd:72:65:12:f0:5a:94:ae:b4:ae:6f:
         03:cd:e9:50:65:93:a4:5a:28:1b:39:85:db:07:33:d2:e7:9f:
         c6:81:63:56:0a:ea:0b:7f:10:8b:1a:8c:96:d1:45:12:ad:73:
         5e:b4:a6:0c:de:ad:39:31:95:bc:9d:41:37:bb:a6:2b:0d:40:
         67:e7:22:65:67:70:6a:ae:52:ba:0f:3d:36:64:fe:49:c0:29:
         76:52:4b:1c:e0:00:81:be:37:51:ff:9f:60:e1:ca:b7:22:54:
         f3:41:e3:14:91:dc:b6:9c:75:57:c9:aa:8f:d5:fe:62:ae:78:
         fc:22:d9:fe:26:c5:c6:5a:7e:9b:12:d7:4f:b8:97:16:bf:32:
         22:3e:fe:18:df:e3:4c:45:18:ee:95:bc:7e:40:b9:31:8e:7c:
         12:23:38:14:c2:cf:3a:06:e7:d9:09:da:53:1a:00:c2:a7:26:
         36:3c:93:80:3a:8d:fe:fb:b7:b2:bd:34:b5:18:0c:e2:e4:ee:
         fa:da:76:3d:ed:b2:4d:66:79:59:f4:4c:61:69:de:47:be:cc:
         36:a5:6a:d7:27:7d:6d:e0:e5:49:3a:5a:07:00:30:1f:a8:d0:
         bf:b1:f3:c1:b5:97:06:83:91:a8:41:bc:b6:87:33:d1:e2:99:
         17:d6:d6:56
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRDg0
MThBQUNFMzg1RTNBNzczQjc4RTAyRUVBODFFNDkzREY5N0EyMB4XDTI2MDkwNDAx
NDUwMloXDTI3MDkwNDAxMzIzMVowMzExMC8GA1UEAxMoRUZEQzI2OEM4MEJBQTUw
NjBGMUJFRjIyMjU3MTk4NUU3MkREMzM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANh+uwwdMRaHBzyd2DQ4Sh1/FbNiZaLjb5dt5A3LI5fkm9p7rqlN
MoFSmzPEkxf7ENWbax6xs6IWwIDobpeWI4yz8lcsF7ZQHUCof1erJC26mO7M7b5K
QdHxzx/pexcyxIpbuT5UpsvDrS7jYHhJHpS4HNmdKCAgvk80q6Nlrd478rt2VVVt
YPc5roUWh/UY0ovQLX2LH90g+S003UxOR0T8/qglPUngQOksFftSSLLGNl+TziLr
ps8Zv0Ost72+1VaiPeVqykLPyYmIBlcXF2N4QXE8BbUs/vnhJ5MN6aRclmyZwAHU
AfFSfAPmEOsnlk1/wtQbSG8ksrOA4nAYSLECAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTv3CaMgLqlBg8b7yIlcZhect0zcTAfBgNVHSMEGDAWgBQdhBiqzjheOnc7eOAu
6oHkk9+XojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMzQvSFlRWXFzNDRYanAzTzNqZ0x1cUI1SlBmbDZJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSFlRWXFzNDRYanAzTzNqZ0x1cUI1
SlBmbDZJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzM0Lzc5d21qSUM2cFFZUEctOGlKWEdZWG5MZE0zRS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAzIAMA0GCSqGSIb3DQEBCwUA
A4IBAQBbPb/GWJxxzXJlEvBalK60rm8DzelQZZOkWigbOYXbBzPS55/GgWNWCuoL
fxCLGoyW0UUSrXNetKYM3q05MZW8nUE3u6YrDUBn5yJlZ3BqrlK6Dz02ZP5JwCl2
Uksc4ACBvjdR/59g4cq3IlTzQeMUkdy2nHVXyaqP1f5irnj8Itn+JsXGWn6bEtdP
uJcWvzIiPv4Y3+NMRRjulbx+QLkxjnwSIzgUws86BufZCdpTGgDCpyY2PJOAOo3+
+7eyvTS1GAzi5O762nY97bJNZnlZ9Exhad5Hvsw2pWrXJ31t4OVJOloHADAfqNC/
sfPBtZcGg5GoQby2hzPR4pkX1tZW
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:25:53 2026 by rpki-client