Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8pnu3xbv2BvMvizsvvbZSBMqquQ.roa
File:                     8pnu3xbv2BvMvizsvvbZSBMqquQ.roa (raw, json)
Hash identifier:          PDwUhAr4uqgvkt4VloEB1xry1hoWgxj5LxAhL+Fxbmo=
Subject key identifier:   F2:99:EE:DF:16:EF:D8:1B:CC:BE:2C:EC:BE:F6:D9:48:13:2A:AA:E4
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       5A
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8pnu3xbv2BvMvizsvvbZSBMqquQ.roa
Signing time:             Tue 31 Mar 2026 08:11:26 +0000
ROA not before:           Tue 31 Mar 2026 08:11:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Mar 31 08:11:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F299EEDF16EFD81BCCBE2CECBEF6D948132AAAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:61:0a:07:15:a5:09:30:ef:c6:97:7c:08:
                    88:0e:8f:ae:3e:ea:8d:6d:4c:b4:a7:97:2f:01:b5:
                    78:93:a5:3e:5a:7d:39:3f:78:f9:e3:69:45:1c:8f:
                    eb:d0:40:88:a2:7e:62:0f:44:b3:04:3e:e2:c2:5f:
                    65:d8:65:ee:47:2d:4c:23:9b:12:fd:21:10:fc:c0:
                    d1:df:de:bd:3c:cf:99:c5:47:a6:b3:0d:8e:e1:27:
                    59:5d:e8:fc:5f:c9:e7:31:aa:dc:74:1e:dd:a4:00:
                    92:ab:66:e2:a7:2f:90:d1:b7:45:f1:d6:d3:a2:54:
                    69:7a:e0:4b:bc:4a:87:60:c5:e4:3c:cc:57:be:33:
                    16:49:13:e5:ec:5c:30:a2:5b:81:69:ee:3d:54:13:
                    4a:28:e7:cc:6c:00:7a:13:f5:28:92:2a:f4:34:bc:
                    c5:86:a2:5e:d3:83:d3:84:7f:c0:47:e5:88:5a:1d:
                    13:63:be:9b:0d:15:27:5b:6c:fd:fa:93:00:d9:0d:
                    57:4a:30:c7:b6:0e:11:3d:a0:00:cf:04:59:a7:45:
                    eb:17:9a:6f:6d:42:f1:fd:f8:cb:65:cd:22:d7:6b:
                    09:de:85:33:35:9f:61:ed:f4:0b:32:21:1d:72:d0:
                    02:08:39:b5:11:5b:ee:5a:be:df:54:92:2b:b6:0c:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:EE:DF:16:EF:D8:1B:CC:BE:2C:EC:BE:F6:D9:48:13:2A:AA:E4
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8pnu3xbv2BvMvizsvvbZSBMqquQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:15:96:67:a2:0a:6a:c9:a9:19:9c:86:81:47:b1:b7:29:fa:
         bc:a1:33:b1:be:b1:8b:d3:9f:76:ef:b4:1d:e3:ba:8b:6f:f3:
         59:8a:3e:b8:3c:8f:a0:2d:ea:1c:7e:2a:5c:20:34:79:cd:90:
         b9:f8:43:f2:46:63:f4:a9:d1:5e:2d:3d:51:ec:fa:85:c9:9a:
         a5:fb:34:fd:fc:ee:0f:e5:88:3a:9e:9a:0b:b0:ad:b2:21:5e:
         a4:9e:c6:be:83:eb:a1:23:c3:30:e9:a8:75:a6:6a:d2:cd:bc:
         ad:72:e3:9c:e7:8d:bc:c5:6c:c6:a9:7b:fc:e0:58:bc:3a:48:
         40:48:dc:eb:47:42:11:36:07:65:6a:0f:33:9f:5e:04:92:1e:
         18:3e:61:b2:00:07:63:9a:13:8b:3a:23:40:b5:5b:66:1e:98:
         fe:cf:04:9a:c2:e6:a3:64:cf:b6:75:3c:0b:33:b1:8b:24:38:
         f4:65:ee:ed:3c:27:df:0c:34:04:e5:0a:0f:1f:47:f0:b0:21:
         97:19:7c:c9:17:6d:e4:c2:2f:e7:d2:e2:56:a7:ae:c8:09:65:
         65:a3:f2:53:79:1d:6c:e6:4d:f9:15:ca:58:d0:1a:f2:59:97:
         fd:35:7f:c5:da:7b:4c:fb:ec:65:66:b0:6a:04:90:fe:c1:3b:
         27:49:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:56 2026 by rpki-client