Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/SNbmEXybr0a1ryFs5iOAK5InhEU.roa
File:                     SNbmEXybr0a1ryFs5iOAK5InhEU.roa (raw, json)
Hash identifier:          7XPWAWTr8/C1dS0CU3NI39Ftbq/ySpt44O0Ydd6O9DI=
Subject key identifier:   48:D6:E6:11:7C:9B:AF:46:B5:AF:21:6C:E6:23:80:2B:92:27:84:45
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       58
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/SNbmEXybr0a1ryFs5iOAK5InhEU.roa
Signing time:             Tue 31 Mar 2026 08:11:25 +0000
ROA not before:           Tue 31 Mar 2026 08:11:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Mar 31 08:11:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=48D6E6117C9BAF46B5AF216CE623802B92278445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:dc:5a:eb:3e:14:10:3c:76:62:7c:13:77:
                    b7:c2:15:f3:f2:37:18:af:e9:fb:ce:94:5b:8d:46:
                    9e:6c:c4:5c:4b:c0:7b:9b:69:54:06:d2:5b:f4:2d:
                    6d:2f:b6:91:44:a0:ac:7f:16:51:52:7e:ad:38:45:
                    80:9b:b6:2e:33:a2:c8:ab:9c:e8:77:a5:cb:ce:f5:
                    ca:69:ba:a8:14:9b:b6:cd:88:bb:33:6d:c9:1f:e5:
                    ce:61:09:71:f2:57:74:a5:9e:1c:7b:f5:25:1b:79:
                    a0:6b:e5:d2:74:94:98:4c:40:19:44:4e:6b:5c:08:
                    39:2a:cf:e1:28:57:35:6d:2f:67:03:f7:36:f7:6c:
                    83:1a:35:0f:22:61:64:65:b2:79:02:f9:80:bd:50:
                    3f:62:76:2a:3d:2a:01:73:3f:75:c9:5c:fa:88:cd:
                    8f:16:8d:b0:5e:43:5d:7a:f4:df:51:f4:39:d8:e1:
                    ca:b0:e9:15:ef:df:cf:13:51:68:ae:54:b4:2c:e3:
                    0a:16:f4:20:38:7e:d4:c7:d4:94:aa:95:43:18:81:
                    cd:8f:12:6b:51:ee:b0:b0:18:1c:24:8e:48:a4:65:
                    ab:a0:92:32:ea:9f:03:13:86:06:b6:99:15:d3:c5:
                    14:76:ea:c1:d4:5b:06:cf:09:3d:a6:bb:68:90:6a:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D6:E6:11:7C:9B:AF:46:B5:AF:21:6C:E6:23:80:2B:92:27:84:45
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/SNbmEXybr0a1ryFs5iOAK5InhEU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:69:7b:95:50:62:93:e5:7f:c6:e3:ef:5a:a3:bc:75:c4:
         26:ee:a2:13:1d:cd:ab:46:af:7c:af:f2:5c:a7:85:d0:f8:f5:
         37:ae:3e:45:3a:e2:46:a9:4c:27:6c:88:18:af:e3:e1:be:93:
         9a:b3:46:44:15:b9:bd:c2:b4:4a:dd:ff:2b:a4:03:e7:92:ab:
         93:2e:3f:0f:c5:9e:49:00:f4:e6:aa:84:c8:d0:08:bd:41:53:
         a6:6e:47:f7:c0:5b:f6:72:74:ac:ee:d2:a8:de:a9:dc:f5:d2:
         81:67:5e:bc:88:aa:fd:3b:25:dc:19:43:04:81:77:9e:3e:3a:
         58:9a:43:e4:7f:ed:ea:f5:17:2e:ba:9a:ed:31:bb:62:e2:82:
         13:dd:e1:3a:47:af:22:7a:7b:40:a6:51:3f:d2:ea:e4:c9:14:
         fc:48:19:fb:09:1b:67:47:58:8f:79:37:5e:d1:b5:42:31:30:
         15:0c:58:a1:c4:6a:87:f7:13:07:75:d4:ec:ae:40:37:eb:94:
         ba:5b:e7:61:ea:4d:61:46:67:d7:75:76:a9:ea:19:1f:7d:4f:
         9d:a0:3d:06:3d:6f:d5:0a:86:29:05:3e:79:30:e0:96:f5:b8:
         29:16:1a:9e:f3:c0:49:f8:62:5c:ea:43:86:f7:8f:b0:67:b0:
         b9:43:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:57 2026 by rpki-client