Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/bWuuNE4ruegcjQfeVe4JlgP6PM8.roa
File:                     bWuuNE4ruegcjQfeVe4JlgP6PM8.roa (raw, json)
Hash identifier:          OaIdR/+8uw6ih4cEzKpxL9J47wBgnPcjY/DYtlZ+J2g=
Subject key identifier:   6D:6B:AE:34:4E:2B:B9:E8:1C:8D:07:DE:55:EE:09:96:03:FA:3C:CF
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       56
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/bWuuNE4ruegcjQfeVe4JlgP6PM8.roa
Signing time:             Tue 31 Mar 2026 08:11:23 +0000
ROA not before:           Tue 31 Mar 2026 08:11:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Mar 31 08:11:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6D6BAE344E2BB9E81C8D07DE55EE099603FA3CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:c1:b3:b8:3c:8f:67:8e:1d:66:e6:4b:ab:
                    20:34:c7:db:32:c1:59:f9:a2:7e:2a:70:13:9b:40:
                    69:dd:d1:9e:53:aa:41:7a:90:38:10:8b:01:43:8f:
                    44:71:ba:90:d2:06:39:2e:a9:a4:50:85:ee:46:9f:
                    19:ed:41:89:60:5c:e9:2a:0b:f5:a8:3c:81:b5:25:
                    fd:bb:2a:59:eb:f0:7b:12:77:57:a8:6e:da:8f:66:
                    0a:7a:c9:a5:55:a3:fc:d0:80:e4:a2:19:16:f1:19:
                    9e:86:13:14:05:7b:5c:17:fc:9e:84:f8:24:98:68:
                    32:b0:da:5c:9d:78:c4:0a:7e:d9:87:e8:71:35:3b:
                    76:2e:b9:5d:70:4a:23:49:f3:b2:71:99:05:52:89:
                    02:25:16:93:97:55:f6:83:82:84:ad:dd:2d:34:c7:
                    f3:b0:6f:38:a5:b4:bd:cc:84:b7:83:b8:b0:5b:38:
                    fe:bd:9d:d0:dd:45:32:ae:ae:5c:c0:98:ae:10:45:
                    b9:e3:0e:e9:69:79:43:cf:c1:ef:4a:bb:36:84:a6:
                    4d:16:ac:60:2f:a9:1d:5c:a1:58:c2:95:3b:9b:65:
                    8a:a3:ec:82:92:03:45:ab:b0:26:1e:de:38:ed:54:
                    54:4b:d0:22:b9:29:93:d6:66:9e:3f:c9:57:d3:a1:
                    4e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:AE:34:4E:2B:B9:E8:1C:8D:07:DE:55:EE:09:96:03:FA:3C:CF
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/bWuuNE4ruegcjQfeVe4JlgP6PM8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:ec:88:97:12:36:73:79:54:59:c7:06:1f:7c:95:1e:89:
         54:a9:be:95:73:43:98:ef:6c:db:b4:7e:29:69:a9:f8:3c:c1:
         8c:e4:c8:ce:69:3f:95:5a:51:d1:99:f0:16:d8:57:fd:9e:65:
         0e:0b:a9:cd:cf:c8:b3:a0:57:07:28:0c:e5:88:81:5e:e4:fd:
         a8:b9:87:a1:9e:aa:c7:c2:9c:be:6f:ef:f0:f3:88:e4:92:c8:
         07:d2:55:b5:bc:1c:f5:19:da:d3:57:cd:20:f8:56:0c:2e:7e:
         7b:53:2c:52:f6:48:7a:0e:03:4c:c9:13:d6:8d:4c:a0:ea:d7:
         b0:61:c3:0b:38:0c:75:ee:d5:f0:7f:2e:2e:a2:9a:d0:7b:05:
         b0:69:0b:27:d9:49:5b:e5:a6:e8:0c:a8:ab:d3:88:87:ef:a3:
         b9:d3:4f:7e:49:1a:82:5f:4c:c3:d3:a3:1c:a5:14:18:fb:a3:
         32:4d:78:87:fc:52:a6:37:ca:11:5a:ce:fc:c5:4a:a5:f1:ea:
         a6:02:6d:98:8d:2a:c2:73:30:67:b7:15:29:85:9c:8c:6a:40:
         9c:5d:7b:40:cd:40:dc:04:4c:d9:83:7f:4a:ca:f3:af:ab:eb:
         1f:ce:ba:3a:1d:61:da:40:60:0e:88:b0:90:18:1b:f2:05:02:
         d3:30:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:12 2026 by rpki-client