Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/PhnDoTt-f2LYItuvomMrJkcOYSE.roa
File:                     PhnDoTt-f2LYItuvomMrJkcOYSE.roa (raw, json)
Hash identifier:          OA7v/fwkcqF+IHRVkd6oCRc+rfXl2I3RK9Frb/z9MB0=
Subject key identifier:   3E:19:C3:A1:3B:7E:7F:62:D8:22:DB:AF:A2:63:2B:26:47:0E:61:21
Certificate issuer:       /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial:       32
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/PhnDoTt-f2LYItuvomMrJkcOYSE.roa
Signing time:             Tue 31 Mar 2026 08:34:31 +0000
ROA not before:           Tue 31 Mar 2026 08:34:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131976
IP address blocks:        2406:e240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
        Validity
            Not Before: Mar 31 08:34:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E19C3A13B7E7F62D822DBAFA2632B26470E6121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:28:c2:14:7b:f9:28:8d:52:fe:15:f2:ac:
                    94:f8:f0:4b:df:04:44:f8:87:5d:3e:91:3c:65:45:
                    10:59:db:7c:fa:06:17:a6:73:9d:c8:58:dc:53:d6:
                    39:a1:15:d0:58:14:ad:1d:b3:df:94:d9:9b:4e:21:
                    96:16:f3:37:9a:0a:4b:90:45:af:08:ee:5e:0c:f1:
                    c4:8d:69:57:8f:7c:c0:9f:7f:9f:bb:01:68:46:5e:
                    c9:20:94:23:81:69:e0:2c:cf:c3:f4:2f:a4:cc:50:
                    8f:c5:88:48:b7:99:eb:10:1d:71:11:0c:88:3f:99:
                    34:01:4e:55:5f:75:57:cf:0e:1d:c8:6f:39:2c:1b:
                    07:7a:d0:07:51:89:53:bc:d5:12:65:23:4a:29:ea:
                    e7:70:3b:9d:5a:22:37:3a:9d:22:26:cf:e5:d0:aa:
                    83:47:16:31:28:39:96:19:fb:00:fb:71:c7:56:5e:
                    9f:e3:a6:5a:f0:f9:d3:48:6b:9a:1b:b6:5f:b4:b8:
                    57:87:18:9d:2c:5c:78:8c:71:1c:1e:1b:40:d2:ec:
                    7a:b9:e7:90:b5:e3:85:23:fe:1a:0e:f0:c1:6f:68:
                    8d:eb:df:dc:a5:53:2f:de:08:04:0f:4e:34:2a:58:
                    a4:b1:33:2e:17:84:99:c1:9a:de:9a:33:8d:5d:71:
                    2f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:C3:A1:3B:7E:7F:62:D8:22:DB:AF:A2:63:2B:26:47:0E:61:21
            X509v3 Authority Key Identifier:
                keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/PhnDoTt-f2LYItuvomMrJkcOYSE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e240::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:1f:98:61:5e:a5:f1:87:f2:a8:b7:69:68:de:70:d2:7f:
         56:ae:2d:b1:6b:00:ed:9d:7c:23:21:3c:fa:d0:f2:88:21:f3:
         2a:4d:f6:2d:3a:3c:78:df:3b:da:76:97:46:fc:79:08:9a:96:
         b4:ee:db:d7:c2:d0:88:c4:44:d9:ab:44:db:68:97:ba:48:9f:
         3e:55:9e:0e:7e:9e:43:d4:a5:b2:56:05:1f:25:e4:9b:32:4d:
         8a:48:be:6c:9f:89:52:02:7e:58:d0:99:8d:1f:b9:14:26:51:
         5e:57:e0:38:c7:80:52:00:aa:4a:16:a4:b7:7a:eb:8f:05:61:
         a0:ec:d0:e6:fc:d4:d8:04:2a:bf:8c:51:26:9d:41:25:78:00:
         47:9f:b8:73:aa:2e:17:c5:a1:39:50:8f:5e:a9:c6:56:7e:1a:
         53:41:69:f3:98:c2:e0:93:4f:42:cf:be:97:a9:07:eb:eb:17:
         85:2d:09:63:eb:ec:ca:3e:e5:39:d3:8a:29:b3:07:a9:fb:a2:
         3b:cc:e0:35:11:df:a0:c3:9a:a6:d7:e4:9f:7f:d8:c3:18:42:
         e7:af:da:b7:6e:16:d2:aa:c7:84:62:91:26:34:cc:11:24:3d:
         dc:74:e7:55:ed:8c:88:21:ce:3a:86:2d:d8:4d:69:c7:4b:1e:
         a2:f8:02:96
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzk4
MzdBRDkzRDkyNDcxRTIwMjREMDZFQ0ZEQ0FFRThGNjREMUMzMB4XDTI2MDMzMTA4
MzQzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0UxOUMzQTEzQjdFN0Y2
MkQ4MjJEQkFGQTI2MzJCMjY0NzBFNjEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCbKMIUe/kojVL+FfKslPjwS98ERPiHXT6RPGVFEFnbfPoGF6Zz
nchY3FPWOaEV0FgUrR2z35TZm04hlhbzN5oKS5BFrwjuXgzxxI1pV498wJ9/n7sB
aEZeySCUI4Fp4CzPw/QvpMxQj8WISLeZ6xAdcREMiD+ZNAFOVV91V88OHchvOSwb
B3rQB1GJU7zVEmUjSinq53A7nVoiNzqdIibP5dCqg0cWMSg5lhn7APtxx1Zen+Om
WvD500hrmhu2X7S4V4cYnSxceIxxHB4bQNLsernnkLXjhSP+Gg7wwW9ojevf3KVT
L94IBA9ONCpYpLEzLheEmcGa3pozjV1xL/MCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQ+GcOhO35/Ytgi26+iYysmRw5hITAfBgNVHSMEGDAWgBRDmDetk9kkceICTQbs
/cruj2TRwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNzEvUTVnM3JaUFpKSEhpQWswRzdQM0s3bzlrMGNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUTVnM3JaUFpKSEhpQWswRzdQM0s3
bzlrMGNNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzcxL1BobkRvVHQtZjJMWUl0dXZvbU1ySmtjT1lTRS5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBuJAAAAwDQYJKoZIhvcNAQEL
BQADggEBAIhqH5hhXqXxh/Kot2lo3nDSf1auLbFrAO2dfCMhPPrQ8ogh8ypN9i06
PHjfO9p2l0b8eQialrTu29fC0IjERNmrRNtol7pInz5Vng5+nkPUpbJWBR8l5Jsy
TYpIvmyfiVICfljQmY0fuRQmUV5X4DjHgFIAqkoWpLd6648FYaDs0Ob81NgEKr+M
USadQSV4AEefuHOqLhfFoTlQj16pxlZ+GlNBafOYwuCTT0LPvpepB+vrF4UtCWPr
7Mo+5TnTiimzB6n7ojvM4DUR36DDmqbX5J9/2MMYQuev2rduFtKqx4RikSY0zBEk
Pdx051XtjIghzjqGLdhNacdLHqL4ApY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:20 2026 by rpki-client