Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30382/MV4UHYp0SErLZjB0QC1OBrqurCM.roa
File:                     MV4UHYp0SErLZjB0QC1OBrqurCM.roa (raw, json)
Hash identifier:          f5UN6afpusqU6VPpeEMj+JFo/YVpi5KVM6UaZAE9kOw=
Subject key identifier:   31:5E:14:1D:8A:74:48:4A:CB:66:30:74:40:2D:4E:06:BA:AE:AC:23
Certificate issuer:       /CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
Certificate serial:       24
Authority key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/MV4UHYp0SErLZjB0QC1OBrqurCM.roa
Signing time:             Thu 11 Jun 2026 04:30:35 +0000
ROA not before:           Thu 11 Jun 2026 04:30:35 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     152867
IP address blocks:        2406:2800:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 16:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
        Validity
            Not Before: Jun 11 04:30:35 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=315E141D8A74484ACB663074402D4E06BAAEAC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:0a:2c:d3:d9:9a:6e:8d:fc:27:07:84:05:
                    11:af:53:fd:08:db:ad:3a:73:10:64:32:ee:5c:87:
                    0d:d5:fa:43:59:24:c9:52:a1:b1:ad:6f:ab:bf:9b:
                    7f:f1:ab:7c:08:70:2c:76:ad:c6:db:0b:fa:6a:bf:
                    2b:5f:4d:7c:82:60:d0:60:8b:48:18:1a:d0:c3:2f:
                    e7:c3:43:4c:99:a3:de:a7:b4:3a:c9:ed:fd:a3:c0:
                    0e:98:d9:98:9e:8e:6b:49:ea:55:9a:5a:3b:21:57:
                    0f:5a:39:b7:f1:b2:af:a5:46:86:0b:5c:c3:10:11:
                    ef:ae:d4:2d:46:d0:39:3d:11:c9:14:79:e4:14:16:
                    1f:e4:99:62:e6:22:c3:49:e8:dd:73:88:3d:0e:1d:
                    81:93:7a:2a:6d:06:d7:27:3d:18:f3:e0:88:9c:47:
                    5b:a4:f9:e0:f9:e6:37:98:4d:e6:82:1d:11:a2:39:
                    9d:bb:0b:03:2f:85:ec:f6:4e:5a:a9:55:8f:c3:77:
                    3b:f3:fa:53:67:68:f8:39:13:9c:22:81:58:14:fe:
                    03:bb:13:fc:f2:81:74:e8:45:5a:7f:ef:20:0d:bc:
                    49:58:2f:12:89:f1:be:56:98:17:fc:e9:18:a6:36:
                    60:8b:77:f0:a5:82:d1:22:54:e9:47:63:da:9c:d6:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:14:1D:8A:74:48:4A:CB:66:30:74:40:2D:4E:06:BA:AE:AC:23
            X509v3 Authority Key Identifier:
                keyid:8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/MV4UHYp0SErLZjB0QC1OBrqurCM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2800:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:af:7b:26:46:0d:80:1c:96:6c:eb:d2:95:57:a1:ad:30:c2:
         a0:36:2a:a5:1e:5e:52:d6:f9:14:ca:81:22:19:05:0c:b7:f0:
         9f:41:96:76:b9:a0:72:18:3d:ce:0e:bf:a6:f6:42:53:8d:15:
         82:4d:99:8a:96:18:2f:de:63:73:8c:d3:51:cc:77:b2:27:83:
         94:21:f1:e6:b8:1a:de:56:02:f0:db:1f:ca:42:ed:49:b2:2c:
         71:ab:a2:ed:f5:ce:a5:8b:1a:49:bb:a6:75:96:36:4d:0f:8a:
         fd:a6:45:bd:68:fb:38:f4:1d:4b:b8:57:86:35:15:e0:47:8f:
         18:35:cd:de:51:0b:3c:c0:c6:76:f4:b1:d8:bb:92:0e:51:33:
         d2:5f:19:3d:c0:79:c5:12:d5:43:b7:35:af:e8:e4:47:ee:f8:
         25:fa:47:c8:e3:e6:de:9a:9a:dd:96:28:df:1b:d1:09:56:2e:
         6a:0e:ea:ac:18:a3:8b:a9:31:51:dc:f8:c0:c6:9f:c5:a5:1c:
         c2:b0:bc:36:98:ef:2a:6a:28:b9:76:49:0a:cf:69:e6:74:70:
         ec:a4:f5:1b:f7:9d:79:85:23:1d:af:5b:ba:46:1f:7c:d1:47:
         f6:23:b4:5c:1a:04:34:a4:e6:28:03:1e:04:32:f7:d0:4b:d6:
         61:59:bd:5b
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDJC
NjI5QjI3Q0I0Q0U2Qjg1MEI2MTkwMjFDRUU1M0IxRDA5NUE3MB4XDTI2MDYxMTA0
MzAzNVoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMzE1RTE0MUQ4QTc0NDg0
QUNCNjYzMDc0NDAyRDRFMDZCQUFFQUMyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPmCizT2ZpujfwnB4QFEa9T/QjbrTpzEGQy7lyHDdX6Q1kkyVKh
sa1vq7+bf/GrfAhwLHatxtsL+mq/K19NfIJg0GCLSBga0MMv58NDTJmj3qe0Osnt
/aPADpjZmJ6Oa0nqVZpaOyFXD1o5t/Gyr6VGhgtcwxAR767ULUbQOT0RyRR55BQW
H+SZYuYiw0no3XOIPQ4dgZN6Km0G1yc9GPPgiJxHW6T54PnmN5hN5oIdEaI5nbsL
Ay+F7PZOWqlVj8N3O/P6U2do+DkTnCKBWBT+A7sT/PKBdOhFWn/vIA28SVgvEonx
vlaYF/zpGKY2YIt38KWC0SJU6Udj2pzWejUCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBQxXhQdinRISstmMHRALU4Guq6sIzAfBgNVHSMEGDAWgBSNK2KbJ8tM5rhQthkC
HO5TsdCVpzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODIvalN0aW15ZkxUT2E0VUxZWkFoenVVN0hRbGFjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalN0aW15ZkxUT2E0VUxZWkFoenVV
N0hRbGFjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzgyL01WNFVIWXAwU0VyTFpqQjBRQzFPQnJxdXJDTS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBigAYDANBgkqhkiG9w0BAQsF
AAOCAQEAE697JkYNgByWbOvSlVehrTDCoDYqpR5eUtb5FMqBIhkFDLfwn0GWdrmg
chg9zg6/pvZCU40Vgk2ZipYYL95jc4zTUcx3sieDlCHx5rga3lYC8NsfykLtSbIs
caui7fXOpYsaSbumdZY2TQ+K/aZFvWj7OPQdS7hXhjUV4EePGDXN3lELPMDGdvSx
2LuSDlEz0l8ZPcB5xRLVQ7c1r+jkR+74JfpHyOPm3pqa3ZYo3xvRCVYuag7qrBij
i6kxUdz4wMafxaUcwrC8NpjvKmoouXZJCs9p5nRw7KT1G/edeYUjHa9bukYffNFH
9iO0XBoENKTmKAMeBDL30EvWYVm9Ww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:53 2026 by rpki-client