Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30409/eeJQG9PczPP2uTJY0ENS8zx8Z8o.roa
File:                     eeJQG9PczPP2uTJY0ENS8zx8Z8o.roa (raw, json)
Hash identifier:          Ezp8IP0ugZ293SeyjFXYzjpEBPkQsrfJNMCt1Gsw/40=
Subject key identifier:   79:E2:50:1B:D3:DC:CC:F3:F6:B9:32:58:D0:43:52:F3:3C:7C:67:CA
Certificate issuer:       /CN=6084C82997BC86365F5318867EFFB82561955474
Certificate serial:       37
Authority key identifier: 60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/eeJQG9PczPP2uTJY0ENS8zx8Z8o.roa
Signing time:             Tue 31 Mar 2026 08:25:27 +0000
ROA not before:           Tue 31 Mar 2026 08:25:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146984
IP address blocks:        2400:b420::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6084C82997BC86365F5318867EFFB82561955474
        Validity
            Not Before: Mar 31 08:25:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=79E2501BD3DCCCF3F6B93258D04352F33C7C67CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:64:26:a3:8b:0f:ee:69:14:f4:46:03:b4:
                    24:a2:53:e7:6c:20:a1:d0:57:4f:37:a1:c9:51:3f:
                    49:c7:cd:bb:8b:d3:d4:f8:4f:13:4c:0b:6a:43:cb:
                    fd:f1:c9:20:0f:a2:18:d6:43:c8:ae:5d:87:1a:ee:
                    cc:fa:60:73:c9:73:99:7f:88:a9:56:4c:4f:64:d9:
                    d0:74:be:e0:f0:b5:a2:71:c1:50:ef:12:74:11:59:
                    c5:16:03:21:a8:ef:02:9b:71:31:ad:1c:71:8d:06:
                    8d:0e:2d:00:eb:7d:bd:99:1c:4c:76:b4:06:a6:0a:
                    94:06:78:6d:c7:66:2c:f4:63:a5:ba:42:3b:08:04:
                    92:af:ff:d8:70:21:db:4e:c3:cc:ee:4d:bb:1f:2f:
                    d2:de:e1:2a:68:fa:42:61:ab:48:ac:5c:57:4f:c6:
                    6c:7e:1e:9e:fa:7d:4e:1b:10:58:b7:8a:f6:48:97:
                    63:5e:9e:b9:ec:bc:3b:5c:79:ac:f1:92:b5:45:de:
                    81:bf:d1:26:76:62:e5:b6:8d:b3:0a:d4:11:f3:04:
                    b3:42:42:7b:11:49:ab:df:7b:6c:bf:a7:d5:97:bb:
                    0b:df:68:b4:35:63:90:25:67:e5:d6:5b:dc:ef:68:
                    f9:b4:05:ad:c7:d7:fe:10:ab:79:1f:e2:79:4a:c9:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:50:1B:D3:DC:CC:F3:F6:B9:32:58:D0:43:52:F3:3C:7C:67:CA
            X509v3 Authority Key Identifier:
                keyid:60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/eeJQG9PczPP2uTJY0ENS8zx8Z8o.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:b7:b8:a3:d5:29:49:d5:ec:49:0d:5d:8d:1f:86:d2:95:
         4a:ae:b7:b5:37:c6:b5:6c:28:6b:7b:2e:04:54:c4:e8:17:7b:
         b7:a7:9c:96:d2:9f:ad:6c:16:9f:8f:e6:6f:8c:7b:e8:2a:54:
         2a:98:fe:47:50:4a:13:e0:63:bc:87:c2:7a:93:6e:9a:16:7d:
         59:4c:b7:2a:f5:26:fd:d1:c2:47:c2:3c:32:e6:4e:7a:8e:84:
         b3:f3:11:ff:aa:3e:9c:7f:cc:ea:86:5b:02:ba:39:7a:4f:9d:
         e7:d0:f2:5b:1d:72:4f:08:55:cd:6e:a4:8a:9f:c5:80:0a:a3:
         1f:6e:d7:51:ef:a4:b4:ff:e7:e2:da:34:7a:48:61:ad:72:11:
         a3:45:8e:78:4f:da:62:66:c6:9c:11:07:fb:85:79:b5:d5:d5:
         25:90:6e:a1:43:8c:33:5a:8d:77:08:a6:af:f5:62:d1:6c:f1:
         a1:da:c1:3d:2d:93:75:3a:41:9c:3a:05:d9:d8:6c:09:9d:0e:
         18:8b:79:28:ac:d0:20:82:ce:e9:df:7e:03:ff:b7:f5:6f:50:
         52:5b:97:dc:07:8d:27:29:2b:1e:5d:2f:06:e0:89:05:b5:89:
         1b:36:db:41:19:c9:e9:4c:b4:be:60:7c:9e:eb:a0:25:1d:7f:
         8b:e8:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:21 2026 by rpki-client