Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/wcmfcAx46ytMdTJJvU7LdjpaWIQ.roa
File:                     wcmfcAx46ytMdTJJvU7LdjpaWIQ.roa (raw, json)
Hash identifier:          rZIfLMnhqLRS5Mu4p9j4LHi1DSJbU2AXF6ip2gCLLoQ=
Subject key identifier:   C1:C9:9F:70:0C:78:EB:2B:4C:75:32:49:BD:4E:CB:76:3A:5A:58:84
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       5D
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/wcmfcAx46ytMdTJJvU7LdjpaWIQ.roa
Signing time:             Sat 04 Apr 2026 21:27:14 +0000
ROA not before:           Sat 04 Apr 2026 21:27:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58790
IP address blocks:        2401:d20:1060::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Apr  4 21:27:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C1C99F700C78EB2B4C753249BD4ECB763A5A5884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:8c:f3:4d:5a:b6:0e:e1:76:30:27:2a:7f:
                    80:93:30:20:bb:d5:29:1b:49:48:ff:f0:41:22:50:
                    d4:05:47:34:80:46:aa:91:3c:2e:99:58:26:66:9c:
                    a3:b9:1e:f0:70:5e:61:af:6e:b8:9f:57:ab:a0:cb:
                    a5:89:e6:a5:57:60:ac:36:91:59:26:de:ed:21:8d:
                    7e:0d:3c:86:3e:4c:62:60:58:8b:23:6a:28:3b:7b:
                    93:2f:1a:fd:1d:dc:79:97:32:84:9f:8c:d0:43:9a:
                    32:93:0b:8a:99:c3:cf:e0:ad:f0:6f:6d:87:a3:08:
                    2c:21:da:fd:7e:9b:01:8c:72:b2:ec:38:18:49:99:
                    08:01:49:27:54:37:ad:c0:c6:84:f5:0c:9e:0b:63:
                    dc:4a:3a:25:56:69:57:ca:39:07:02:fb:cb:f9:95:
                    00:0f:3d:e6:6f:66:f0:a9:35:dd:25:9e:49:f3:c7:
                    84:bb:a5:de:a5:95:15:ed:aa:88:cf:c2:33:4d:b7:
                    3c:3c:1c:3a:ff:e4:e3:5f:33:bb:a7:7e:c1:83:c3:
                    f7:81:f8:ad:bf:04:f0:15:72:ab:47:4b:46:4d:59:
                    ed:fb:44:44:1e:be:63:07:89:e9:15:44:db:24:84:
                    d0:95:28:ec:a1:6f:c3:55:ed:a2:5c:12:54:b6:a0:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:9F:70:0C:78:EB:2B:4C:75:32:49:BD:4E:CB:76:3A:5A:58:84
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/wcmfcAx46ytMdTJJvU7LdjpaWIQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1060::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:bc:27:aa:fb:bd:d6:47:a9:79:86:6e:0a:5f:db:7b:6d:
         bc:2a:44:cd:dc:a2:1f:42:3e:ee:66:81:d1:9f:d9:8b:8e:b8:
         b6:a3:1c:85:3c:de:3e:51:1f:e3:f5:b7:1f:8a:cf:9b:17:06:
         ef:8f:3e:4e:5c:79:d8:ab:97:25:37:75:5f:e4:af:94:67:6d:
         25:c0:dd:90:83:bf:37:fb:e7:fc:f6:23:db:7b:28:46:9b:35:
         54:3b:f7:55:f9:30:3a:26:ff:d8:fd:9f:31:42:31:56:5d:bc:
         a0:aa:ea:de:6f:b7:cd:99:d0:1a:f7:b8:db:cf:28:d2:86:d9:
         e4:78:7d:d0:af:0b:98:f2:f2:d9:b3:dc:84:65:07:6e:d2:80:
         0d:70:3b:82:da:d4:99:bf:1c:1a:00:a4:2d:17:6d:4e:cb:5f:
         ae:c5:4a:8c:03:f6:57:b7:b1:39:85:14:19:f4:35:56:19:8b:
         cf:6d:37:40:70:7f:c8:21:4f:bf:06:ae:84:b0:e3:c4:63:8e:
         9c:b8:36:b9:56:26:9b:e9:a2:10:b5:d3:df:40:ac:24:ff:04:
         28:2e:97:de:72:75:6f:76:5b:32:f5:df:b2:38:56:78:62:b8:
         5d:a9:fe:56:da:ff:94:a5:e7:1c:ce:bf:09:2a:62:78:e7:86:
         1b:52:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:05 2026 by rpki-client