Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa
File:                     s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa (raw, json)
Hash identifier:          Is19lW2BkXtT8s8kkRU5clYV/rA99sR2dYcH0J2CH7M=
Subject key identifier:   B3:D2:28:51:1B:F6:63:FA:90:B4:41:65:AC:1F:57:CC:99:C1:F8:94
Certificate issuer:       /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Certificate serial:       21
Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa
Signing time:             Tue 31 Mar 2026 08:42:09 +0000
ROA not before:           Tue 31 Mar 2026 08:42:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45691
IP address blocks:        2401:b420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
        Validity
            Not Before: Mar 31 08:42:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B3D228511BF663FA90B44165AC1F57CC99C1F894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:c1:45:27:07:66:16:a3:51:ec:e8:c0:c0:
                    ff:2a:78:bb:6f:3d:b3:60:7e:f5:9c:85:e3:d2:03:
                    d9:8e:e2:28:1a:f2:3f:0e:89:3a:b7:a2:64:26:1b:
                    25:b0:e6:66:ce:f6:4d:55:dd:de:f6:05:da:17:31:
                    00:70:e7:ec:c1:c3:8c:60:5a:eb:67:ff:52:92:b4:
                    ec:d5:30:56:63:5d:d7:d1:4a:06:1c:4d:8c:53:27:
                    5b:f2:56:98:31:81:ed:37:71:2c:2f:53:b1:ff:93:
                    a3:e7:ed:29:b0:e0:fc:17:e7:64:4f:e6:58:16:a9:
                    2c:3d:16:89:0b:31:89:e5:44:be:e5:d2:d3:6c:b7:
                    a2:87:62:5c:4c:87:ff:dd:d7:22:97:7f:af:15:0c:
                    88:b1:9f:09:50:dd:97:2b:5c:73:f9:40:3d:97:cb:
                    18:c7:3e:dd:4f:ec:ca:6b:6c:42:6c:4e:15:d9:da:
                    2e:67:2c:01:d8:9f:10:00:f5:be:1e:83:d8:86:94:
                    a0:1a:61:8c:b4:d0:78:7a:56:5e:05:4f:9d:3e:78:
                    91:5a:bb:d2:be:9b:9e:2f:6d:a8:14:e8:8b:18:d5:
                    07:9d:d3:03:04:5e:f8:f4:90:b3:dc:24:69:b6:06:
                    c9:dc:24:6d:10:8a:81:29:f4:e9:68:a9:08:92:b3:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:28:51:1B:F6:63:FA:90:B4:41:65:AC:1F:57:CC:99:C1:F8:94
            X509v3 Authority Key Identifier:
                keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:10:34:00:f6:f8:95:41:f0:ba:f4:1b:c8:b7:89:a1:3b:
         f5:fb:fe:ae:cf:2c:f2:31:65:f4:b8:b2:7d:c8:be:e8:7c:84:
         fd:0e:91:bd:3a:b1:9a:9c:89:1f:3c:50:08:a6:8d:65:02:15:
         a4:46:c7:24:9d:c2:8d:84:ab:9e:67:9c:db:54:9a:57:8a:8d:
         96:a8:a0:10:53:42:88:c9:af:ea:f0:a1:2f:72:c7:8f:2a:2a:
         2a:24:5f:69:08:3d:50:25:30:6a:03:44:25:06:aa:af:63:04:
         84:24:73:65:3f:37:eb:56:35:bf:90:a0:90:ca:73:2e:b3:e8:
         e1:66:ad:ff:26:50:bc:b5:4d:e2:c8:b8:c7:be:82:e3:b5:ff:
         a9:da:a4:87:94:48:1d:13:c7:c2:1b:2c:dc:99:16:b2:93:a8:
         45:5e:d0:79:6b:d2:f7:d6:be:e3:1d:df:18:1f:0e:c3:5c:1f:
         e8:6f:cd:b8:09:64:a5:be:33:81:80:15:a6:82:a7:26:f7:31:
         4f:46:66:b8:9b:66:da:62:b9:1f:f3:12:a4:19:7f:c7:35:89:
         bd:ba:09:f6:88:8b:5f:7e:0e:77:3d:3d:b8:86:78:ef:33:4a:
         ab:52:e3:59:6d:5a:2f:d3:b4:36:4b:a9:ce:ed:e8:23:02:6f:
         92:19:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:35 2026 by rpki-client