Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/_5dO5wbuw6XBDZsMs0Jv-WIqpDI.roa
File:                     _5dO5wbuw6XBDZsMs0Jv-WIqpDI.roa (raw, json)
Hash identifier:          pa1p+HOXEYgktk+NXPs6ytYuYBO2abGp7Qgc2iEWCjg=
Subject key identifier:   FF:97:4E:E7:06:EE:C3:A5:C1:0D:9B:0C:B3:42:6F:F9:62:2A:A4:32
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       18
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/_5dO5wbuw6XBDZsMs0Jv-WIqpDI.roa
Signing time:             Tue 31 Mar 2026 08:45:27 +0000
ROA not before:           Tue 31 Mar 2026 08:45:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152858
IP address blocks:        2401:b720::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: Mar 31 08:45:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FF974EE706EEC3A5C10D9B0CB3426FF9622AA432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:d2:19:e9:7c:22:86:f5:4b:b3:ca:77:8a:
                    de:a3:5e:bf:93:8b:27:34:96:bd:73:0f:a5:6b:65:
                    98:d7:77:9f:b9:69:74:cc:b7:0e:b0:09:af:a9:f6:
                    b0:a4:d4:81:c2:c7:71:55:f7:d0:43:33:84:0e:cb:
                    e2:39:dc:17:76:05:06:7d:a5:5d:2f:eb:75:47:6b:
                    b4:2b:1b:81:38:c7:14:bc:60:41:41:8d:6c:c6:6e:
                    00:81:f8:8d:64:76:f4:ee:1f:17:9c:92:d5:9a:93:
                    ec:00:de:23:6f:1f:bd:63:fb:a7:eb:cf:c7:fc:1f:
                    a4:dd:66:16:63:3f:5a:3b:7f:17:28:1e:c3:a4:47:
                    7d:32:f0:6e:f9:84:aa:69:d2:81:17:99:86:8e:ab:
                    75:6e:80:f4:0d:16:37:46:2b:57:ba:1e:4d:d5:f3:
                    f3:1a:85:9e:88:3a:a9:7c:97:2a:19:76:d1:02:06:
                    82:f7:1e:fe:d4:14:0b:a4:09:f4:2c:d1:0b:40:34:
                    58:08:c7:73:d6:fd:bd:af:18:af:2d:c9:12:a6:d6:
                    98:61:a5:32:0c:82:e4:f4:47:22:76:ce:bd:3f:4d:
                    0d:9d:20:74:8f:49:ec:3a:c5:b0:3c:d4:07:a3:d7:
                    8a:d6:75:4c:10:42:5a:8a:21:73:52:07:be:b8:73:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:4E:E7:06:EE:C3:A5:C1:0D:9B:0C:B3:42:6F:F9:62:2A:A4:32
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/_5dO5wbuw6XBDZsMs0Jv-WIqpDI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b720::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:6d:05:8c:22:62:19:fe:93:84:02:c9:44:3a:1e:54:87:
         72:67:d8:98:40:fd:56:1c:a8:ed:23:8f:4e:04:7a:bb:82:41:
         a4:6e:a3:3f:53:19:ea:36:7a:f7:c9:2c:1e:58:de:37:0a:30:
         16:12:91:98:15:87:ca:5d:ad:f9:94:38:e1:bd:e6:3a:fb:18:
         98:cd:1b:8a:40:68:f8:b5:5a:41:1a:5a:d2:08:a2:97:57:d6:
         d1:fa:3a:79:02:ef:4a:f6:bf:7e:54:1b:25:5a:53:72:0e:16:
         76:fd:ef:a5:27:7c:a8:51:c8:65:e8:e5:72:7a:25:00:2c:6a:
         07:a0:97:9b:d2:d8:62:9a:a4:78:41:6e:66:61:f9:cf:b0:c2:
         11:87:92:b7:ee:f7:35:cf:74:13:0d:fc:28:8e:69:5f:f7:95:
         4c:af:26:c1:21:43:fe:58:64:67:dc:85:36:75:99:86:ff:65:
         ad:68:90:9e:54:74:bb:a1:57:bb:d6:50:98:dd:ee:e1:f4:04:
         d6:1d:90:51:d3:12:19:1e:2d:18:e5:15:03:3f:93:75:de:2c:
         1e:cf:4f:b3:7d:00:12:06:13:e8:5e:d0:42:5e:ba:a1:a3:bb:
         40:41:3a:6e:0a:33:02:8e:3b:44:8c:aa:da:f7:0d:a9:94:a9:
         07:3d:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:58 2026 by rpki-client