Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30452/8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa
File:                     8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa (raw, json)
Hash identifier:          VfDbMs2JFqAFDe5rTGOwuemwprycjrDCejSIX9LcLb4=
Subject key identifier:   F1:DD:29:0C:F0:E9:F6:38:42:13:B7:05:E9:A1:18:3C:62:BF:CF:64
Certificate issuer:       /CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
Certificate serial:       08
Authority key identifier: B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa
Signing time:             Wed 03 Jun 2026 07:03:19 +0000
ROA not before:           Wed 03 Jun 2026 07:03:19 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        2402:3c60:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
        Validity
            Not Before: Jun  3 07:03:19 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=F1DD290CF0E9F6384213B705E9A1183C62BFCF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:5c:84:e4:71:5c:43:35:02:29:29:45:dd:
                    1c:01:0c:c1:0f:9e:ea:a1:8d:92:90:10:eb:01:c0:
                    13:0e:a1:bf:07:47:66:00:02:e6:a5:15:f2:d6:f7:
                    21:81:c1:3a:02:d0:05:32:96:1b:f0:b1:dd:f0:09:
                    63:e2:05:b1:57:96:1f:ef:39:ea:13:58:50:2c:28:
                    c6:16:65:8f:01:4e:d2:24:ce:bf:26:27:9c:9c:9b:
                    e3:89:ab:96:8c:20:78:db:b2:f4:e8:cb:7c:d9:3d:
                    22:1c:77:ac:10:6f:70:cf:9f:65:e2:e4:6b:d8:f6:
                    c5:e2:7c:8c:e8:c7:a2:52:cf:f8:0f:d9:10:ae:7c:
                    17:e5:00:d2:5a:8c:48:03:66:4b:74:fe:4d:71:6d:
                    bf:a2:55:e2:c3:f9:93:15:c2:fa:c2:e7:0d:4b:0a:
                    cf:ec:f8:8b:5a:bc:be:d0:70:92:0d:d7:74:2f:ac:
                    67:28:d0:93:23:62:44:c8:ca:ac:cc:d2:56:f7:05:
                    bb:81:f4:3b:52:b1:bf:fd:86:19:73:71:39:1f:71:
                    fd:f0:2f:0d:83:76:f4:fd:0a:f0:e0:01:d4:33:8d:
                    04:a3:59:49:c3:b4:a7:17:75:18:b9:8d:58:7c:bb:
                    9a:9f:09:fd:d4:01:36:26:96:df:46:b5:62:5f:73:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:29:0C:F0:E9:F6:38:42:13:B7:05:E9:A1:18:3C:62:BF:CF:64
            X509v3 Authority Key Identifier:
                keyid:B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3c60:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:42:ab:52:cc:c8:59:38:1f:77:2a:59:7c:39:3d:5d:dd:45:
         1f:72:88:64:d6:3b:82:e6:16:15:9e:7f:1d:20:02:26:0d:24:
         f9:49:0e:df:ed:db:52:1c:6b:85:b9:48:64:b6:5b:ee:82:47:
         41:ce:3e:b3:d0:21:28:b4:e8:74:2a:b1:a6:e9:d0:3a:44:1d:
         fb:4a:c6:43:9e:9d:95:bd:00:df:11:61:bb:e1:3f:67:bf:55:
         f5:04:1f:b8:95:43:de:de:53:59:8c:f0:14:72:08:84:d0:3f:
         f1:30:eb:a6:a0:e9:4f:5a:89:d3:fb:bf:89:18:69:05:31:e8:
         35:37:2a:99:0a:43:ac:c2:4e:be:85:96:50:18:75:a5:32:27:
         f9:dc:4a:b1:39:4c:e8:58:30:d3:e8:c3:b4:23:c3:d9:dc:eb:
         07:55:2d:84:d4:4a:b6:e4:7b:05:b0:7b:76:6a:de:14:d4:3f:
         96:a3:1c:13:80:cd:69:19:bf:93:78:fa:ac:1a:57:97:4d:05:
         97:00:fc:82:35:8a:95:3a:84:01:8e:f8:15:9d:de:32:4b:d4:
         32:04:ba:49:c3:89:62:13:0e:83:a2:df:07:d5:18:50:40:ea:
         0c:ea:51:6e:e8:9e:84:42:19:94:68:0e:99:89:4e:19:3d:2a:
         15:3d:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:28 2026 by rpki-client