Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa
File:                     ey-4NwZEgkGSuuxnACJ7btPszbo.roa (raw, json)
Hash identifier:          boeBXRYBJW4QPohP+ENem6i8Hw/7BD1O7FUmlhves5o=
Subject key identifier:   7B:2F:B8:37:06:44:82:41:92:BA:EC:67:00:22:7B:6E:D3:EC:CD:BA
Certificate issuer:       /CN=C1EE9F889CC4D520C7DED001BF901058A50C052C
Certificate serial:       09
Authority key identifier: C1:EE:9F:88:9C:C4:D5:20:C7:DE:D0:01:BF:90:10:58:A5:0C:05:2C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa
Signing time:             Tue 31 Mar 2026 08:47:15 +0000
ROA not before:           Tue 31 Mar 2026 08:47:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58785
IP address blocks:        2001:df3:a700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1EE9F889CC4D520C7DED001BF901058A50C052C
        Validity
            Not Before: Mar 31 08:47:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B2FB8370644824192BAEC6700227B6ED3ECCDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:cb:48:a8:f6:22:08:95:e6:fa:70:fd:b6:
                    34:79:33:c7:e0:2c:36:b3:d5:53:93:e3:f2:b4:27:
                    3d:21:7b:08:47:89:8c:f5:a2:9a:f1:23:1a:b3:fa:
                    59:a3:4f:ad:c4:8c:6d:c0:10:44:51:13:ee:ad:fa:
                    3e:b3:fa:e8:9a:9c:ce:21:c5:6c:9b:5a:bb:74:7d:
                    28:b3:3f:5a:f5:3b:0e:73:a4:3e:c6:28:3f:86:93:
                    71:7d:6e:cd:43:2a:3c:94:e9:c1:c9:f1:fc:f6:06:
                    b9:87:6b:ed:38:f9:d7:56:cd:d1:45:51:24:04:4c:
                    df:6a:7b:22:ee:d6:c6:14:46:0b:5f:5a:3f:c0:1a:
                    d6:1f:90:09:ba:3a:5d:6a:91:70:3e:d5:3a:c3:3d:
                    59:b3:58:eb:3b:c1:12:d9:97:ac:ac:61:41:fa:e2:
                    ef:f1:8e:c7:25:14:d0:4a:08:5a:c6:7f:da:c4:0a:
                    93:9e:4e:9a:b7:8b:95:1d:2c:9e:11:c3:c6:8b:72:
                    90:f3:18:be:99:ae:32:65:2e:d3:37:1a:70:b4:43:
                    2a:5d:3f:1b:5a:74:18:7f:9b:26:7b:1d:a1:dd:fa:
                    e2:0e:02:e8:75:13:61:c7:71:95:29:d8:22:64:46:
                    6d:ae:ac:ce:ef:20:51:2a:71:f0:3d:38:bf:12:5e:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2F:B8:37:06:44:82:41:92:BA:EC:67:00:22:7B:6E:D3:EC:CD:BA
            X509v3 Authority Key Identifier:
                keyid:C1:EE:9F:88:9C:C4:D5:20:C7:DE:D0:01:BF:90:10:58:A5:0C:05:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:a700::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:99:fa:0a:b9:7c:ea:2d:13:94:28:14:0b:4e:9f:99:7a:
         a6:26:36:0c:4e:82:b4:1d:0f:cd:63:44:32:6c:a1:11:84:87:
         87:29:e6:51:a7:dd:21:d7:0a:a4:b3:55:47:bc:75:8a:f7:31:
         43:29:47:fd:7c:67:7e:b4:72:94:d7:a1:3e:40:ee:68:1e:4c:
         b3:a3:3e:3a:12:68:10:2b:ac:78:24:bf:3b:c6:7e:de:98:1b:
         03:a1:35:09:8a:e8:87:78:38:59:ca:fa:56:22:36:7c:2a:9f:
         a9:de:a2:a8:f3:99:2e:79:de:fd:0b:eb:55:eb:9d:93:82:db:
         d9:62:69:66:f1:14:de:b8:29:78:71:c5:53:34:5e:76:22:c0:
         81:b1:14:cf:3f:e1:d2:40:27:70:69:8b:5d:1a:d8:96:8d:26:
         72:1c:91:a8:d8:f4:5e:6b:3b:0e:e8:a2:29:b3:4f:bd:38:a2:
         c5:4b:ad:ba:6a:89:df:56:46:3c:89:e0:51:04:03:70:5f:9e:
         5b:37:43:2a:de:07:fc:cf:63:e3:e7:4d:60:35:8e:52:32:db:
         67:22:7d:ca:f1:30:36:37:33:1f:80:7a:8c:79:ae:e6:f3:70:
         22:53:06:30:0f:fa:d1:10:94:54:62:7a:3f:48:94:87:c3:2e:
         3e:e5:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:37 2026 by rpki-client