Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39057/giisuVrIeNBqgAb-eLDOsJUXS9k.roa
File:                     giisuVrIeNBqgAb-eLDOsJUXS9k.roa (raw, json)
Hash identifier:          6rqLhMNxTJRn/WHCq1uHMfuY1qoKLsadLrptr02Ou0k=
Subject key identifier:   82:28:AC:B9:5A:C8:78:D0:6A:80:06:FE:78:B0:CE:B0:95:17:4B:D9
Certificate issuer:       /CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627
Certificate serial:       23
Authority key identifier: 38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/giisuVrIeNBqgAb-eLDOsJUXS9k.roa
Signing time:             Sun 01 Mar 2026 01:35:44 +0000
ROA not before:           Sun 01 Mar 2026 01:35:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131984
IP address blocks:        2001:df6:580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627
        Validity
            Not Before: Mar  1 01:35:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8228ACB95AC878D06A8006FE78B0CEB095174BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:92:15:58:87:9c:5c:08:c5:70:0a:23:d3:
                    f9:20:90:b4:80:99:c1:3f:ca:6a:26:37:fc:cd:35:
                    c9:02:1e:be:e3:18:93:f8:79:84:01:3d:d6:66:4d:
                    03:61:4a:0e:8a:71:28:ec:68:0e:8d:70:96:3e:01:
                    d7:de:2d:30:5f:70:2d:44:14:0e:fb:0d:08:75:58:
                    e0:75:48:8b:97:78:54:4c:76:ff:2a:71:89:f5:17:
                    c4:fb:26:3a:fa:3d:13:96:8f:b1:5b:aa:87:89:bd:
                    39:53:5d:ef:8d:6b:b0:94:b5:9d:32:ab:de:da:84:
                    09:74:b6:d7:27:b4:d6:32:b6:92:11:00:cd:f9:a7:
                    b8:dc:de:13:70:62:cb:f4:b4:57:c4:fd:6f:70:80:
                    7b:3f:32:16:c5:b4:c0:bc:29:9b:83:87:82:ae:0b:
                    44:a4:f4:ea:42:37:2b:cd:a0:a5:39:37:e3:86:9b:
                    ec:2c:7e:2a:39:8a:14:42:b6:a8:01:49:d5:7e:5b:
                    a3:87:e2:83:68:bc:56:86:60:e0:0b:1f:52:05:09:
                    4d:83:c1:2e:dc:23:9a:16:66:a0:50:e6:26:92:a7:
                    88:db:a7:b3:18:85:46:b0:50:0f:91:6e:1f:a5:b2:
                    8e:60:61:17:15:32:e9:72:3c:65:b0:40:df:fa:81:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:AC:B9:5A:C8:78:D0:6A:80:06:FE:78:B0:CE:B0:95:17:4B:D9
            X509v3 Authority Key Identifier:
                keyid:38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/giisuVrIeNBqgAb-eLDOsJUXS9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:580::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:dd:2e:6a:bb:9a:c6:49:b3:76:db:eb:85:90:f2:80:b8:
         fb:62:73:5e:9e:71:11:28:5c:c0:21:89:bb:84:51:4d:38:9b:
         89:c1:53:4f:85:e1:99:be:71:d5:55:e4:c9:c3:ac:69:43:34:
         60:8b:ac:1b:0b:dd:bd:dc:cd:9e:9b:17:24:e6:a1:52:98:e2:
         07:70:be:4b:04:32:d0:00:74:a0:a4:b5:10:2d:4c:51:70:e8:
         2d:4d:dd:a9:09:3f:72:d1:93:15:24:37:17:92:1a:4a:60:c2:
         d0:7f:19:75:a0:52:d0:8b:a0:82:75:5c:a5:03:70:c0:ef:0b:
         5e:aa:1e:81:bd:38:ea:7b:f7:de:65:cf:be:d7:1c:b9:75:56:
         26:ce:04:dc:b5:da:4a:86:72:5c:ff:0b:34:2c:8c:55:80:76:
         ee:bb:e6:5f:46:77:e4:30:3b:95:78:f6:c0:4a:a8:0b:7a:c9:
         74:da:19:d8:32:92:8d:21:f7:8a:59:ed:fa:6e:54:b3:8e:5c:
         c9:9d:c0:ae:ac:6d:9d:ce:8a:54:a0:4d:73:37:63:fd:82:2c:
         23:00:12:15:2e:57:a2:5f:68:df:8f:97:10:55:bc:20:48:7d:
         36:92:6e:09:d3:d1:8f:47:52:ed:75:65:79:3d:1f:98:f7:57:
         66:0c:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:48 2026 by rpki-client