Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
File:                     YINK4MGdnaO5wOvzKknn2uQDEbc.roa (raw, json)
Hash identifier:          xGk718hkRHf8+l8190eSnC/VynFwY4xkSpXGgYxnZW0=
Subject key identifier:   60:83:4A:E0:C1:9D:9D:A3:B9:C0:EB:F3:2A:49:E7:DA:E4:03:11:B7
Certificate issuer:       /CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Certificate serial:       02
Authority key identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
Signing time:             Tue 10 Mar 2026 03:30:03 +0000
ROA not before:           Tue 10 Mar 2026 03:30:03 +0000
ROA not after:            Wed 10 Mar 2027 03:08:33 +0000
asID:                     23791
IP address blocks:        2402:3880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
        Validity
            Not Before: Mar 10 03:30:03 2026 GMT
            Not After : Mar 10 03:08:33 2027 GMT
        Subject: CN=60834AE0C19D9DA3B9C0EBF32A49E7DAE40311B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:70:72:6e:0f:3f:26:8b:05:9e:ba:88:5a:
                    8c:c9:5c:20:8a:6e:0f:81:aa:a5:ed:94:9c:9b:3a:
                    4f:10:e1:00:ef:05:b0:90:5a:55:5a:85:09:c3:52:
                    fe:34:b2:89:50:9d:95:0c:01:2c:e0:25:37:36:1d:
                    78:5a:22:da:22:a1:12:6a:58:23:43:e2:6a:b1:47:
                    2f:91:47:26:8b:58:56:5e:08:3b:08:fa:28:6c:b6:
                    16:11:62:a7:c3:63:f9:de:87:ba:10:7d:6b:3c:19:
                    33:e9:8c:61:24:f6:91:75:3e:b8:2c:af:7e:27:5a:
                    98:25:3e:99:0a:85:d8:0d:17:72:18:65:b4:b9:c8:
                    e9:9b:33:de:67:b7:45:ec:17:8d:f6:39:cf:da:4d:
                    93:d8:82:c6:19:df:c0:c9:b5:07:44:62:6b:58:c7:
                    46:64:cd:67:d8:19:6e:62:ab:ac:b0:61:1f:fb:e9:
                    bc:98:20:ff:90:4c:8c:dd:c9:d4:f0:b3:14:4e:53:
                    80:1a:38:a3:46:43:b1:c9:d8:0a:20:69:cf:b3:f4:
                    44:98:70:90:c0:06:0e:12:61:24:33:a1:2a:1a:8a:
                    94:cd:99:d9:f7:c8:6b:e9:19:dc:82:14:a2:76:fa:
                    1b:26:f3:cc:e2:6e:ee:e4:c0:b2:2b:89:ca:82:f8:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:4A:E0:C1:9D:9D:A3:B9:C0:EB:F3:2A:49:E7:DA:E4:03:11:B7
            X509v3 Authority Key Identifier:
                keyid:D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:97:63:8c:b8:db:41:96:eb:52:b8:99:e4:d0:7a:13:58:12:
         5e:af:64:09:26:03:2e:1e:f9:a9:5a:c4:6c:e5:09:8f:2d:3b:
         6f:bb:23:62:85:b9:48:73:db:fa:99:af:21:37:90:7e:41:d5:
         1d:c9:d0:d7:72:94:d9:a4:48:e3:99:a4:25:d8:f5:6e:c4:0d:
         bc:f3:cc:3f:79:b7:dc:0c:39:dc:56:91:e1:e5:cc:f7:8f:96:
         1e:ea:85:0c:b5:7d:52:3b:01:e9:53:b5:7b:49:6c:b0:f4:df:
         5f:38:73:c6:82:47:2a:2b:82:6d:be:26:76:c1:91:1e:ee:29:
         6e:88:05:fb:f0:5f:57:96:1b:f1:9b:b7:0d:a7:de:79:93:cd:
         53:49:aa:aa:6a:fb:64:e0:0c:1d:57:2b:e6:39:5d:c7:5b:a1:
         1e:06:5c:91:2f:e8:3a:c0:69:55:bb:f0:2c:3c:d0:34:a3:fa:
         ff:3f:42:e7:c7:43:4c:e7:5c:40:8c:fc:67:65:39:35:f6:3e:
         37:4a:fc:88:85:8c:2f:70:ee:0b:24:50:bd:80:e4:f0:4f:51:
         da:9a:8a:f5:de:a5:b5:7e:37:d2:87:55:32:68:9b:a6:99:cc:
         d3:14:04:88:3f:f8:5d:9c:88:8c:5e:60:e9:82:09:41:1a:00:
         c0:c7:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:08:03 2026 by rpki-client