Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/JeJSnAfL1-swoQdzXHobblfoToo.roa
File:                     JeJSnAfL1-swoQdzXHobblfoToo.roa (raw, json)
Hash identifier:          6OU5cGZ+8+2NXyDLMfrOVZoSp/xWqteMMK+FMLpBITU=
Subject key identifier:   25:E2:52:9C:07:CB:D7:EB:30:A1:07:73:5C:7A:1B:6E:57:E8:4E:8A
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       12
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/JeJSnAfL1-swoQdzXHobblfoToo.roa
Signing time:             Wed 04 Mar 2026 08:54:22 +0000
ROA not before:           Wed 04 Mar 2026 08:54:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        2401:55c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Mar  4 08:54:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=25E2529C07CBD7EB30A107735C7A1B6E57E84E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:34:80:0b:db:cc:eb:07:61:fc:0e:66:95:
                    49:dd:56:0d:97:c4:d2:3d:73:f1:64:0a:f7:e9:28:
                    84:9e:3d:d8:01:1b:34:49:8d:ab:4d:6a:32:0e:b1:
                    9e:0d:07:b9:12:21:fc:42:c5:49:71:d5:07:89:8e:
                    4c:08:97:9d:85:01:fd:f6:2b:d0:88:25:3c:6b:42:
                    1b:a0:09:4a:d9:58:f7:03:0b:95:1d:42:e5:3a:17:
                    d7:71:63:ad:da:74:72:32:34:75:45:21:df:a0:50:
                    e8:9c:46:17:db:60:1b:55:0b:a6:64:28:2d:83:ee:
                    67:7f:d3:88:9f:1f:64:18:35:f8:12:da:9f:10:3b:
                    d6:bd:1c:76:ff:b7:da:9a:72:bc:bb:d7:bb:80:3d:
                    e4:1f:53:af:d8:ba:1b:0f:11:48:9f:98:09:17:b5:
                    cc:7b:33:38:be:27:bd:f1:e6:24:73:21:92:f6:9f:
                    a7:1f:3e:3c:7a:59:c8:b4:fa:78:71:69:70:a0:c9:
                    41:a1:38:bd:6b:50:cf:d1:59:36:9f:3d:3b:a7:7a:
                    ac:ae:ef:25:ee:cf:36:5b:1a:6e:1a:44:98:12:30:
                    99:c2:06:27:f5:48:be:0b:d7:4d:0c:20:53:d7:f7:
                    b2:db:cc:a2:f5:e4:77:40:88:0d:78:95:22:5e:4a:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:52:9C:07:CB:D7:EB:30:A1:07:73:5C:7A:1B:6E:57:E8:4E:8A
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/JeJSnAfL1-swoQdzXHobblfoToo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:26:98:29:cc:c0:40:d3:14:04:2a:90:ef:86:1e:b4:6e:
         52:37:96:11:a6:c9:34:d4:8e:ae:fd:36:85:19:37:bc:c6:21:
         aa:9e:da:e5:df:0a:5c:b0:08:2d:65:4e:7d:18:fc:31:48:6d:
         c3:3f:7e:97:ea:f0:cc:e6:0d:78:6c:b8:65:f2:d0:61:df:b4:
         78:4e:72:19:a2:7a:30:9b:8c:ea:7f:cb:8c:9e:1f:4c:58:20:
         2d:97:5a:90:be:fb:05:45:d4:76:72:90:0d:0f:59:d6:69:19:
         94:5c:ec:f0:1c:e3:a9:0b:77:31:17:72:67:84:a6:c9:51:03:
         2e:b1:a9:94:f7:a4:4e:49:c9:d5:57:df:c2:1d:9b:03:e2:c1:
         61:d6:55:2e:0d:e9:60:f5:67:31:bd:91:f0:d0:be:0a:3a:a3:
         4c:f4:b0:ec:25:f3:3f:c8:aa:cb:5d:cc:ad:df:1f:8d:11:02:
         ae:ac:1e:d7:55:4f:33:50:61:95:48:47:72:b7:50:1f:f8:e5:
         38:17:f5:bb:a0:d7:9d:36:99:ac:f1:34:f4:f2:cb:97:a1:af:
         40:0f:9f:84:e0:53:fb:7a:80:cc:5f:2c:c2:a6:aa:d9:63:ed:
         d3:23:65:f4:01:36:eb:ca:c7:b9:d9:fa:f8:0c:d4:e9:97:6f:
         0a:e4:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:36 2026 by rpki-client