Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5tmp7VnOdih6-ZmYhGEfeB3s1Ic.roa
File:                     5tmp7VnOdih6-ZmYhGEfeB3s1Ic.roa (raw, json)
Hash identifier:          HJJXMXVslAhRP8C5WhOd6iiyWm3MHhIQEt/gRwCCjQo=
Subject key identifier:   E6:D9:A9:ED:59:CE:76:28:7A:F9:99:98:84:61:1F:78:1D:EC:D4:87
Certificate issuer:       /CN=8484F266865A5F115A4A76F63211159305275A56
Certificate serial:       02
Authority key identifier: 84:84:F2:66:86:5A:5F:11:5A:4A:76:F6:32:11:15:93:05:27:5A:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5tmp7VnOdih6-ZmYhGEfeB3s1Ic.roa
Signing time:             Mon 16 Mar 2026 05:45:18 +0000
ROA not before:           Mon 16 Mar 2026 05:45:18 +0000
ROA not after:            Tue 16 Mar 2027 05:21:18 +0000
asID:                     63782
IP address blocks:        2401:df60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8484F266865A5F115A4A76F63211159305275A56
        Validity
            Not Before: Mar 16 05:45:18 2026 GMT
            Not After : Mar 16 05:21:18 2027 GMT
        Subject: CN=E6D9A9ED59CE76287AF9999884611F781DECD487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:dd:bb:1b:d0:b9:3d:b6:8f:03:08:07:ff:
                    0b:54:22:8d:9a:be:eb:d9:49:e5:f0:47:86:c0:4f:
                    fc:5d:fd:c3:7f:ac:65:73:d3:e7:7d:27:ca:05:ee:
                    77:c6:59:19:82:5b:13:b1:76:d4:8e:17:bb:bf:b6:
                    53:20:4c:70:0d:36:d0:a1:4b:88:f6:48:95:e7:bb:
                    9d:fb:20:a9:de:31:6d:10:fc:05:fe:f3:f3:a3:e4:
                    e0:c8:2a:7e:6c:bb:a5:4e:cc:6a:3e:6d:74:59:f4:
                    a3:43:c7:b0:e6:60:0d:cd:5b:ec:3b:1d:4f:c7:08:
                    a3:82:0d:77:cf:29:a3:14:aa:15:2a:85:aa:a3:0a:
                    1d:2f:46:19:4a:56:dd:15:52:38:9b:85:2c:a8:2c:
                    2b:63:c5:19:6e:1f:aa:3b:5e:72:44:ad:98:ec:b6:
                    2e:81:a9:99:9a:5c:75:17:65:08:c3:ad:5f:09:8e:
                    d6:72:ff:15:8b:26:c3:b7:35:49:3d:bd:92:ec:41:
                    09:11:c9:ff:e7:e0:a3:7f:20:59:34:df:f7:b8:f2:
                    12:36:e7:b3:b8:35:2c:ed:12:c1:2b:82:e5:ad:80:
                    a4:f0:16:db:f2:52:cf:3c:30:3d:cd:12:cc:51:ea:
                    f4:1f:7f:51:a4:de:51:01:e4:eb:52:5b:53:17:5c:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:A9:ED:59:CE:76:28:7A:F9:99:98:84:61:1F:78:1D:EC:D4:87
            X509v3 Authority Key Identifier:
                keyid:84:84:F2:66:86:5A:5F:11:5A:4A:76:F6:32:11:15:93:05:27:5A:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/hITyZoZaXxFaSnb2MhEVkwUnWlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hITyZoZaXxFaSnb2MhEVkwUnWlY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30444/5tmp7VnOdih6-ZmYhGEfeB3s1Ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:df60::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:30:9d:b6:21:31:43:71:c5:12:f2:de:58:ac:25:db:87:7a:
         f5:90:64:b1:10:f0:22:ee:2b:4b:bd:4f:91:66:07:8e:5e:99:
         2d:57:b3:3d:13:0d:02:c6:95:5a:a2:4c:31:e1:d0:3e:c2:bd:
         b2:00:74:0b:2f:c4:de:1d:f8:61:52:bd:8a:50:d3:75:3f:1c:
         62:53:e5:d6:f0:63:a4:36:ea:60:10:33:53:37:b5:ca:1a:f3:
         a9:d8:f2:ee:71:81:c3:31:bc:fa:f9:05:61:24:56:b8:37:be:
         89:73:82:70:49:6f:6a:82:a0:94:7b:14:ee:65:79:a1:b3:80:
         62:be:c1:85:fd:1d:ab:29:ae:53:ac:cb:ec:0e:28:eb:74:57:
         cf:1b:90:12:91:05:c3:5e:24:14:07:de:56:d8:d4:28:5e:8a:
         7f:a9:da:c9:d6:e9:4d:9f:02:7f:fe:c2:f5:9d:a2:b8:fb:c4:
         89:ff:97:be:c0:ef:70:fb:0a:f3:b9:4e:22:80:b6:a3:66:5f:
         5b:5a:06:bc:6d:34:c1:3d:ad:1a:75:6a:f0:ac:64:b2:0c:0e:
         65:16:81:88:c2:34:58:09:bf:db:78:39:f0:7b:cc:c0:17:90:
         4a:50:32:a3:91:3a:f9:e0:8f:81:de:f7:3a:f7:9a:85:45:68:
         6a:a2:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:45:18 2026 by rpki-client