Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30449/RARJZ_TI1SK6CNaO07PcJFfGWdc.roa
File:                     RARJZ_TI1SK6CNaO07PcJFfGWdc.roa (raw, json)
Hash identifier:          v4Xna43ia8WrylewwaFAFK1WEEZbbm5+BNs9r+5GFMI=
Subject key identifier:   44:04:49:67:F4:C8:D5:22:BA:08:D6:8E:D3:B3:DC:24:57:C6:59:D7
Certificate issuer:       /CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
Certificate serial:       10
Authority key identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/RARJZ_TI1SK6CNaO07PcJFfGWdc.roa
Signing time:             Sun 19 Jul 2026 08:31:15 +0000
ROA not before:           Sun 19 Jul 2026 08:31:15 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2402:3160:8000::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
        Validity
            Not Before: Jul 19 08:31:15 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=44044967F4C8D522BA08D68ED3B3DC2457C659D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:e6:fb:f4:ab:8e:ee:3c:62:a4:05:fd:5b:
                    9b:80:ff:99:c1:a5:ae:a7:36:88:41:d9:2d:70:61:
                    39:26:f5:4f:31:ff:a3:9d:14:d3:0a:af:8a:ff:f4:
                    e8:9e:07:8f:8d:5b:cc:f3:80:28:99:8a:13:60:1d:
                    58:33:19:2f:9a:20:4a:76:8d:70:3c:2a:19:ae:34:
                    ca:c6:21:b8:92:9a:51:58:dc:2a:32:f8:88:36:3b:
                    8f:69:88:00:d2:a1:53:b4:09:1a:75:d6:26:c0:e6:
                    bc:b5:ca:40:04:f0:a8:57:bd:89:8c:18:63:13:c8:
                    21:a9:4d:b8:70:cc:68:dd:e1:81:58:5f:48:dd:77:
                    52:72:07:10:f7:e1:f1:b8:33:5e:92:54:38:7d:67:
                    5c:7b:0c:5a:c8:af:22:cc:21:e3:a6:a8:4d:cd:cc:
                    ff:a9:04:49:c9:35:d2:8e:30:ef:55:8c:20:ab:2b:
                    bd:42:e6:12:5c:70:8c:96:76:8a:b2:f2:12:e0:42:
                    f8:c1:d3:0c:e7:ad:a1:aa:ec:06:cf:e1:80:ce:00:
                    f9:74:02:c0:54:c0:4d:c6:7d:08:13:fd:37:9f:f1:
                    d3:4f:65:c3:4a:9b:19:2f:b4:64:35:f4:56:18:76:
                    fa:c0:66:9d:6d:81:aa:77:23:e3:b0:b7:3b:fb:82:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:49:67:F4:C8:D5:22:BA:08:D6:8E:D3:B3:DC:24:57:C6:59:D7
            X509v3 Authority Key Identifier:
                keyid:7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/RARJZ_TI1SK6CNaO07PcJFfGWdc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3160:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:63:e3:1b:60:ea:54:c5:f3:e5:21:3c:46:05:d5:35:08:
         79:df:6a:b9:1b:92:1f:c2:c3:d4:bb:3e:b6:c9:13:37:0b:dc:
         22:2e:c1:00:36:9e:e3:27:75:aa:c3:2c:11:83:01:0f:8a:3f:
         8d:2f:66:23:49:7f:ac:59:f3:b2:8b:2e:6a:61:be:c6:4e:6d:
         c6:a6:94:cb:d1:5f:60:6b:e5:31:b5:8e:c2:df:ba:c8:23:a9:
         e7:43:d2:72:ad:33:a6:05:d4:30:f6:1d:bf:42:1e:38:cb:9a:
         20:3b:49:a6:85:36:6c:60:f4:b9:6e:f1:d3:44:3f:f0:87:6c:
         a0:d9:a1:39:b9:7b:dc:89:ff:33:7d:46:31:79:fe:53:21:f8:
         09:c8:c2:c6:ea:cd:8d:19:63:9d:dd:3c:b2:cd:98:d3:04:cc:
         6a:e5:40:33:1f:db:96:a5:c1:2c:6e:2a:b0:ab:e9:a8:cd:b1:
         e3:65:db:c1:d5:ab:e9:fc:9a:45:15:1f:d7:4c:69:c7:6b:05:
         11:d1:d0:24:4f:38:37:ee:9e:23:ce:a2:fd:87:b1:bb:b7:f2:
         c4:72:0c:53:8c:9a:87:56:8e:2c:23:94:e2:07:57:f3:30:30:
         0f:81:0b:9b:f4:1d:d8:1e:73:ef:03:37:ce:50:f1:ea:68:9b:
         58:a1:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:52 2026 by rpki-client