Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30450/he4y1Q11iMGs01ULyJuOC_c6w74.roa
File:                     he4y1Q11iMGs01ULyJuOC_c6w74.roa (raw, json)
Hash identifier:          1+69LWp02bM/WNvbBSxaO3ZlXDBpk9cLE9qVmTL0VTQ=
Subject key identifier:   85:EE:32:D5:0D:75:88:C1:AC:D3:55:0B:C8:9B:8E:0B:F7:3A:C3:BE
Certificate issuer:       /CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
Certificate serial:       16
Authority key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/he4y1Q11iMGs01ULyJuOC_c6w74.roa
Signing time:             Sat 09 May 2026 15:28:20 +0000
ROA not before:           Sat 09 May 2026 15:28:20 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     396982
IP address blocks:        2402:2f60:1919::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E
        Validity
            Not Before: May  9 15:28:20 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=85EE32D50D7588C1ACD3550BC89B8E0BF73AC3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:6e:aa:7b:b5:51:a5:f7:d8:be:fd:8d:c1:
                    71:69:b0:f1:70:15:ba:87:7f:f1:d2:09:4e:4f:0b:
                    20:cf:c5:42:3a:13:cb:07:86:cf:21:66:16:b8:99:
                    d9:89:c3:7d:88:1c:f8:1c:73:73:e0:a1:d7:20:6f:
                    f3:5a:d5:de:99:f9:37:a8:55:2d:53:58:65:38:42:
                    cf:2d:1b:d0:02:ad:c3:e8:7d:18:69:d3:50:0c:56:
                    86:51:b7:a0:2a:75:c2:1f:59:b5:ec:e5:f8:62:00:
                    ef:8b:19:b1:27:47:27:dd:e2:ba:99:46:90:4d:f1:
                    56:2c:42:ae:56:5d:df:b1:94:ac:87:b5:74:43:d6:
                    6f:12:e4:d3:ca:21:cb:d2:b7:02:2e:51:38:b0:6b:
                    a4:75:41:55:18:73:4f:99:8b:2f:4c:e1:9b:f3:37:
                    1e:96:e2:02:38:34:ba:8a:22:c9:5f:7c:63:5a:ae:
                    23:8b:51:d0:55:8b:68:c6:81:34:46:38:26:78:7c:
                    0c:05:3c:41:a0:12:ee:85:2b:72:f9:b4:8b:8c:32:
                    9f:51:6b:34:b3:73:e1:75:c8:cf:3f:7e:43:c7:2b:
                    55:fd:eb:b7:61:97:5d:6c:70:5e:1d:44:df:c7:85:
                    b9:c1:c9:fd:c5:8a:c4:d0:b0:d6:20:4d:69:43:0e:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:32:D5:0D:75:88:C1:AC:D3:55:0B:C8:9B:8E:0B:F7:3A:C3:BE
            X509v3 Authority Key Identifier:
                keyid:CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/he4y1Q11iMGs01ULyJuOC_c6w74.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2f60:1919::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:83:aa:d9:c7:38:75:6d:96:d9:3a:c4:82:5b:b0:1e:1f:
         61:b8:30:c4:9d:d6:08:d7:eb:cb:16:a9:0d:c7:4a:39:fb:24:
         69:3d:f4:24:ec:23:4a:3b:5e:3c:40:36:3c:fe:82:a7:df:19:
         cf:a6:cb:f5:37:39:20:c4:cc:c0:b7:7f:71:9d:d5:88:69:e9:
         ac:22:21:36:d5:b9:04:7a:b9:6f:28:6d:89:e5:d4:7c:74:f5:
         1b:70:5f:6d:ae:2e:a5:e3:36:7c:9a:c9:44:0a:8c:89:bf:c8:
         ad:ed:87:4b:80:5d:7f:fc:ad:a5:ab:da:79:98:72:0d:43:80:
         c2:8c:64:1c:aa:fd:15:d8:76:af:ed:9a:ca:b7:b3:55:f2:46:
         59:3d:5d:fb:cc:af:56:ae:ad:db:ca:b5:f5:96:4d:f6:6c:44:
         b7:3e:30:6c:89:ed:4f:a4:04:0b:54:df:01:30:e5:40:64:ff:
         0a:5c:05:44:81:77:40:02:3c:a0:d6:b7:2a:38:32:02:15:2e:
         a2:f3:ed:e7:3f:17:0d:d2:6b:5e:2f:0e:80:ed:5c:f7:3c:44:
         ac:2c:ea:29:ac:e9:e6:27:b6:c2:b0:5e:fe:aa:cb:5d:25:5b:
         c9:c0:03:be:e3:a7:5a:c8:d5:e3:8d:e4:e4:99:76:c8:46:9b:
         bb:c1:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:58 2026 by rpki-client