Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa
File:                     exXrQbpwiy8qE3qy26YdczAWc6U.roa (raw, json)
Hash identifier:          qTH6hJdy0jycsTVnpl3p/XPf6EHU7sdy/BHDyOB0Wno=
Subject key identifier:   7B:15:EB:41:BA:70:8B:2F:2A:13:7A:B2:DB:A6:1D:73:30:16:73:A5
Certificate issuer:       /CN=3F8DED57D242857BD20D6622080D938C868DCF5A
Certificate serial:       02
Authority key identifier: 3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa
Signing time:             Thu 09 Jul 2026 10:44:27 +0000
ROA not before:           Thu 09 Jul 2026 10:44:27 +0000
ROA not after:            Fri 09 Jul 2027 06:55:03 +0000
asID:                     151378
IP address blocks:        2402:52e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F8DED57D242857BD20D6622080D938C868DCF5A
        Validity
            Not Before: Jul  9 10:44:27 2026 GMT
            Not After : Jul  9 06:55:03 2027 GMT
        Subject: CN=7B15EB41BA708B2F2A137AB2DBA61D73301673A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:b1:a1:3d:df:b6:4a:36:4d:e9:cf:c4:81:
                    11:d5:cd:89:c0:a6:b0:e6:26:c2:f9:ed:96:69:4c:
                    0c:4e:ce:ba:e6:b0:b4:ad:6b:2f:05:3a:d2:ad:7f:
                    ea:48:9d:bf:ea:a6:7d:f0:3f:aa:7e:ea:0c:77:9e:
                    a1:77:a7:ef:38:1a:be:f3:c4:9d:4d:76:2a:ce:84:
                    4a:d7:fa:86:dc:dd:33:1e:2a:ea:d4:d6:dd:16:7c:
                    ad:ab:b1:e0:73:89:dc:cd:26:e4:2f:75:91:b9:0e:
                    41:f4:93:9d:0e:cb:ca:8d:31:de:ec:bc:1a:33:5c:
                    96:74:cc:50:3f:33:cc:c4:29:03:56:94:83:7b:97:
                    6b:fc:bf:37:b6:1e:9d:89:29:3c:90:3a:30:09:f6:
                    5a:19:b8:e5:2b:f9:25:8d:b1:ab:01:23:9b:31:c6:
                    53:2e:ca:2b:d2:69:66:3b:93:95:b7:be:5a:68:6a:
                    58:6f:ed:a4:73:67:ca:17:9f:0d:48:8c:06:55:cb:
                    99:89:6f:2b:83:55:2c:06:51:ad:1f:09:60:31:00:
                    7a:f8:eb:8a:08:b7:26:29:7e:02:71:70:94:43:d1:
                    d8:25:0a:57:7b:5f:72:d6:a7:09:09:4e:b5:1f:59:
                    7e:95:2d:2d:2c:d9:57:61:a1:0c:c5:95:82:19:a4:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:EB:41:BA:70:8B:2F:2A:13:7A:B2:DB:A6:1D:73:30:16:73:A5
            X509v3 Authority Key Identifier:
                keyid:3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:52e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:c1:69:f0:e5:dc:c0:65:47:72:03:c9:80:cf:d7:52:e4:
         48:eb:57:d6:64:0b:05:9b:4e:21:3a:a9:2f:6d:3f:16:03:fb:
         64:66:99:4c:a7:13:83:0b:f5:3f:22:8c:4d:78:c6:fe:17:96:
         ae:94:3b:2c:5c:06:c8:ae:d8:74:7e:71:37:11:21:c4:f9:60:
         88:c6:81:61:dd:9f:93:16:25:9b:0b:f8:ed:bb:7c:2b:ce:84:
         cd:ba:87:44:03:c7:23:5c:6f:f3:06:d2:dd:ca:e7:7f:2c:fa:
         65:bc:2c:5f:86:b2:e2:1f:fd:f1:e8:6b:ca:86:24:89:53:7f:
         09:27:08:52:5e:6f:3c:e6:44:a0:7c:2d:64:5e:ec:db:35:ae:
         05:cd:74:25:7c:33:87:9a:8f:f6:3a:c6:3e:1b:a5:70:e0:2b:
         d1:7d:8d:3d:e5:5b:5f:74:01:4f:19:00:e5:9e:4b:9d:b1:a3:
         ab:90:99:f4:5f:96:54:40:8d:c9:41:58:ba:10:b0:52:fd:04:
         a9:07:6b:17:bb:b0:65:32:8c:9b:0d:a7:80:d4:c6:41:c4:18:
         05:ae:3c:ca:c8:b1:e6:69:73:a1:fc:46:bf:55:87:9b:4e:02:
         da:c4:18:6e:d6:ca:ba:23:e1:16:84:3f:59:93:1c:e1:94:08:
         af:d3:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:01 2026 by rpki-client