Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
File:                     p5Nxpyh03R6elOUs3fdJcrz-HXM.roa (raw, json)
Hash identifier:          JRVM+boRWJntPZB7zbxJ1Ad3drg3CS9psold0IDn1UQ=
Subject key identifier:   A7:93:71:A7:28:74:DD:1E:9E:94:E5:2C:DD:F7:49:72:BC:FE:1D:73
Certificate issuer:       /CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Certificate serial:       24
Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
Signing time:             Sun 01 Mar 2026 01:35:33 +0000
ROA not before:           Sun 01 Mar 2026 01:35:33 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        2407:d600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04
        Validity
            Not Before: Mar  1 01:35:33 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A79371A72874DD1E9E94E52CDDF74972BCFE1D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:75:20:55:17:a3:78:fe:6c:49:d9:05:cc:
                    ab:da:ba:a6:3c:21:55:e2:d1:58:10:49:33:08:ba:
                    97:46:00:1e:04:b3:8e:5c:76:46:7b:b4:d1:6d:cc:
                    15:b5:73:ed:0f:13:c6:69:86:9c:44:eb:2c:11:de:
                    11:75:be:a2:d3:d5:66:29:6b:88:8f:0b:7c:c0:64:
                    4c:3b:bd:b7:7b:68:fc:0d:da:96:d9:e4:3d:69:48:
                    64:c8:90:99:7b:55:b4:59:e6:70:9a:86:a4:dd:0a:
                    74:93:29:5e:f0:55:bc:e1:87:7d:3a:94:d8:cd:29:
                    1e:f5:23:14:5b:b3:4c:e0:3c:ca:33:f4:51:99:02:
                    ad:40:97:1d:00:16:da:ff:ab:0e:98:3f:bf:bd:56:
                    e6:7a:5a:1c:e2:a5:72:72:37:59:5e:f2:ea:6c:ae:
                    e9:b9:2b:44:c7:ae:6c:fd:f2:37:8e:b2:07:23:c6:
                    31:d5:74:c0:a3:0a:90:2a:fb:2b:72:c6:1c:5c:24:
                    58:20:5f:77:14:34:e3:bb:f7:22:d4:f5:c6:0e:1a:
                    99:48:fc:21:fb:0f:67:19:40:44:78:3e:4c:19:5b:
                    ae:b4:c6:64:e6:c6:21:8f:95:d8:12:8f:99:03:51:
                    60:a9:70:e2:c4:b4:45:d5:f1:35:32:6c:d9:12:bc:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:71:A7:28:74:DD:1E:9E:94:E5:2C:DD:F7:49:72:BC:FE:1D:73
            X509v3 Authority Key Identifier:
                keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:5c:a6:a0:ff:29:6c:4c:57:e0:81:2e:3b:bb:85:c4:cf:
         9c:2a:55:30:27:07:5d:ba:d4:fa:b8:90:92:01:12:60:78:dd:
         8f:52:dd:af:a5:70:ee:31:e2:5c:ea:73:85:d9:0d:20:d8:9b:
         5b:bf:d0:70:62:5e:15:21:05:95:da:5b:fc:ba:5f:b6:67:d1:
         f6:7c:66:29:4d:b4:b0:22:f0:05:d5:0d:2a:55:9c:3c:62:b6:
         10:6b:28:bd:f9:e7:98:d3:d8:b6:52:53:82:87:ff:5b:e0:ac:
         e3:8c:f7:dc:ca:04:8c:d9:24:04:33:cc:ef:e7:97:3b:6b:14:
         45:6e:cc:cd:2d:6f:7e:26:03:d8:2d:23:ad:42:af:52:bd:74:
         e6:7a:97:79:68:3e:ad:70:6c:ad:96:35:9a:4c:42:23:36:3d:
         fa:2b:b7:d3:d3:23:55:0c:65:01:ea:eb:7b:17:0b:a7:05:14:
         d1:d4:60:3d:33:a0:e1:48:f4:fb:99:b5:8f:b0:3b:e7:fb:38:
         6c:fe:be:bd:98:31:18:5e:a4:8b:b9:fd:27:11:82:c7:24:d2:
         0a:d7:3d:f5:ba:f4:b7:46:95:e7:8b:a7:9e:26:b6:8a:52:71:
         ae:a3:f6:18:d9:84:e1:b5:a6:bc:44:1c:d4:e7:ff:5e:06:d0:
         2c:67:bc:9f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTg5
MzJGNjQxRDY1MERDODYwRDc0MTFBQzhBRUI2QzM1Qzg5RDA0MB4XDTI2MDMwMTAx
MzUzM1oXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQTc5MzcxQTcyODc0REQx
RTlFOTRFNTJDRERGNzQ5NzJCQ0ZFMUQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdqdSBVF6N4/mxJ2QXMq9q6pjwhVeLRWBBJMwi6l0YAHgSzjlx2
Rnu00W3MFbVz7Q8TxmmGnETrLBHeEXW+otPVZilriI8LfMBkTDu9t3to/A3altnk
PWlIZMiQmXtVtFnmcJqGpN0KdJMpXvBVvOGHfTqU2M0pHvUjFFuzTOA8yjP0UZkC
rUCXHQAW2v+rDpg/v71W5npaHOKlcnI3WV7y6myu6bkrRMeubP3yN46yByPGMdV0
wKMKkCr7K3LGHFwkWCBfdxQ047v3ItT1xg4amUj8IfsPZxlARHg+TBlbrrTGZObG
IY+V2BKPmQNRYKlw4sS0RdXxNTJs2RK873MCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSnk3GnKHTdHp6U5Szd90lyvP4dczAfBgNVHSMEGDAWgBRhiTL2QdZQ3IYNdBGs
iutsNcidBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxODAvWVlreTlrSFdVTnlHRFhRUnJJcnJiRFhJblFRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWVlreTlrSFdVTnlHRFhRUnJJcnJi
RFhJblFRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTgwL3A1TnhweWgwM1I2ZWxPVXMzZmRKY3J6LUhYTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkB9YAMA0GCSqGSIb3DQEBCwUAA4IBAQBdz1ymoP8pbExX4IEuO7uF
xM+cKlUwJwddutT6uJCSARJgeN2PUt2vpXDuMeJc6nOF2Q0g2Jtbv9BwYl4VIQWV
2lv8ul+2Z9H2fGYpTbSwIvAF1Q0qVZw8YrYQayi9+eeY09i2UlOCh/9b4KzjjPfc
ygSM2SQEM8zv55c7axRFbszNLW9+JgPYLSOtQq9SvXTmepd5aD6tcGytljWaTEIj
Nj36K7fT0yNVDGUB6ut7FwunBRTR1GA9M6DhSPT7mbWPsDvn+zhs/r69mDEYXqSL
uf0nEYLHJNIK1z31uvS3RpXni6eeJraKUnGuo/YY2YThtaa8RBzU5/9eBtAsZ7yf
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:03 2026 by rpki-client