Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
File:                     O6IM0cBx849zOGQwKq9D4xdX9HI.roa (raw, json)
Hash identifier:          SKDHlnh4kuSZ9b9iK9Ob8rPFYRloOqgZN2wOmQsWh48=
Subject key identifier:   3B:A2:0C:D1:C0:71:F3:8F:73:38:64:30:2A:AF:43:E3:17:57:F4:72
Certificate issuer:       /CN=E8AA602E736E188CCAE42462762C3776F85B7937
Certificate serial:       23
Authority key identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
Signing time:             Sun 01 Mar 2026 01:35:28 +0000
ROA not before:           Sun 01 Mar 2026 01:35:28 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9997
IP address blocks:        2402:700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8AA602E736E188CCAE42462762C3776F85B7937
        Validity
            Not Before: Mar  1 01:35:28 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3BA20CD1C071F38F733864302AAF43E31757F472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:2e:a9:8e:0a:75:45:0e:97:fd:ae:8f:97:
                    63:fa:1d:e5:ad:15:af:d5:cc:ac:1a:dc:b5:15:25:
                    f9:44:1e:59:97:e0:c7:78:a7:e8:aa:f3:9c:ee:de:
                    43:b7:cb:9b:89:ec:bf:07:14:a0:d0:5e:90:12:ee:
                    0b:79:1b:8a:56:9e:af:55:a1:ac:cf:64:27:1f:b0:
                    21:be:c8:05:de:63:b3:dc:83:06:6a:c8:e2:88:78:
                    2f:2c:ce:b5:d7:b2:d2:16:3f:90:29:cf:52:aa:be:
                    f0:f2:14:6a:20:ae:20:96:10:ed:55:4e:e4:8f:2d:
                    b5:5e:8e:9e:6e:9c:08:04:16:45:ab:c3:fe:9c:20:
                    e7:34:91:af:e0:3e:5b:ef:cd:e8:7b:0a:0c:6f:92:
                    29:f8:8e:5b:ea:e2:05:ba:6a:53:5e:67:ce:8e:1e:
                    80:fc:cf:2a:46:91:82:43:f0:46:28:41:55:8d:ec:
                    d2:b0:68:a8:fd:ae:26:b3:a4:76:0c:a6:e1:f2:96:
                    5d:c0:e2:83:3d:e3:f4:34:84:9e:e1:5c:28:99:40:
                    d3:c9:b7:48:1a:4e:d3:15:15:25:0e:28:07:23:2f:
                    42:80:a5:25:47:c9:17:69:35:77:81:1c:a9:05:c1:
                    4e:be:51:48:db:0c:99:34:2a:8e:ab:b5:b6:ad:ca:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:0C:D1:C0:71:F3:8F:73:38:64:30:2A:AF:43:E3:17:57:F4:72
            X509v3 Authority Key Identifier:
                keyid:E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:97:ac:36:06:4b:11:e0:fe:41:ea:51:e4:1a:22:94:c8:d8:
         e8:88:fd:12:90:54:d2:5f:6e:02:84:93:e6:7b:05:8c:a7:65:
         38:fe:7e:ec:4d:a4:ac:c0:e2:c5:f1:34:41:78:c5:de:34:e7:
         e1:a5:d2:08:fd:f1:0c:6d:04:9c:4b:23:1a:6b:d0:7a:b8:3c:
         ba:8e:aa:c8:ca:96:91:69:48:c2:0f:3d:6f:c2:53:cc:aa:95:
         56:89:ad:60:92:0a:2d:2a:06:0f:62:e3:6b:8f:10:5f:40:b3:
         72:dc:6e:74:d1:f3:ca:26:c5:65:40:61:95:a9:32:3a:05:a1:
         f3:25:25:b2:7b:95:1c:82:0b:b9:ba:74:cd:df:16:4d:0f:9a:
         f8:43:d6:1c:b2:8a:34:e9:ac:80:bf:38:fe:cc:db:60:94:00:
         d0:d1:1e:49:36:c6:17:9c:ec:01:ff:d3:49:80:f3:8e:ee:78:
         4e:8a:e9:36:f8:68:ea:51:c0:02:cb:07:68:17:be:f7:3b:93:
         60:b4:f3:96:f2:0e:19:97:86:0a:82:f9:b0:f8:c5:12:bd:eb:
         4e:e4:b9:64:c5:5c:b5:b8:40:c3:21:68:83:b4:fe:be:c5:09:
         39:ed:2b:3b:02:7b:79:dc:1a:33:09:d5:d6:6f:75:5e:19:fe:
         4f:fe:f2:87
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOEFB
NjAyRTczNkUxODhDQ0FFNDI0NjI3NjJDMzc3NkY4NUI3OTM3MB4XDTI2MDMwMTAx
MzUyOFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoM0JBMjBDRDFDMDcxRjM4
RjczMzg2NDMwMkFBRjQzRTMxNzU3RjQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANtzLqmOCnVFDpf9ro+XY/od5a0Vr9XMrBrctRUl+UQeWZfgx3in
6KrznO7eQ7fLm4nsvwcUoNBekBLuC3kbilaer1WhrM9kJx+wIb7IBd5js9yDBmrI
4oh4LyzOtdey0hY/kCnPUqq+8PIUaiCuIJYQ7VVO5I8ttV6Onm6cCAQWRavD/pwg
5zSRr+A+W+/N6HsKDG+SKfiOW+riBbpqU15nzo4egPzPKkaRgkPwRihBVY3s0rBo
qP2uJrOkdgym4fKWXcDigz3j9DSEnuFcKJlA08m3SBpO0xUVJQ4oByMvQoClJUfJ
F2k1d4EcqQXBTr5RSNsMmTQqjqu1tq3K/aMCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQ7ogzRwHHzj3M4ZDAqr0PjF1f0cjAfBgNVHSMEGDAWgBToqmAuc24YjMrkJGJ2
LDd2+Ft5NzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMDkvNktwZ0xuTnVHSXpLNUNSaWRpdzNkdmhiZVRjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNktwZ0xuTnVHSXpLNUNSaWRpdzNk
dmhiZVRjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjA5L082SU0wY0J4ODQ5ek9HUXdLcTlENHhkWDlISS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAgcAMA0GCSqGSIb3DQEBCwUAA4IBAQBWl6w2BksR4P5B6lHkGiKU
yNjoiP0SkFTSX24ChJPmewWMp2U4/n7sTaSswOLF8TRBeMXeNOfhpdII/fEMbQSc
SyMaa9B6uDy6jqrIypaRaUjCDz1vwlPMqpVWia1gkgotKgYPYuNrjxBfQLNy3G50
0fPKJsVlQGGVqTI6BaHzJSWye5Ucggu5unTN3xZND5r4Q9Ycsoo06ayAvzj+zNtg
lADQ0R5JNsYXnOwB/9NJgPOO7nhOiuk2+GjqUcACywdoF773O5NgtPOW8g4Zl4YK
gvmw+MUSvetO5LlkxVy1uEDDIWiDtP6+xQk57Ss7Ant53BozCdXWb3VeGf5P/vKH
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:11 2026 by rpki-client