Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/68T26IWX8GAVlIqxnyKlG-EdMk0.roa
File:                     68T26IWX8GAVlIqxnyKlG-EdMk0.roa (raw, json)
Hash identifier:          XBobRtid8DrA+rFiB84Q9gRSRT0YXnD0qQn2txMeENU=
Subject key identifier:   EB:C4:F6:E8:85:97:F0:60:15:94:8A:B1:9F:22:A5:1B:E1:1D:32:4D
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       A0
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/68T26IWX8GAVlIqxnyKlG-EdMk0.roa
Signing time:             Tue 31 Mar 2026 07:29:55 +0000
ROA not before:           Tue 31 Mar 2026 07:29:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar 31 07:29:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EBC4F6E88597F06015948AB19F22A51BE11D324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:87:ab:b2:fd:a3:7f:80:a8:67:ed:a4:82:
                    f6:8d:48:65:14:7e:fa:aa:51:52:74:5d:ed:f3:03:
                    23:9e:a7:42:89:6e:1b:40:35:0b:46:10:9f:5b:4f:
                    05:12:7a:03:1c:12:a6:8f:4f:67:6d:12:aa:95:1a:
                    ba:5d:b2:38:3d:0e:50:a0:61:b6:bd:c0:f7:c8:5f:
                    c2:44:f4:5c:13:c7:36:75:ad:92:24:2a:23:2b:f3:
                    09:ac:bc:18:d8:2a:8c:21:fe:f7:5c:e2:d9:3e:05:
                    7e:b1:5f:7c:68:3f:0d:bc:df:f0:d2:6f:12:6a:b0:
                    7e:ee:c4:55:bf:85:0b:d2:8e:b9:8d:5e:6a:e1:55:
                    d1:59:40:94:d3:1f:65:f4:36:4d:be:d5:07:99:cd:
                    44:27:79:12:f4:03:85:5c:7d:6d:d9:fa:5d:d2:16:
                    11:f2:46:bf:35:a3:dd:54:d2:e8:b5:c2:14:99:90:
                    21:3a:33:01:ed:76:6e:c4:17:bd:12:b2:96:b0:c5:
                    3f:1b:59:02:44:b6:14:c8:f7:d8:f0:45:7a:aa:47:
                    21:b0:b3:c7:bb:5b:1b:1f:fa:7f:60:37:fe:75:a4:
                    95:8c:fe:3b:20:82:22:42:f4:a0:6b:b1:73:3b:17:
                    4c:a4:15:f6:13:ca:bf:ad:c6:06:f9:b3:81:67:99:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:F6:E8:85:97:F0:60:15:94:8A:B1:9F:22:A5:1B:E1:1D:32:4D
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/68T26IWX8GAVlIqxnyKlG-EdMk0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:2a:f5:9e:f0:e1:20:d1:25:92:a0:39:2a:cd:ad:97:b7:
         ee:e3:c9:8c:b0:fd:71:11:f5:08:3a:89:6e:b4:a4:19:64:46:
         c4:ac:63:e6:54:e1:be:60:a2:13:14:f0:10:33:4c:ba:78:33:
         4b:62:4f:04:5a:07:ab:38:a1:fb:e9:fb:b4:0d:5f:bd:16:c5:
         db:fc:4a:4c:63:04:86:84:02:18:5e:7f:53:5c:e0:8c:fd:81:
         9e:b2:94:26:0c:9a:c1:59:31:4f:ee:f5:8f:6e:47:d2:94:28:
         61:9a:b3:e1:f6:09:61:8c:43:e3:b3:f5:13:87:f4:94:4d:d3:
         88:6a:3b:ab:8c:01:99:5d:85:cd:68:da:0b:e0:93:67:7e:00:
         1b:8c:be:3c:58:a6:66:e7:4d:1f:e8:0d:91:17:02:25:9d:d9:
         34:aa:f3:b4:10:e6:ca:a1:a8:cd:21:5b:d9:a0:d5:be:32:e5:
         4e:2a:0e:61:61:9e:8e:2a:a7:47:b7:0e:c0:07:d1:7f:1d:37:
         80:76:89:20:65:34:09:94:f2:04:78:28:e7:b3:60:c0:15:b4:
         37:09:27:7e:9c:7b:89:8b:f9:63:71:ed:b3:f4:78:03:c0:ba:
         d5:dd:34:f5:54:19:5a:cf:79:fb:6e:16:7b:35:10:af:0d:97:
         c7:fc:97:c7
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAzMzEw
NzI5NTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCQzRGNkU4ODU5N0Yw
NjAxNTk0OEFCMTlGMjJBNTFCRTExRDMyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa7Yersv2jf4CoZ+2kgvaNSGUUfvqqUVJ0Xe3zAyOep0KJbhtA
NQtGEJ9bTwUSegMcEqaPT2dtEqqVGrpdsjg9DlCgYba9wPfIX8JE9FwTxzZ1rZIk
KiMr8wmsvBjYKowh/vdc4tk+BX6xX3xoPw283/DSbxJqsH7uxFW/hQvSjrmNXmrh
VdFZQJTTH2X0Nk2+1QeZzUQneRL0A4VcfW3Z+l3SFhHyRr81o91U0ui1whSZkCE6
MwHtdm7EF70SspawxT8bWQJEthTI99jwRXqqRyGws8e7Wxsf+n9gN/51pJWM/jsg
giJC9KBrsXM7F0ykFfYTyr+txgb5s4FnmTilAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQU68T26IWX8GAVlIqxnyKlG+EdMk0wHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDIyOC82OFQyNklXWDhHQVZsSXF4bnlLbEctRWRNazAucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJAa7BDANBgkqhkiG9w0BAQsF
AAOCAQEAkbMq9Z7w4SDRJZKgOSrNrZe37uPJjLD9cRH1CDqJbrSkGWRGxKxj5lTh
vmCiExTwEDNMungzS2JPBFoHqzih++n7tA1fvRbF2/xKTGMEhoQCGF5/U1zgjP2B
nrKUJgyawVkxT+71j25H0pQoYZqz4fYJYYxD47P1E4f0lE3TiGo7q4wBmV2FzWja
C+CTZ34AG4y+PFimZudNH+gNkRcCJZ3ZNKrztBDmyqGozSFb2aDVvjLlTioOYWGe
jiqnR7cOwAfRfx03gHaJIGU0CZTyBHgo57NgwBW0Nwknfpx7iYv5Y3Hts/R4A8C6
1d009VQZWs95+24WezUQrw2Xx/yXxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:41 2026 by rpki-client