Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/1QyQ569FFRn8PPyJvw9mZVFaZ8E.roa
File:                     1QyQ569FFRn8PPyJvw9mZVFaZ8E.roa (raw, json)
Hash identifier:          uljlCZvc5TL4U38ya7IJkm9b/1pf9b6gDi10MBDa6lU=
Subject key identifier:   D5:0C:90:E7:AF:45:15:19:FC:3C:FC:89:BF:0F:66:65:51:5A:67:C1
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       61
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/1QyQ569FFRn8PPyJvw9mZVFaZ8E.roa
Signing time:             Sun 01 Mar 2026 01:32:18 +0000
ROA not before:           Sun 01 Mar 2026 01:32:18 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:18 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D50C90E7AF451519FC3CFC89BF0F6665515A67C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:a4:57:42:af:15:99:f4:e2:a8:b2:b1:86:
                    66:48:c7:5e:8d:fe:33:40:e9:df:70:28:f1:e6:5f:
                    3b:4b:d2:f4:3a:58:b4:0a:88:03:12:81:ed:2c:b1:
                    bf:18:1b:77:f1:c2:da:a3:49:1d:8b:41:00:73:1e:
                    56:7f:94:dd:88:47:ce:1c:97:ae:25:d7:67:86:93:
                    78:d9:76:7f:91:89:d2:b0:81:49:b4:4f:3e:39:ba:
                    92:db:76:b8:8b:70:96:e7:85:41:80:6f:6e:b0:ef:
                    b1:42:09:a5:d8:ae:5f:6f:8e:89:65:30:ac:6d:d7:
                    a2:2f:cd:0c:6a:7a:f3:28:65:07:f0:1e:ac:d1:11:
                    b2:48:99:62:38:10:05:11:3f:b5:d4:2f:b5:eb:94:
                    ed:d5:53:41:c7:03:e6:5b:05:42:d8:c5:90:ae:24:
                    af:b8:16:98:32:5b:0f:cb:43:e6:ea:ec:85:20:21:
                    f0:d8:eb:53:61:e9:24:5c:b1:fb:55:a5:42:f0:da:
                    8b:94:08:2b:eb:82:38:e2:f5:47:c9:23:85:16:52:
                    9f:da:fa:a7:f7:12:d8:59:31:18:9a:e1:34:cb:39:
                    fc:db:85:88:43:5c:3c:46:8f:36:5a:de:0b:1e:79:
                    9d:b9:d1:26:d3:6d:54:80:4d:b3:f6:a8:96:79:ca:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:90:E7:AF:45:15:19:FC:3C:FC:89:BF:0F:66:65:51:5A:67:C1
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/1QyQ569FFRn8PPyJvw9mZVFaZ8E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:c4:1a:b6:0c:3a:d6:98:53:22:41:60:7b:82:0e:5a:60:
         5a:b7:5b:15:65:d7:49:47:0a:85:0e:97:fe:bc:20:cd:2f:60:
         d9:e8:9d:f4:4c:e6:58:d9:d1:04:c6:c6:79:78:bd:08:73:e4:
         71:0f:3c:3d:05:41:e8:a3:38:e1:5a:f5:0d:6e:ba:1f:dd:1f:
         a1:9c:46:0c:e0:91:e4:a9:63:c4:a7:fe:e2:e1:78:ab:60:51:
         4d:36:fc:f3:0a:b6:31:32:fd:2d:42:0d:59:12:41:08:ce:10:
         3a:4b:4d:89:44:67:c9:44:4b:67:7e:b1:93:af:d9:59:b7:00:
         1f:f1:45:d4:0a:11:28:d2:e1:cc:c7:a2:fb:59:92:6b:bb:a2:
         cf:87:ef:7d:de:0e:59:7c:ea:5d:c4:7f:79:66:85:3e:bd:cc:
         70:29:25:1f:2a:58:79:aa:72:c6:c1:4f:f3:80:0c:c5:54:60:
         3a:96:1e:26:12:33:3d:2b:f1:1b:3c:ba:95:8e:ff:13:cd:3a:
         60:19:be:c1:cd:10:c6:e8:26:ed:45:22:7e:d9:74:49:a4:8b:
         83:9b:94:90:62:d1:3e:c3:9b:63:5e:a8:e5:85:cb:d7:d6:a5:
         6d:8e:25:16:ad:f2:3f:69:29:bc:1b:b9:fb:be:d4:ba:4e:a7:
         ee:af:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:59 2026 by rpki-client