Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/7vX5z-c_vkD3RJW2fqooHOIDeyg.roa
File:                     7vX5z-c_vkD3RJW2fqooHOIDeyg.roa (raw, json)
Hash identifier:          n9H2+n7Whik296gnGV7jcldLVUuv1sz/55kv7C25cCk=
Subject key identifier:   EE:F5:F9:CF:E7:3F:BE:40:F7:44:95:B6:7E:AA:28:1C:E2:03:7B:28
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       6E
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/7vX5z-c_vkD3RJW2fqooHOIDeyg.roa
Signing time:             Sun 01 Mar 2026 01:32:26 +0000
ROA not before:           Sun 01 Mar 2026 01:32:26 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:26 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EEF5F9CFE73FBE40F74495B67EAA281CE2037B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:27:00:45:03:05:c3:25:58:14:f1:76:e5:
                    29:d2:b8:6f:a7:3b:2c:09:c0:03:85:95:69:61:be:
                    02:55:37:bd:ec:68:4e:32:94:3c:54:21:18:a9:93:
                    e4:9d:d1:ff:bf:02:68:23:eb:56:88:8a:60:6c:da:
                    f9:32:fa:84:39:93:50:fc:b8:99:a1:80:5a:40:22:
                    5a:d5:d3:ed:20:56:70:51:ea:4d:27:fd:ed:2e:14:
                    a9:90:55:a0:e1:2d:63:fe:22:37:16:a1:05:67:5f:
                    3d:1d:4e:64:2b:b2:0d:ad:db:37:a8:35:c2:5b:fa:
                    8f:7c:77:c0:96:a9:c1:e7:d3:19:64:00:43:70:fc:
                    8b:fe:70:8a:21:00:82:d6:34:98:39:ac:5d:d2:de:
                    f8:2f:81:7b:b5:d6:85:c3:bc:02:60:0f:1b:b5:04:
                    54:e6:f4:f6:d2:a1:77:48:f2:7a:74:37:14:76:97:
                    00:0d:27:9b:c1:a3:f5:69:f7:0d:92:26:40:65:18:
                    e7:b3:8f:57:1d:23:da:45:08:97:d5:1a:73:64:98:
                    b2:42:1a:96:f4:c5:d3:f6:f6:e3:6e:f2:b3:49:81:
                    1d:6b:6a:37:ce:47:ca:1c:6e:cd:49:bc:ea:dd:d4:
                    cc:52:8c:ea:03:4e:58:1e:58:19:67:74:73:03:3a:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:F9:CF:E7:3F:BE:40:F7:44:95:B6:7E:AA:28:1C:E2:03:7B:28
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/7vX5z-c_vkD3RJW2fqooHOIDeyg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:49:84:53:54:77:5d:fa:b3:0d:80:64:e9:31:ad:47:ed:
         b5:d0:8e:a8:25:6c:e0:0b:48:4f:f9:a0:67:ae:61:78:25:86:
         a4:44:fb:48:06:2a:5c:3e:68:d9:2e:3e:f1:a2:ca:00:2a:0c:
         80:20:25:00:e0:ff:08:ac:7d:a0:c5:93:2e:e7:99:ab:da:9a:
         d7:a0:0f:0e:c0:84:ca:9e:d0:b8:29:62:05:e4:16:20:ca:ac:
         d0:29:e8:d9:a8:e7:48:e7:5f:21:4f:43:90:03:5f:6e:7a:eb:
         bc:43:9f:e2:67:90:d6:59:4b:29:22:4c:de:ed:0c:0b:55:dc:
         8d:b5:11:1e:5f:d0:c2:0c:b4:17:01:13:1b:0a:36:b5:73:7b:
         4a:2f:cc:dd:1b:04:89:1f:b9:40:11:8a:32:6f:76:88:25:d9:
         96:9f:4e:4c:1c:da:55:9d:cd:85:34:33:0a:bb:d4:df:4c:ed:
         fa:42:61:41:be:99:0f:61:5b:e2:20:68:2e:c6:f9:7a:f8:f5:
         b0:9c:a6:35:05:44:1e:be:20:6c:d2:e4:d0:d7:c7:f6:a0:a5:
         f4:92:a6:25:f6:ab:e1:94:13:01:09:11:43:b1:85:34:e7:3d:
         11:d8:e1:24:22:2a:0b:ff:9a:27:54:60:45:6a:4b:1f:21:38:
         5c:ee:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:26 2026 by rpki-client