Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MZoABFkPUzoNkUdaBC0kJZRLxCg.roa
File:                     MZoABFkPUzoNkUdaBC0kJZRLxCg.roa (raw, json)
Hash identifier:          uMJvWRtZyyl/4G1m5AvggElrYQcifQ7zb/mrUnlY15Q=
Subject key identifier:   31:9A:00:04:59:0F:53:3A:0D:91:47:5A:04:2D:24:25:94:4B:C4:28
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       5F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MZoABFkPUzoNkUdaBC0kJZRLxCg.roa
Signing time:             Sun 01 Mar 2026 01:32:17 +0000
ROA not before:           Sun 01 Mar 2026 01:32:17 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:17 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=319A0004590F533A0D91475A042D2425944BC428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:33:27:64:ae:ea:2c:4f:24:19:16:d0:c5:
                    d0:c1:14:ed:a7:e2:6d:f3:a9:c3:af:e3:5a:3e:f4:
                    f2:bf:ac:b2:e4:8e:98:19:33:27:bb:73:fb:ce:fc:
                    0c:e6:cb:51:eb:29:82:12:35:9c:4d:58:4e:23:d7:
                    d9:68:54:f4:b2:82:75:48:47:a7:3b:da:e2:99:42:
                    cb:f3:86:31:df:89:81:1c:c9:d0:c1:a3:8c:80:79:
                    f6:f4:61:fc:1e:08:80:9e:1c:f1:ad:8e:c9:f2:aa:
                    86:ef:ce:79:c9:0f:18:ed:83:13:fb:3a:01:d2:46:
                    8b:04:c8:34:98:9f:14:3b:24:e8:7b:16:a0:6d:93:
                    25:a1:5d:72:5b:c9:c7:88:12:fb:27:af:a9:54:59:
                    df:c1:70:80:58:03:4d:2d:36:00:15:53:5b:ce:d9:
                    cf:27:00:76:3c:32:ef:91:e2:75:ac:cd:cb:af:ec:
                    c0:1c:79:91:f4:c9:67:0e:f5:3c:32:9a:dc:e3:03:
                    69:32:a6:cc:e2:5c:df:6f:06:eb:0b:f1:e8:3f:55:
                    f8:d4:18:25:46:63:52:ac:4e:8d:e0:a8:00:d5:9b:
                    fc:75:cd:77:2a:e7:c1:ac:e5:78:72:0d:09:fb:69:
                    b2:c0:c6:f8:85:8f:88:49:41:b9:09:db:68:f1:76:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:00:04:59:0F:53:3A:0D:91:47:5A:04:2D:24:25:94:4B:C4:28
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MZoABFkPUzoNkUdaBC0kJZRLxCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:0a:0b:cb:1b:f0:c2:85:de:ff:22:49:4b:4f:1c:79:32:9f:
         46:4f:ef:95:30:f6:93:74:36:5b:bb:05:c2:36:15:a2:52:b2:
         ea:af:32:9f:db:e0:bb:30:eb:a9:d8:0b:b2:09:08:b0:a6:91:
         d2:eb:b4:cc:b1:1f:83:61:df:17:fd:70:66:c9:cf:4a:5c:ce:
         78:2b:45:1b:c4:3a:c0:20:7b:1c:71:95:9e:73:d7:69:5e:9f:
         0e:ef:19:f7:a0:6a:32:1c:60:fc:e3:f7:6a:66:b1:4f:0b:f7:
         4c:03:bd:43:d1:21:66:d6:b1:bf:4f:e2:51:cc:e3:b4:1a:dc:
         3c:4e:87:54:34:67:83:71:70:3f:fb:1e:ea:94:78:f0:1e:2f:
         9b:d1:e6:a0:f3:03:b8:e6:ee:d8:fa:9a:d5:22:b0:e6:96:ba:
         3a:37:91:6a:20:cf:e2:bd:0e:26:00:37:26:85:0c:d2:1c:88:
         34:75:80:6c:f3:a5:c5:67:16:56:77:6e:19:dc:e0:f4:e9:92:
         1c:f1:bd:00:4e:19:ff:cc:ae:9c:34:0d:50:6e:81:84:2c:e9:
         b0:7c:ac:b1:b2:ce:1b:90:d3:f6:ca:89:55:b0:cc:12:49:89:
         5b:37:a0:d2:c6:11:c2:3d:b2:0e:3c:1d:e6:3e:ca:4c:71:1c:
         c4:db:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:49 2026 by rpki-client