Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_QiZrhSClcZKPACU8RauN93_dX8.roa
File:                     _QiZrhSClcZKPACU8RauN93_dX8.roa (raw, json)
Hash identifier:          ou4Mw4Rh3Kfau/W0ktvRnjSqNbOGnYoLyaBlK5d0tDA=
Subject key identifier:   FD:08:99:AE:14:82:95:C6:4A:3C:00:94:F1:16:AE:37:DD:FF:75:7F
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       6C
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_QiZrhSClcZKPACU8RauN93_dX8.roa
Signing time:             Sun 01 Mar 2026 01:32:25 +0000
ROA not before:           Sun 01 Mar 2026 01:32:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FD0899AE148295C64A3C0094F116AE37DDFF757F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c1:5c:fa:69:8d:6a:d4:3b:a4:57:45:04:bf:
                    da:6f:6e:19:84:e0:2f:37:4f:fd:d3:a8:54:0d:04:
                    57:ac:78:6a:ab:8e:72:07:d4:6f:37:20:a1:9f:09:
                    59:c6:f9:ef:dd:0b:89:b9:a1:97:45:d0:46:d5:0f:
                    cb:8b:50:68:00:24:94:1a:b9:c6:12:9f:46:3c:6a:
                    22:73:59:2c:ff:ad:60:b3:5e:d4:a5:82:76:15:29:
                    db:67:ae:8e:aa:95:b6:e7:0a:ea:29:68:af:4f:e6:
                    24:fb:b5:43:0d:0a:18:6f:8c:28:1c:a5:7f:4d:a4:
                    36:3d:f4:63:78:7a:4c:0b:0c:ed:d1:dc:aa:8a:af:
                    a1:2c:4c:8c:be:c0:4a:28:4e:df:a0:63:e4:97:00:
                    88:47:29:84:6f:f1:c8:fe:69:49:42:55:cb:f5:12:
                    fc:f1:b9:18:ec:5a:18:3c:36:b0:45:83:77:df:bb:
                    9d:69:66:17:a3:11:82:b7:fb:4a:49:2d:0f:61:33:
                    81:60:ea:39:e5:5a:01:9b:3f:3c:d5:55:23:5c:f9:
                    a2:26:e6:1c:aa:6a:76:32:91:5b:c3:57:a7:60:fe:
                    8c:ec:88:95:05:89:84:16:bc:d7:b5:ab:4e:5e:44:
                    ec:5d:ce:db:ae:ea:9a:a5:f8:1a:fb:3c:34:ae:98:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:08:99:AE:14:82:95:C6:4A:3C:00:94:F1:16:AE:37:DD:FF:75:7F
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_QiZrhSClcZKPACU8RauN93_dX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:53:c3:cf:10:ef:23:c9:91:bb:be:89:4c:08:4c:c8:66:
         d3:71:3e:86:d0:dc:77:04:23:6e:cf:da:8c:2d:0a:2a:e4:fc:
         c9:32:8a:b3:ce:fb:f3:eb:59:00:f2:b8:4b:62:75:10:96:08:
         0c:4c:0e:13:90:73:21:5b:d4:4f:51:2f:23:a7:96:57:cf:b2:
         96:26:90:11:fc:7e:6f:df:7e:7b:fe:0b:5a:ce:b5:6d:45:fd:
         f5:13:ee:a1:fb:35:93:a6:7d:53:33:1a:63:70:94:0e:c9:62:
         7d:44:97:51:6e:47:ac:77:df:98:25:2b:ea:38:e5:47:22:78:
         8f:06:e1:fd:ce:9d:a4:23:ca:ff:e4:2f:ec:4d:5e:53:ab:8a:
         b4:db:7f:26:f4:53:ac:26:e6:85:dd:05:a5:28:ce:78:c2:eb:
         48:85:4e:d1:9b:8b:6d:3e:99:d3:ce:2f:c9:49:21:68:25:3e:
         8e:85:80:bf:72:fa:39:c7:4f:80:4f:f0:b1:6d:35:20:e2:65:
         a6:ec:bc:e2:76:0d:34:06:ed:01:ef:a2:97:48:71:58:e7:07:
         40:05:7c:be:d6:e9:a7:66:a6:a6:ad:8c:be:67:62:dd:4a:56:
         be:72:7c:7f:c4:e9:7e:97:20:80:09:61:cf:35:6e:d1:c7:23:
         8c:f8:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:10 2026 by rpki-client