Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hebSpEEaPwGyM74JIRiMReBS2Rw.roa
File:                     hebSpEEaPwGyM74JIRiMReBS2Rw.roa (raw, json)
Hash identifier:          R8Iynl/SBIoY3D4fHCsMnqrYyXxqcAd7F4mBA3UKMrY=
Subject key identifier:   85:E6:D2:A4:41:1A:3F:01:B2:33:BE:09:21:18:8C:45:E0:52:D9:1C
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       67
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hebSpEEaPwGyM74JIRiMReBS2Rw.roa
Signing time:             Sun 01 Mar 2026 01:32:22 +0000
ROA not before:           Sun 01 Mar 2026 01:32:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=85E6D2A4411A3F01B233BE0921188C45E052D91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:6f:c6:aa:aa:16:87:b6:29:24:3e:76:47:
                    c1:8b:68:b3:8b:e1:75:e5:58:3f:8f:e7:7a:a7:27:
                    f9:3f:34:2f:12:ac:a7:ee:11:56:b3:f3:d5:bc:74:
                    1a:f6:3d:c5:5a:8b:c1:c8:be:c7:25:3a:43:99:d0:
                    29:db:70:89:25:ec:e6:e5:07:1b:61:c8:26:19:8f:
                    08:24:71:d8:a4:48:1b:8d:97:6b:42:69:6e:08:0c:
                    51:f8:fb:6e:f8:5e:8b:e0:27:01:f2:a5:d5:14:ee:
                    5a:8c:90:d0:a8:df:df:e5:cb:a9:a4:84:c3:ec:e3:
                    db:bd:c6:5d:04:23:1a:20:6a:73:4d:c0:67:e2:3a:
                    87:bb:19:f6:dc:64:bc:5d:5f:ce:1e:a2:ee:fa:8e:
                    26:07:04:89:ce:43:73:6a:45:48:54:85:41:32:ac:
                    dd:dc:94:12:ad:76:57:35:b4:c1:56:18:29:13:3c:
                    c6:2d:49:2f:50:95:d5:cf:d4:f3:2a:f5:8d:ff:cc:
                    7d:f1:0e:76:23:71:6c:93:10:b9:e6:8a:2a:fe:74:
                    c3:cd:69:29:db:dd:ec:cf:59:98:8c:66:7a:b6:0b:
                    40:06:03:4e:16:cd:90:ee:7d:cc:6d:72:10:fa:16:
                    c4:92:58:c6:3c:a4:39:f8:03:79:56:b0:64:46:77:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E6:D2:A4:41:1A:3F:01:B2:33:BE:09:21:18:8C:45:E0:52:D9:1C
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hebSpEEaPwGyM74JIRiMReBS2Rw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:ae:01:f0:65:1b:5e:ed:4e:68:f3:8c:63:d9:0b:eb:82:
         66:75:ae:19:fd:65:76:3f:f0:95:0f:5c:66:70:45:1c:7d:aa:
         12:cb:68:85:ef:4a:bc:28:52:8f:cb:1a:34:79:74:ae:2c:91:
         3d:cf:54:0d:7c:ad:be:fd:52:e8:73:bc:75:35:cd:db:a6:85:
         88:ec:e0:50:f0:63:5d:3f:79:44:79:45:1e:63:37:6e:57:b1:
         82:cb:36:90:ee:69:b4:84:c0:70:ec:e1:b5:f1:50:66:ef:c6:
         99:b4:0c:4b:22:f3:8e:4f:0f:f3:92:60:29:a3:c9:45:29:b7:
         d0:74:f3:3e:9e:48:b7:26:f6:8f:3a:26:1d:b8:5e:c9:24:87:
         0e:3a:e5:a0:96:b3:31:b6:49:51:67:41:7f:83:1f:55:f0:fd:
         d3:fb:b4:0b:ea:a1:36:a1:28:1f:7f:52:58:66:e7:7c:34:49:
         8d:80:f8:5a:48:3c:97:72:82:f2:93:59:d1:b1:7d:ef:36:75:
         76:63:d0:f7:40:11:15:24:f5:dd:c9:d3:dc:de:4a:4a:a0:d6:
         e3:94:01:32:a1:da:bc:11:7d:74:55:a2:74:69:72:70:52:06:
         bb:e4:1f:7d:83:dc:70:46:5e:10:14:99:99:b9:1e:3d:01:15:
         a4:06:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:43 2026 by rpki-client