Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ot6tdB65vfw4mMxzqPoTOp-W9wc.roa
File:                     ot6tdB65vfw4mMxzqPoTOp-W9wc.roa (raw, json)
Hash identifier:          qWN2uhWuR63VqAwFCUgTpNh5cFPzwGlbSJjPdv55Sww=
Subject key identifier:   A2:DE:AD:74:1E:B9:BD:FC:38:98:CC:73:A8:FA:13:3A:9F:96:F7:07
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       6B
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ot6tdB65vfw4mMxzqPoTOp-W9wc.roa
Signing time:             Sun 01 Mar 2026 01:32:24 +0000
ROA not before:           Sun 01 Mar 2026 01:32:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A2DEAD741EB9BDFC3898CC73A8FA133A9F96F707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:9a:ce:88:b6:08:0b:80:ab:fb:23:eb:a0:
                    84:b3:ea:2b:28:e7:73:b7:16:71:e0:a1:52:d3:51:
                    74:b9:b2:e2:8d:a9:b8:78:f5:79:6f:ed:7b:c3:29:
                    8c:5f:09:35:47:59:ac:4e:49:75:da:68:02:b4:08:
                    d5:84:ad:53:c3:65:f9:f5:1d:6f:81:c7:8d:c4:bf:
                    fb:a1:d7:41:a4:57:77:17:c4:d4:b2:96:02:4c:cf:
                    87:a1:8e:9d:e2:ac:e0:28:ac:47:9c:dd:aa:45:0b:
                    3c:aa:e9:5d:19:a7:52:18:72:cd:0b:93:cc:33:57:
                    26:af:8a:5d:dd:d6:b5:84:25:d8:8d:1e:c2:a2:e3:
                    ff:3b:78:3a:42:a7:f6:12:24:59:11:7e:de:60:dc:
                    dc:56:80:28:b4:e9:a5:a3:be:98:37:f3:e8:48:3a:
                    87:20:c1:27:ec:70:5c:aa:07:58:ae:4b:4d:ab:25:
                    48:89:27:68:64:2b:84:c4:01:01:52:eb:d3:8b:c2:
                    f2:e9:31:87:e4:f4:05:c1:7c:0f:af:3b:4c:ec:64:
                    db:c4:9c:92:92:de:6c:b0:17:4e:ff:97:0f:82:70:
                    a4:72:94:f0:52:ef:ac:03:fe:f7:70:1e:e0:16:6d:
                    ea:21:1a:a0:c8:01:6a:84:03:44:24:7a:61:23:16:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DE:AD:74:1E:B9:BD:FC:38:98:CC:73:A8:FA:13:3A:9F:96:F7:07
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ot6tdB65vfw4mMxzqPoTOp-W9wc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:1b:9a:81:5e:b9:90:dc:ae:55:f1:9e:95:61:e2:0c:45:
         7b:b0:33:9e:54:c2:41:b2:ac:ea:cf:7a:35:0e:d5:ef:e1:7d:
         6e:7e:45:4c:40:b4:1c:b6:13:9c:bf:78:a6:68:b3:0b:04:7d:
         67:21:6e:6f:4a:6e:3f:bd:4f:60:e0:8d:24:01:fe:70:cd:57:
         48:7a:cb:91:bc:6c:9e:5b:fe:f4:6a:1e:86:b5:b9:8e:22:5f:
         ec:40:b5:23:b1:52:f0:cf:e3:0f:7d:c9:07:e3:f4:8e:a1:2d:
         78:3c:90:86:b0:f2:9d:ba:94:95:fa:7c:9b:d7:3d:0e:f8:84:
         89:83:a4:7c:df:0c:90:41:93:81:89:d8:1a:30:f4:ed:07:55:
         60:a5:72:79:98:d5:70:43:4f:84:cb:69:98:f3:45:8b:1d:62:
         2b:73:68:93:53:b7:fe:88:ac:e8:42:91:5b:83:5e:df:03:13:
         c9:6b:3a:8f:a2:09:ee:37:3c:e4:0c:ab:54:96:da:30:d1:7c:
         69:9f:c0:5d:64:a3:61:1b:f1:25:12:1b:16:88:0b:87:01:4d:
         88:95:db:de:d8:ea:7c:c3:9b:09:8f:f5:f4:1e:64:49:74:a2:
         67:6a:1e:8d:20:3f:b5:38:95:35:5e:4d:d1:50:ec:c0:ba:b5:
         eb:90:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:05:47 2026 by rpki-client