Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tuCu8LVVcaudPCyQ4tChglnma80.roa
File:                     tuCu8LVVcaudPCyQ4tChglnma80.roa (raw, json)
Hash identifier:          bf63UeWBnJbCDmqHoYV3Dbd+m5q6QYZO4Ii/qmJlfd8=
Subject key identifier:   B6:E0:AE:F0:B5:55:71:AB:9D:3C:2C:90:E2:D0:A1:82:59:E6:6B:CD
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       65
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tuCu8LVVcaudPCyQ4tChglnma80.roa
Signing time:             Sun 01 Mar 2026 01:32:20 +0000
ROA not before:           Sun 01 Mar 2026 01:32:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B6E0AEF0B55571AB9D3C2C90E2D0A18259E66BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:d6:86:a5:f5:b6:da:46:58:79:91:80:90:
                    b5:e6:69:d7:b9:8b:50:ae:80:b0:a0:80:6a:a6:b3:
                    83:5b:18:80:50:e6:d5:21:5a:a2:1d:01:7e:68:a8:
                    ab:bc:5b:ec:fd:50:c7:c5:7d:e1:e4:5c:4a:99:fe:
                    7f:5f:60:37:c6:15:60:f5:d7:4d:9c:07:96:cf:9f:
                    35:f4:4b:40:a3:8f:52:e9:91:fa:17:be:af:bf:e7:
                    d5:f6:2a:b2:21:fa:1e:95:ba:7d:de:6b:c8:ab:9e:
                    07:0b:56:f3:a5:62:79:76:ab:be:f7:bb:f2:b2:ad:
                    9b:e8:8d:c5:5f:e5:c6:64:a7:86:06:d3:98:ef:42:
                    49:fa:bc:3c:6a:01:31:4c:aa:90:19:35:7e:5c:27:
                    c3:19:54:46:60:b2:44:d3:e0:ed:17:e3:0a:2a:6c:
                    d3:e7:4c:a4:34:86:04:26:ee:8a:9e:fc:93:8c:00:
                    b5:18:ff:c0:f4:c2:6d:3b:17:04:ec:da:be:0b:57:
                    47:01:ef:53:48:ff:81:52:f0:85:c2:2d:dc:6a:28:
                    93:d5:22:b1:fc:0f:e3:b9:46:22:a0:ec:c6:ba:1e:
                    6a:44:bf:dd:a7:9c:23:51:7b:0d:95:84:7e:9c:53:
                    cf:a4:8e:ae:1d:89:2a:04:7d:01:a1:9d:11:4a:b8:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:AE:F0:B5:55:71:AB:9D:3C:2C:90:E2:D0:A1:82:59:E6:6B:CD
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tuCu8LVVcaudPCyQ4tChglnma80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:8f:8d:89:21:c0:7d:af:c5:99:0d:ba:64:5c:e2:df:e4:
         04:be:50:bf:90:49:af:ec:1f:57:42:04:60:97:b7:6e:5f:88:
         be:79:05:dd:19:9c:c9:af:42:53:f7:72:2a:32:d7:fd:d7:d1:
         69:a3:8a:8e:4d:53:51:64:da:a4:b1:f8:f8:04:d6:c5:62:ce:
         12:22:14:ae:55:51:1b:aa:04:16:66:2a:b5:83:70:ec:56:ce:
         df:dc:e0:88:fc:6b:2c:53:0b:6f:3c:91:76:36:fe:80:b6:b1:
         6e:ca:41:2f:a9:1b:1f:8f:50:eb:b4:9c:bb:6b:8f:8c:16:3f:
         62:13:30:21:df:4a:b2:ce:bc:97:99:6e:44:75:76:44:9d:35:
         d7:e8:23:6c:d2:77:82:84:bd:b2:b8:6c:ec:5b:ee:45:dc:92:
         85:eb:2f:57:bc:d2:c6:44:b3:06:ed:53:fc:a0:05:7d:56:d3:
         9f:64:05:f9:41:76:be:4e:1b:d9:26:dc:ef:91:fb:50:39:d4:
         a1:67:f6:80:8c:63:52:65:b9:ed:2d:c4:f9:39:d3:6b:67:66:
         1c:d5:50:16:fd:ab:f2:f0:bd:7e:18:41:68:7c:c5:26:6e:c6:
         21:ca:9e:21:0c:7c:42:7d:a8:64:c2:ac:44:c2:0a:92:6f:9f:
         04:f8:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:15 2026 by rpki-client