Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8keg40YN_9Zph_QzvBW_ifFHyrA.roa
File:                     8keg40YN_9Zph_QzvBW_ifFHyrA.roa (raw, json)
Hash identifier:          gywmW/5lI/RODk63XIcVYayMSWO8r2SNkuW4KpnNeKs=
Subject key identifier:   F2:47:A0:E3:46:0D:FF:D6:69:87:F4:33:BC:15:BF:89:F1:47:CA:B0
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       7E
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8keg40YN_9Zph_QzvBW_ifFHyrA.roa
Signing time:             Tue 31 Mar 2026 08:32:22 +0000
ROA not before:           Tue 31 Mar 2026 08:32:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F247A0E3460DFFD66987F433BC15BF89F147CAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:d4:d1:ac:68:fb:62:54:e7:aa:99:fe:6b:
                    99:79:8a:4b:23:98:f0:92:42:43:55:95:5d:f0:1e:
                    8b:52:19:8d:e0:f0:62:23:4f:3d:60:b1:9d:88:3c:
                    a7:e0:52:70:97:2c:b7:d7:d8:91:3f:53:b2:5f:3e:
                    9e:ad:2f:18:7c:9c:da:5f:93:cf:80:1f:be:79:36:
                    fd:f4:55:f9:8c:a5:67:70:0b:38:c1:1b:e2:a7:1b:
                    b4:0d:20:b8:d8:4a:b2:ac:a4:dd:2b:33:66:90:75:
                    09:06:f0:8c:90:69:51:45:b2:f4:28:ed:0c:dd:de:
                    60:22:98:d1:53:7a:ac:44:19:2e:1a:a8:59:8a:95:
                    7d:fe:ec:07:29:96:5b:02:05:90:fc:4c:ec:31:c8:
                    92:cd:73:10:20:98:2c:53:d3:1f:d8:93:6d:be:ca:
                    91:9e:27:9c:c6:38:b7:6c:a5:70:e6:37:00:f3:f7:
                    5d:fd:7a:e5:e1:e9:ef:6d:ce:58:9f:e2:1e:8a:d5:
                    8d:29:ec:3d:64:56:a1:46:f6:d8:67:7c:9c:df:f0:
                    3b:ed:71:22:30:2f:29:af:e8:34:09:d0:b9:ca:2f:
                    fc:b2:44:32:b9:15:a0:ea:48:8d:c6:c1:f0:85:d8:
                    33:e9:5f:13:01:4f:1f:41:fd:2c:cd:1e:b5:bc:51:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:47:A0:E3:46:0D:FF:D6:69:87:F4:33:BC:15:BF:89:F1:47:CA:B0
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/8keg40YN_9Zph_QzvBW_ifFHyrA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:39:41:4a:89:fa:50:df:f2:52:a1:71:30:6e:08:ba:59:ef:
         c2:ad:c5:a2:4d:23:20:6c:56:3b:d6:87:0a:06:e8:96:25:da:
         83:42:03:e2:82:8c:43:47:cf:3a:ba:d0:fc:67:0b:fe:1c:e5:
         fe:09:f5:96:7a:18:54:57:62:e4:d8:3e:4b:d0:5d:d6:6d:8e:
         94:73:ff:dc:9b:d0:ba:b2:8e:7e:ab:df:f6:2a:31:78:0f:45:
         41:8f:36:cb:6e:58:96:9f:7e:94:ab:d3:2f:97:df:73:d0:29:
         ea:e2:fe:13:7a:ea:48:a3:93:14:af:a1:4b:f4:07:e2:ab:9c:
         58:d1:68:76:71:7f:d0:57:fa:6e:14:b1:9c:ad:e2:5e:15:88:
         84:e0:9a:df:ae:5a:2d:88:08:30:45:65:b4:df:be:d7:ef:5f:
         c3:01:23:b2:ee:c6:37:36:5d:b6:83:ab:c5:9d:66:20:e4:06:
         8e:59:8c:95:13:35:2e:dc:70:69:30:ac:e8:07:72:81:a8:69:
         45:34:73:0c:88:da:c7:ae:b7:45:a7:1f:8f:48:40:4f:28:8e:
         0d:1c:eb:ee:33:a6:9f:93:50:fd:90:9e:5d:60:b5:4e:bf:6c:
         cb:d2:2c:c8:da:d8:64:e0:58:c2:ac:14:e0:d0:89:08:70:03:
         91:50:3e:3e
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI2MDMzMTA4
MzIyMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjI0N0EwRTM0NjBERkZE
NjY5ODdGNDMzQkMxNUJGODlGMTQ3Q0FCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKHR1NGsaPtiVOeqmf5rmXmKSyOY8JJCQ1WVXfAei1IZjeDwYiNP
PWCxnYg8p+BScJcst9fYkT9Tsl8+nq0vGHyc2l+Tz4Afvnk2/fRV+YylZ3ALOMEb
4qcbtA0guNhKsqyk3SszZpB1CQbwjJBpUUWy9CjtDN3eYCKY0VN6rEQZLhqoWYqV
ff7sBymWWwIFkPxM7DHIks1zECCYLFPTH9iTbb7KkZ4nnMY4t2ylcOY3APP3Xf16
5eHp723OWJ/iHorVjSnsPWRWoUb22Gd8nN/wO+1xIjAvKa/oNAnQucov/LJEMrkV
oOpIjcbB8IXYM+lfEwFPH0H9LM0etbxR3d0CAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBTyR6DjRg3/1mmH9DO8Fb+J8UfKsDAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzA0LzhrZWc0MFlOXzlacGhfUXp2QldfaWZGSHlyQS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkAX7A4DANBgkqhkiG9w0BAQsF
AAOCAQEAdjlBSon6UN/yUqFxMG4Iulnvwq3Fok0jIGxWO9aHCgboliXag0ID4oKM
Q0fPOrrQ/GcL/hzl/gn1lnoYVFdi5Ng+S9Bd1m2OlHP/3JvQurKOfqvf9ioxeA9F
QY82y25Ylp9+lKvTL5ffc9Ap6uL+E3rqSKOTFK+hS/QH4qucWNFodnF/0Ff6bhSx
nK3iXhWIhOCa365aLYgIMEVltN++1+9fwwEjsu7GNzZdtoOrxZ1mIOQGjlmMlRM1
LtxwaTCs6AdygahpRTRzDIjax663Racfj0hATyiODRzr7jOmn5NQ/ZCeXWC1Tr9s
y9IsyNrYZOBYwqwU4NCJCHADkVA+Pg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client