Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Emb0Xz1tMltXser07d1OjL4tnZE.roa
File:                     Emb0Xz1tMltXser07d1OjL4tnZE.roa (raw, json)
Hash identifier:          q4/kY/2l+Wpnp+6ayy7RnaXWQXHQlysvuknHrpxbOk4=
Subject key identifier:   12:66:F4:5F:3D:6D:32:5B:57:B1:EA:F4:ED:DD:4E:8C:BE:2D:9D:91
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       75
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Emb0Xz1tMltXser07d1OjL4tnZE.roa
Signing time:             Tue 31 Mar 2026 08:32:18 +0000
ROA not before:           Tue 31 Mar 2026 08:32:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1266F45F3D6D325B57B1EAF4EDDD4E8CBE2D9D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:2e:67:b5:c3:f3:f5:a3:ec:48:5b:d1:6e:
                    93:79:67:53:43:49:ee:1b:3c:b6:e5:2e:3d:ac:cf:
                    9f:3b:d2:e4:08:30:8f:5c:a3:2b:01:1b:95:1d:46:
                    7e:62:cc:25:5f:6b:35:e6:29:a6:19:48:fc:e3:93:
                    6d:e6:0d:61:b2:9d:f4:75:ad:a8:e5:15:78:9a:53:
                    ca:ec:3f:af:de:84:b8:ac:88:86:a7:fa:d3:7e:d4:
                    58:49:11:b8:92:16:fc:c3:cc:26:dc:94:a0:f0:0a:
                    b5:0b:4e:20:c2:e0:4a:5e:17:50:4a:0b:1a:fb:fd:
                    92:b3:17:94:13:9c:97:90:0c:d4:46:4f:49:4d:cf:
                    69:f9:e9:97:10:e7:a9:23:8e:15:39:17:cd:b6:0f:
                    47:8c:3a:af:84:25:1b:f4:50:28:c9:29:c3:91:f4:
                    92:45:78:09:10:fc:42:70:c9:60:c7:1c:df:e5:ca:
                    c1:06:23:a4:a1:57:5d:6a:d6:1b:ac:e2:a9:a8:1c:
                    f0:ee:0b:5e:38:26:65:25:21:ed:2d:cb:f4:cb:20:
                    fb:7d:c7:59:f7:08:2e:69:b7:9f:b9:04:5d:94:f6:
                    00:ea:b7:10:dc:4b:2c:69:a2:26:89:06:e1:67:0d:
                    f2:07:e3:1e:ea:09:80:67:ac:6d:a4:2f:f7:c6:ab:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:66:F4:5F:3D:6D:32:5B:57:B1:EA:F4:ED:DD:4E:8C:BE:2D:9D:91
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Emb0Xz1tMltXser07d1OjL4tnZE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:7f:51:02:12:1a:d5:a1:f5:49:82:43:77:85:d3:09:91:
         88:8c:4a:0e:18:65:49:29:3d:f7:15:87:cc:41:19:ba:f6:3f:
         cb:ce:59:63:58:08:d0:9a:88:a6:1c:37:70:9b:94:bc:b5:e5:
         8f:31:b1:7a:08:fb:2c:21:ef:02:dd:9f:68:50:db:45:16:9f:
         3d:a1:e4:fb:3e:67:3c:bf:81:32:0f:c3:d6:90:ee:35:06:7f:
         ae:90:80:4d:67:13:27:a0:af:fe:26:b7:df:05:4c:15:85:a5:
         bd:ea:17:d4:4e:b8:05:6f:fa:e2:9b:b1:5f:41:4d:5c:23:16:
         d8:0f:b9:17:2a:f1:cf:f1:b3:57:2b:77:3d:6f:d6:2f:35:4a:
         5b:6d:51:cd:f8:8b:e0:b9:82:2f:2d:36:cc:ea:9f:99:df:92:
         fa:fc:53:5a:b0:fb:37:6d:17:70:83:82:69:47:63:8d:f5:92:
         dc:4a:e1:46:e4:74:14:58:44:04:7d:e9:2b:d4:22:e5:82:54:
         4d:33:3d:f5:3f:f9:6d:96:b1:6f:a6:92:46:00:3d:06:ec:3c:
         5c:1b:cc:2e:15:54:ff:cc:2e:65:cb:35:08:ec:17:76:89:c2:
         29:36:1f:ef:8a:8c:37:03:16:c3:eb:7b:79:34:51:a5:57:83:
         24:e6:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client