Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MbcgVc__FUgUalGKFYlQq_6cT9c.roa
File:                     MbcgVc__FUgUalGKFYlQq_6cT9c.roa (raw, json)
Hash identifier:          cKbihIFFTmHJBlEfaMi8J8agyh9ADMOro1hl83zNdSk=
Subject key identifier:   31:B7:20:55:CF:FF:15:48:14:6A:51:8A:15:89:50:AB:FE:9C:4F:D7
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       7A
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MbcgVc__FUgUalGKFYlQq_6cT9c.roa
Signing time:             Tue 31 Mar 2026 08:32:20 +0000
ROA not before:           Tue 31 Mar 2026 08:32:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=31B72055CFFF1548146A518A158950ABFE9C4FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:a9:4f:cd:2c:80:a4:48:a7:9e:2a:61:18:
                    e1:ce:61:85:1e:17:71:6d:0e:70:b0:61:5d:7e:73:
                    6f:c7:82:9a:19:83:5f:8e:a5:cf:26:c0:b2:c8:a2:
                    d4:aa:cf:2d:76:26:94:c9:92:a4:06:40:32:91:03:
                    47:bb:b1:3e:75:e5:1e:81:67:41:d9:8b:3c:91:53:
                    e2:c9:d9:33:d1:8b:b3:a1:fa:c8:d5:70:3e:5f:02:
                    5f:92:b5:73:ba:ba:30:10:68:76:fd:3b:11:96:78:
                    6f:11:3a:a7:02:96:57:32:a4:9a:be:77:76:57:4b:
                    d2:fc:ef:25:2f:1b:57:ab:48:72:1f:a0:7c:3a:c6:
                    07:ca:ea:f3:db:93:f8:aa:a4:e5:24:83:08:46:e1:
                    d1:b6:1d:3c:67:ac:7f:df:e0:16:05:80:42:7b:1c:
                    66:6a:33:26:ba:cd:17:88:a8:04:b5:9d:33:c8:ba:
                    b1:b8:04:3f:f7:05:0e:ff:aa:6a:af:ed:44:9c:13:
                    45:1c:e4:49:4a:ca:ef:74:0b:ca:66:61:ef:18:5e:
                    bf:b9:4e:51:1d:fc:89:b1:cb:55:bd:ca:4b:76:83:
                    bc:09:9d:62:82:96:36:3e:9c:27:70:17:26:0b:8c:
                    7d:8d:97:f8:cb:df:e0:40:f3:19:83:83:b6:9d:c7:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:20:55:CF:FF:15:48:14:6A:51:8A:15:89:50:AB:FE:9C:4F:D7
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/MbcgVc__FUgUalGKFYlQq_6cT9c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:79:b5:0e:eb:71:e0:3e:8d:1f:22:27:aa:9e:b7:eb:7f:a4:
         ee:04:a1:5b:b4:3f:e7:d8:bc:4e:8d:64:cd:bf:8c:bf:75:d9:
         d9:6e:bf:e8:64:5e:d6:f7:cc:d0:84:45:b9:44:b1:e5:2c:45:
         ee:49:69:42:ff:76:b0:8f:29:85:e5:e9:e2:41:d4:d0:e5:21:
         91:07:c0:77:48:bf:af:36:38:c6:9f:51:4b:4a:66:17:2b:7e:
         d9:d0:b1:7f:d9:e9:e9:15:d7:3e:ec:e7:f7:7c:c6:10:a7:cd:
         dd:37:12:b8:a0:a0:90:e3:01:46:5a:75:ef:b2:74:3d:38:88:
         53:cf:2c:c4:ce:30:e0:fb:8c:44:84:c2:32:ec:d9:df:24:9c:
         6f:a8:da:bc:5c:97:95:84:96:88:1e:bb:51:58:42:5b:d8:bb:
         0a:c9:dc:2b:45:5b:d4:55:52:0a:00:96:b4:49:4d:0c:22:cc:
         77:93:fe:2e:19:d6:81:32:54:71:4d:36:eb:84:bd:ed:c2:8c:
         d7:e6:e6:84:55:a0:a0:9b:95:94:5f:08:ca:c7:5f:5b:80:40:
         48:1f:1f:3c:37:fe:b1:a8:c2:47:b8:2a:6f:b2:86:ef:e8:31:
         78:65:51:97:00:25:b8:fc:21:01:dc:c7:42:fb:2e:be:47:9b:
         b2:2b:21:5e
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI2MDMzMTA4
MzIyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzFCNzIwNTVDRkZGMTU0
ODE0NkE1MThBMTU4OTUwQUJGRTlDNEZENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ0PqU/NLICkSKeeKmEY4c5hhR4XcW0OcLBhXX5zb8eCmhmDX46l
zybAssii1KrPLXYmlMmSpAZAMpEDR7uxPnXlHoFnQdmLPJFT4snZM9GLs6H6yNVw
Pl8CX5K1c7q6MBBodv07EZZ4bxE6pwKWVzKkmr53dldL0vzvJS8bV6tIch+gfDrG
B8rq89uT+Kqk5SSDCEbh0bYdPGesf9/gFgWAQnscZmozJrrNF4ioBLWdM8i6sbgE
P/cFDv+qaq/tRJwTRRzkSUrK73QLymZh7xhev7lOUR38ibHLVb3KS3aDvAmdYoKW
Nj6cJ3AXJguMfY2X+Mvf4EDzGYODtp3H0BkCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBQxtyBVz/8VSBRqUYoViVCr/pxP1zAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzA0L01iY2dWY19fRlVnVWFsR0tGWWxRcV82Y1Q5Yy5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkAX7AoDANBgkqhkiG9w0BAQsF
AAOCAQEAtXm1Dutx4D6NHyInqp6363+k7gShW7Q/59i8To1kzb+Mv3XZ2W6/6GRe
1vfM0IRFuUSx5SxF7klpQv92sI8pheXp4kHU0OUhkQfAd0i/rzY4xp9RS0pmFyt+
2dCxf9np6RXXPuzn93zGEKfN3TcSuKCgkOMBRlp177J0PTiIU88sxM4w4PuMRITC
MuzZ3yScb6javFyXlYSWiB67UVhCW9i7CsncK0Vb1FVSCgCWtElNDCLMd5P+LhnW
gTJUcU0264S97cKM1+bmhFWgoJuVlF8IysdfW4BASB8fPDf+sajCR7gqb7KG7+gx
eGVRlwAluPwhAdzHQvsuvkebsishXg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:36 2026 by rpki-client