Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa
File:                     ONB76fVjhWcxTVC00qKqCwx-BOA.roa (raw, json)
Hash identifier:          GRvRUbcopNnrBQM26QBEEXyEvo9sdCwxb6BCtjXVwDk=
Subject key identifier:   38:D0:7B:E9:F5:63:85:67:31:4D:50:B4:D2:A2:AA:0B:0C:7E:04:E0
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       79
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa
Signing time:             Tue 31 Mar 2026 08:32:20 +0000
ROA not before:           Tue 31 Mar 2026 08:32:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=38D07BE9F5638567314D50B4D2A2AA0B0C7E04E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:53:7d:1d:d3:b3:60:b2:f0:79:98:45:54:
                    9f:aa:74:9c:ba:8b:f4:86:21:08:8a:3f:8c:06:3b:
                    b9:6f:0f:8d:bb:74:28:75:77:4b:65:07:c9:15:13:
                    53:45:17:cd:21:76:09:68:72:5c:76:a4:9d:53:ea:
                    81:54:a0:e9:3f:cc:c7:84:5b:a1:40:07:1c:87:48:
                    29:4d:8e:dd:0d:16:2e:87:b1:8f:49:2d:53:1c:fd:
                    a1:34:65:99:72:6b:db:f1:fa:38:fd:d9:4a:f0:ed:
                    08:3e:96:59:a9:ab:4f:67:ad:58:7f:2a:ae:48:62:
                    3d:3e:9f:bf:67:4e:77:d9:62:56:f0:d1:81:d5:85:
                    d3:34:7c:d0:d1:55:0d:f5:24:8f:4a:b8:62:74:77:
                    96:19:8d:8a:cc:b5:a5:fe:87:d0:91:4a:5f:e8:53:
                    ad:64:96:7e:d3:f6:ac:08:5b:13:dd:1f:7e:e6:db:
                    3e:0a:33:d1:62:43:4d:8e:08:76:1a:2a:49:68:f9:
                    c5:0a:f7:c4:d1:d8:bb:ff:dd:db:36:b6:26:fc:ba:
                    9f:18:12:6d:94:6a:79:f4:e1:ee:28:df:5f:7c:c8:
                    43:9c:59:8d:3c:2d:9e:08:b9:2a:a0:c0:60:6d:18:
                    72:d9:67:64:1b:4d:fb:26:f1:cd:b4:fc:2b:9a:37:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D0:7B:E9:F5:63:85:67:31:4D:50:B4:D2:A2:AA:0B:0C:7E:04:E0
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:18:0b:e6:39:a7:94:9f:8e:a6:71:25:84:ee:bf:95:84:
         f0:11:90:4e:9f:4e:3c:bb:a6:e9:cb:d7:a2:f6:e9:93:6c:44:
         13:b0:f3:32:ae:c4:db:28:91:90:05:33:e4:38:5b:c3:9f:06:
         c6:4b:69:7c:5c:31:b7:bc:5a:3c:02:21:e9:7b:88:8d:09:42:
         f4:6d:5a:96:d9:42:87:99:6e:ec:49:b1:75:ff:72:63:16:ea:
         cf:a6:fa:a7:63:8e:84:77:bb:a0:24:fd:dd:c3:68:b5:28:66:
         3f:11:51:58:de:9a:42:0f:84:48:6f:b1:02:33:78:b3:84:cb:
         fa:68:79:e0:9b:14:ab:24:76:23:c8:a3:11:4d:a4:e4:71:39:
         88:37:1a:84:4c:15:8e:6a:b0:aa:b7:ac:ae:f2:60:5b:29:cc:
         90:e3:f3:10:23:49:06:b3:9e:88:c0:1a:f4:6a:61:f1:01:86:
         90:66:ef:06:eb:38:b6:ba:77:64:82:ec:fe:78:df:11:62:3b:
         84:05:3b:ff:51:63:79:72:28:71:3e:78:a5:3e:9c:30:63:84:
         51:b9:42:9c:79:33:67:a4:9d:9b:2b:4d:93:bc:cf:1a:89:4b:
         f9:fe:4a:15:80:8b:af:53:12:72:ca:21:26:d6:b0:34:78:b2:
         32:16:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:09 2026 by rpki-client