Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/WvpzK8EM5Zbx7mJtbj0pzx3wZkY.roa
File:                     WvpzK8EM5Zbx7mJtbj0pzx3wZkY.roa (raw, json)
Hash identifier:          7loCJTcj3g6PpU6zvDJiL2Nbh610YOmBFXFo4U9qgXM=
Subject key identifier:   5A:FA:73:2B:C1:0C:E5:96:F1:EE:62:6D:6E:3D:29:CF:1D:F0:66:46
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       74
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/WvpzK8EM5Zbx7mJtbj0pzx3wZkY.roa
Signing time:             Tue 31 Mar 2026 08:32:17 +0000
ROA not before:           Tue 31 Mar 2026 08:32:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5AFA732BC10CE596F1EE626D6E3D29CF1DF06646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:d7:f6:c5:de:5a:74:df:c8:da:68:9d:9a:
                    6b:b7:da:09:05:a7:85:3c:9c:f4:dc:bc:8a:d7:2c:
                    ba:c1:a9:92:3d:d5:a3:2f:0f:fb:93:9f:3e:2c:7e:
                    22:4a:bf:bb:85:a0:f8:ea:1b:7f:03:33:bd:42:44:
                    e2:43:92:13:1a:1d:4f:de:f3:2a:91:16:e0:a0:07:
                    8f:3f:06:62:ae:be:d4:9e:28:8a:91:7c:52:b7:3f:
                    0c:7b:b8:e2:a8:5e:2a:10:8d:25:2f:32:94:d7:92:
                    72:97:b9:63:d9:72:c4:af:e4:48:5f:81:4f:da:aa:
                    9b:28:83:c4:5c:4b:48:74:e3:90:02:d4:eb:c8:72:
                    5d:b9:f4:2b:fe:8a:eb:35:78:c8:26:15:ff:fa:da:
                    f4:9b:d5:aa:fa:9f:66:1a:e6:b8:90:58:db:3b:34:
                    49:5b:43:0e:19:25:65:44:70:94:d6:55:65:59:18:
                    6a:01:e9:76:88:16:0f:76:5f:55:89:92:11:bd:70:
                    82:09:4e:d3:fe:00:93:09:e5:b6:14:a7:01:76:8c:
                    e4:0e:c2:36:25:6f:d6:84:19:ef:f2:bc:26:3e:d9:
                    94:92:1e:6d:6c:f9:66:ae:da:64:e5:93:cf:77:9e:
                    35:9f:39:6b:7e:f9:cb:e4:d7:06:34:6e:d2:55:09:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:73:2B:C1:0C:E5:96:F1:EE:62:6D:6E:3D:29:CF:1D:F0:66:46
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/WvpzK8EM5Zbx7mJtbj0pzx3wZkY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:18:40:52:38:06:37:87:8b:82:26:22:ef:d6:9e:b4:61:8c:
         a1:16:a1:0a:12:09:39:99:c5:57:d7:bb:74:d0:41:ab:fe:50:
         36:7e:a2:8e:4d:72:29:c6:32:aa:42:73:9b:99:a8:cb:c7:54:
         17:7d:89:fa:ac:ed:d4:2a:8b:11:6a:b7:5d:26:e3:d4:e9:8e:
         38:b4:c4:67:cb:bb:e8:28:02:01:29:37:80:c8:54:0f:ca:8b:
         85:e6:93:7c:ad:8f:0b:a2:ee:3b:c4:4a:ad:96:aa:2b:10:9f:
         14:2d:fc:0c:03:35:3b:1b:00:22:85:8c:96:43:9a:48:95:3a:
         fc:d8:a1:23:9c:ea:f8:5f:9a:90:7a:cd:2b:75:95:d2:dd:43:
         b8:da:29:a3:4a:0c:16:90:f8:8f:23:28:b6:ee:77:7d:56:a5:
         f1:20:46:d4:58:02:d2:25:57:72:82:8f:76:e2:33:94:11:e8:
         ea:f8:70:0a:57:9e:bb:49:d1:22:be:19:21:0d:7d:9c:f3:9a:
         d8:da:77:67:03:e0:70:c0:b7:07:f4:41:f0:5f:c7:46:b4:54:
         ef:6a:e5:74:23:96:74:b5:56:b0:5f:c0:81:01:23:91:d4:3c:
         d2:f4:41:a3:bf:ce:6c:53:1d:6f:b6:49:99:8a:c4:8f:ee:74:
         0d:69:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:29 2026 by rpki-client