Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/g6zj7LV2T0ATqRDLwqQsELBpLpo.roa
File:                     g6zj7LV2T0ATqRDLwqQsELBpLpo.roa (raw, json)
Hash identifier:          FfxG9rGEqvSzxhpEx8p4m49be+FBzvXFeejEWPrpxQM=
Subject key identifier:   83:AC:E3:EC:B5:76:4F:40:13:A9:10:CB:C2:A4:2C:10:B0:69:2E:9A
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       7F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/g6zj7LV2T0ATqRDLwqQsELBpLpo.roa
Signing time:             Tue 31 Mar 2026 08:32:23 +0000
ROA not before:           Tue 31 Mar 2026 08:32:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=83ACE3ECB5764F4013A910CBC2A42C10B0692E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:23:54:31:f6:b7:42:1e:67:84:fb:74:d3:
                    66:10:1c:f0:56:b9:b0:2c:ab:7c:b7:96:56:0d:78:
                    65:44:f2:ec:46:4a:78:1c:47:8e:aa:13:0b:97:eb:
                    b4:d6:aa:a3:4e:0e:0e:99:f0:c5:ac:75:91:43:d2:
                    a9:88:d7:38:4e:b2:73:bc:d5:cf:2d:79:b6:e7:0a:
                    8a:19:e5:0f:eb:9b:93:3f:49:58:c6:5f:80:33:19:
                    35:05:15:8c:aa:0a:ce:8b:0d:43:9b:9e:99:6b:01:
                    19:b2:ad:fa:05:b7:07:2d:7f:46:c8:31:a9:8f:7c:
                    c3:5d:8a:88:f4:a2:cf:79:d9:23:4a:70:c7:33:6f:
                    39:24:80:a7:7f:88:87:23:a0:c3:5c:36:a3:f4:75:
                    6e:fd:9b:fd:99:6c:ed:6e:a1:ed:48:6c:9e:9c:fb:
                    8f:cb:e4:5c:71:13:ef:16:34:09:21:9a:52:05:90:
                    96:8f:08:61:ce:b2:76:aa:42:7a:07:0e:bd:cd:b8:
                    9d:2d:44:71:7e:28:ac:b4:26:48:28:e5:95:31:87:
                    5f:ef:f7:aa:46:31:ed:9e:ab:a8:7a:4e:b5:83:7f:
                    d7:73:69:00:d3:bf:8d:bf:1d:c2:ff:a4:9e:0b:96:
                    2c:bd:22:96:2c:01:d5:c0:ab:ad:b3:59:fb:ae:2d:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:E3:EC:B5:76:4F:40:13:A9:10:CB:C2:A4:2C:10:B0:69:2E:9A
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/g6zj7LV2T0ATqRDLwqQsELBpLpo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:f6:43:5e:47:96:08:09:e3:47:34:f5:0b:0d:51:05:eb:
         e3:bb:3e:06:36:68:25:1a:df:7a:55:84:64:10:87:12:28:31:
         c7:0e:f4:6a:a4:a0:9c:fd:ba:eb:6e:68:51:98:46:62:e5:fe:
         d5:5c:75:24:a5:33:c5:ea:68:ef:fd:eb:46:3e:11:82:90:96:
         56:30:8e:97:2b:81:57:f3:c6:15:45:93:4c:fd:c4:cb:fa:e3:
         07:5b:e3:3c:e9:8a:ab:a6:5b:4b:ee:9e:88:b3:c4:3b:6f:ef:
         fc:b0:b4:9c:d3:10:44:1a:1e:20:1e:12:2e:0d:d5:b2:bc:f0:
         3c:f7:3e:49:f1:c4:c3:34:a1:38:bd:92:53:04:52:62:8c:2d:
         f6:6b:28:80:b6:a6:a9:5d:c2:22:8c:aa:82:a4:19:88:b6:52:
         5b:9b:48:e1:44:71:59:47:76:b7:fd:60:ca:5b:19:9b:6a:20:
         70:5f:28:d1:4f:40:2b:0b:9f:9a:96:43:7f:23:ba:36:ca:1f:
         d2:b6:9f:53:50:6c:50:4f:2d:30:0b:2f:89:c2:35:65:0c:de:
         6f:8f:70:e0:e7:66:66:1b:b4:6c:02:09:d2:f7:5f:eb:b7:2d:
         aa:63:80:99:06:5e:5f:ac:bd:3f:da:2b:cc:1e:92:9d:38:32:
         50:ce:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:32 2026 by rpki-client