Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hxks5l5nPXY6BWw07RNnLF5K9sg.roa
File:                     hxks5l5nPXY6BWw07RNnLF5K9sg.roa (raw, json)
Hash identifier:          BOLal1AwwQrRTdIQmE0miK/rSG9Nb4OfMwQXJWD8c6s=
Subject key identifier:   87:19:2C:E6:5E:67:3D:76:3A:05:6C:34:ED:13:67:2C:5E:4A:F6:C8
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       72
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hxks5l5nPXY6BWw07RNnLF5K9sg.roa
Signing time:             Tue 31 Mar 2026 08:32:17 +0000
ROA not before:           Tue 31 Mar 2026 08:32:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar 31 08:32:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=87192CE65E673D763A056C34ED13672C5E4AF6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:33:d1:33:70:87:53:dc:e6:40:5b:95:64:
                    1c:f6:dd:5f:a2:a2:13:32:a2:84:98:63:70:c4:3b:
                    db:0a:2f:ae:89:2c:75:2f:38:79:be:5d:0c:38:ff:
                    fe:ae:15:50:4d:a0:44:5c:82:36:bd:3b:cc:a7:9e:
                    35:71:8d:a7:a6:bc:06:e0:97:d7:ef:85:06:21:53:
                    0f:91:c5:4b:86:79:f9:01:7a:1d:e5:27:54:a2:a6:
                    a5:dd:66:6c:85:e2:f8:44:c5:54:d6:14:a0:39:74:
                    7f:80:93:e3:8b:c4:58:d1:ef:93:fd:55:d0:09:b0:
                    c6:08:59:28:01:09:f3:28:fd:6a:0d:91:14:ac:ad:
                    46:97:41:27:7e:07:c9:3a:6c:bc:33:ca:e9:23:c6:
                    c5:a6:46:35:2e:0c:a8:c1:3e:5f:65:77:9e:74:da:
                    05:7c:27:e8:8a:34:98:fe:76:43:7c:b7:9f:2a:9d:
                    92:ea:3a:88:4b:b2:18:87:9a:2b:6a:93:31:ff:70:
                    ae:78:0d:d0:7d:ed:aa:9a:f3:7b:52:14:7c:54:8b:
                    f8:90:d8:ae:92:64:5c:75:65:82:60:5c:68:c9:fe:
                    84:2c:00:8f:6f:7f:ce:71:ac:34:f0:e8:3a:b0:12:
                    6c:d2:ff:4e:cc:37:97:95:01:26:7b:69:f3:89:a7:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:19:2C:E6:5E:67:3D:76:3A:05:6C:34:ED:13:67:2C:5E:4A:F6:C8
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/hxks5l5nPXY6BWw07RNnLF5K9sg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:62:96:5e:e2:6c:9c:b4:f3:dd:66:de:c1:5a:47:ee:cc:
         b4:eb:85:bf:2a:29:39:ce:4b:03:55:c3:2e:12:47:ea:3c:cd:
         e1:0c:5c:be:4f:bc:f5:a8:94:81:13:50:c3:38:5d:a6:e8:98:
         96:ee:85:4f:c8:21:34:52:68:45:4b:9c:d5:f3:76:ae:0b:72:
         72:b7:9e:ca:5b:34:35:0a:e7:b8:73:7e:c5:56:14:9e:36:50:
         2f:ed:05:e7:a3:32:b4:63:df:57:58:2f:95:f9:8f:dc:fd:42:
         2c:06:30:10:26:c2:70:f6:80:a0:38:7b:a4:7a:74:33:82:7f:
         9d:0f:da:b1:c3:91:3b:28:f7:16:71:b9:ce:33:2e:de:c7:4c:
         b4:8d:7d:4c:3c:17:1f:ca:43:85:4a:0b:bf:80:27:2c:d1:39:
         23:a8:1e:85:a2:b9:eb:fe:b4:fd:4b:67:8e:9e:bc:7a:16:2c:
         d4:88:50:61:09:42:dd:13:5f:55:d4:f8:56:9c:00:bd:f9:a2:
         a4:96:5a:0b:42:f4:ba:e1:90:39:93:c5:57:dc:3f:4b:c5:e8:
         24:63:c6:04:a1:f4:88:02:d0:88:eb:89:4a:cf:d0:75:9a:06:
         84:40:b3:5d:12:1a:0c:48:d1:5f:f3:28:aa:2d:2a:c5:06:28:
         13:93:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client