Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/bVe-9uQrsl9zu79yd0ZTFJnGZoU.roa
File:                     bVe-9uQrsl9zu79yd0ZTFJnGZoU.roa (raw, json)
Hash identifier:          Ica2+nZEc58GYnuUnbyOumj9ei5ZZni7CTnnYijfEuY=
Subject key identifier:   6D:57:BE:F6:E4:2B:B2:5F:73:BB:BF:72:77:46:53:14:99:C6:66:85
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       64
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/bVe-9uQrsl9zu79yd0ZTFJnGZoU.roa
Signing time:             Thu 13 Aug 2026 10:11:22 +0000
ROA not before:           Thu 13 Aug 2026 10:11:22 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     45674
IP address blocks:        2001:260:321::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Aug 13 10:11:22 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=6D57BEF6E42BB25F73BBBF727746531499C66685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:70:f0:9b:4c:89:62:de:86:4b:95:17:04:
                    42:7f:30:1d:10:d9:e7:2a:9d:6d:60:6e:48:36:f2:
                    91:2e:aa:21:24:7c:11:4c:30:c5:1a:a3:46:a5:29:
                    b0:00:51:3f:d0:f1:bd:46:4a:4f:ab:7a:6e:9b:ad:
                    17:57:c2:d2:fe:be:55:eb:57:74:dc:fc:36:aa:86:
                    33:12:d1:2b:d3:b4:c0:a7:37:99:44:3a:95:30:cd:
                    70:d9:0a:66:ce:93:f9:94:5e:28:e3:e2:f4:42:79:
                    86:0d:3b:76:48:3b:93:87:72:4a:75:d1:7b:19:56:
                    3c:e2:33:20:fe:77:b7:9a:ac:7c:36:39:95:27:18:
                    ce:44:b3:51:4d:f4:5d:56:85:61:2a:c8:e8:62:d4:
                    d2:f7:27:f6:f4:05:ca:29:e4:d9:cf:71:05:a2:f7:
                    af:17:53:97:70:72:c6:71:01:87:f9:2e:6a:95:99:
                    fc:5b:f4:d4:13:e3:6d:3f:87:74:70:41:6e:3c:c4:
                    35:ff:84:4e:74:d8:97:d1:a1:85:54:16:b5:05:46:
                    3e:de:ec:76:4e:85:53:42:7a:94:96:73:f1:2b:58:
                    92:1a:93:3c:f4:23:be:2f:0b:e0:66:7c:4b:ef:b1:
                    9a:15:2e:6c:08:d8:b6:5d:f7:31:bb:ff:b7:27:49:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:BE:F6:E4:2B:B2:5F:73:BB:BF:72:77:46:53:14:99:C6:66:85
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/bVe-9uQrsl9zu79yd0ZTFJnGZoU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260:321::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:8c:97:62:0d:e3:4b:82:b8:ac:d2:d9:e5:5e:3a:ae:8d:
         58:31:6d:b7:75:46:32:8c:17:49:9f:6a:dd:1c:ef:8e:23:e1:
         b6:da:5a:8b:c9:db:20:9f:5f:7c:86:36:d1:e0:73:a2:72:b6:
         58:6e:c4:72:c5:5e:e1:18:9e:56:6a:5f:72:f9:bd:e4:45:7f:
         d7:4a:95:2f:2c:2b:fd:99:18:38:05:27:78:58:3e:2a:ce:f3:
         6a:4d:4e:84:09:04:a2:7d:bc:20:60:e5:37:28:36:bc:73:88:
         6b:64:02:fc:fc:6c:7b:77:1c:81:ff:ab:ef:1f:4f:fe:7b:87:
         dd:0c:3b:ed:46:1c:dc:c3:9a:12:32:bb:6f:a5:57:cf:3d:78:
         90:33:5b:3d:ca:22:a6:a3:3f:39:97:9f:cf:7f:91:f5:c2:a5:
         b5:35:bd:8f:9c:e5:14:02:67:6f:bb:0f:ab:55:3a:56:5f:52:
         0c:00:6e:57:ac:7d:b6:8a:09:d7:b8:0e:4a:34:07:da:26:2f:
         dc:65:59:8e:5d:a6:f6:42:00:f7:aa:2d:0f:f0:1b:3b:84:c7:
         b0:01:90:07:92:85:03:7d:80:2f:a3:df:3f:06:53:58:f5:b7:
         c5:3b:58:27:a1:bd:d1:35:03:5a:7f:e4:22:2a:09:aa:9a:9b:
         a9:39:cf:d3
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRUE1
RDgyMTU2NThFNjQ0MzEyREE0NDA1NUExQTE2Qzk1MzI4RDhCMB4XDTI2MDgxMzEw
MTEyMloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNkQ1N0JFRjZFNDJCQjI1
RjczQkJCRjcyNzc0NjUzMTQ5OUM2NjY4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKlMcPCbTIli3oZLlRcEQn8wHRDZ5yqdbWBuSDbykS6qISR8EUww
xRqjRqUpsABRP9DxvUZKT6t6bputF1fC0v6+VetXdNz8NqqGMxLRK9O0wKc3mUQ6
lTDNcNkKZs6T+ZReKOPi9EJ5hg07dkg7k4dySnXRexlWPOIzIP53t5qsfDY5lScY
zkSzUU30XVaFYSrI6GLU0vcn9vQFyink2c9xBaL3rxdTl3ByxnEBh/kuapWZ/Fv0
1BPjbT+HdHBBbjzENf+ETnTYl9GhhVQWtQVGPt7sdk6FU0J6lJZz8StYkhqTPPQj
vi8L4GZ8S++xmhUubAjYtl33Mbv/tydJJf8CAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBRtV7725CuyX3O7v3J3RlMUmcZmhTAfBgNVHSMEGDAWgBTupdghVljmRDEtpEBV
oaFslTKNizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTUvN3FYWUlWWlk1a1F4TGFSQVZhR2hiSlV5allzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN3FYWUlWWlk1a1F4TGFSQVZhR2hi
SlV5allzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE1L2JWZS05dVFyc2w5enU3OXlkMFpURkpuR1pvVS5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQJgAyEwDQYJKoZIhvcNAQEL
BQADggEBABQfjJdiDeNLgris0tnlXjqujVgxbbd1RjKMF0mfat0c744j4bbaWovJ
2yCfX3yGNtHgc6JytlhuxHLFXuEYnlZqX3L5veRFf9dKlS8sK/2ZGDgFJ3hYPirO
82pNToQJBKJ9vCBg5TcoNrxziGtkAvz8bHt3HIH/q+8fT/57h90MO+1GHNzDmhIy
u2+lV889eJAzWz3KIqajPzmXn89/kfXCpbU1vY+c5RQCZ2+7D6tVOlZfUgwAbles
fbaKCde4Dko0B9omL9xlWY5dpvZCAPeqLQ/wGzuEx7ABkAeShQN9gC+j3z8GU1j1
t8U7WCehvdE1A1p/5CIqCaqam6k5z9M=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:35:16 2026 by rpki-client