Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/X5v35JVw_sMvw5Z2K5BMF6cd1dc.roa
File:                     X5v35JVw_sMvw5Z2K5BMF6cd1dc.roa (raw, json)
Hash identifier:          jjHM2st7B88mGffTLvhuajV2TNdQ3H4wgVE0W8wt5fA=
Subject key identifier:   5F:9B:F7:E4:95:70:FE:C3:2F:C3:96:76:2B:90:4C:17:A7:1D:D5:D7
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       36
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/X5v35JVw_sMvw5Z2K5BMF6cd1dc.roa
Signing time:             Wed 19 Aug 2026 00:43:12 +0000
ROA not before:           Wed 19 Aug 2026 00:43:12 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     59108
IP address blocks:        2405:7000:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Aug 19 00:43:12 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=5F9BF7E49570FEC32FC396762B904C17A71DD5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:1a:9b:99:7d:52:f4:dc:08:2e:f1:e2:3a:
                    cb:cc:fc:7c:ae:57:a5:82:be:82:65:7a:85:17:54:
                    d9:58:9e:a7:f2:8d:24:8c:ad:7b:a5:35:91:65:55:
                    a5:05:e9:ee:3a:f4:9f:61:46:c2:78:03:57:04:00:
                    91:89:5c:06:c5:d8:d7:9f:86:cb:20:f3:95:15:f7:
                    e1:be:ed:53:cd:98:88:ab:fd:3e:bf:c4:10:78:60:
                    c3:92:32:e2:3d:3b:8a:67:c2:a7:a6:9a:a3:59:ae:
                    f7:03:df:e5:98:02:66:a6:82:13:d6:c2:bf:f3:59:
                    dc:b8:48:23:a4:99:87:05:c2:40:57:87:e6:67:9f:
                    92:e5:56:e2:80:8d:94:3f:f0:a3:02:38:ce:f9:54:
                    00:f5:4f:a2:60:57:4c:b9:7a:71:ab:70:23:a8:61:
                    d5:c3:45:c2:38:1c:e1:65:0f:be:c9:2c:08:80:c2:
                    cf:0a:0b:c1:0b:93:56:b5:cd:ce:62:6f:d1:b3:47:
                    40:e5:31:35:ea:c8:89:23:75:02:ca:c2:53:5f:e5:
                    fd:96:4c:ca:3a:8d:e3:c7:00:16:3c:0b:0f:6f:97:
                    9b:42:b6:e4:50:47:67:55:d7:c4:6f:67:4c:6b:98:
                    d9:31:9c:aa:e5:ca:5e:63:42:14:c5:6e:cd:c3:51:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:F7:E4:95:70:FE:C3:2F:C3:96:76:2B:90:4C:17:A7:1D:D5:D7
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/X5v35JVw_sMvw5Z2K5BMF6cd1dc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:ff:6b:ad:dc:34:92:43:ad:69:f3:9c:09:33:cd:d7:43:
         e0:39:b9:7a:8c:b4:fa:2d:e1:0f:f9:cb:a8:25:62:dd:fb:2e:
         14:39:8b:38:ab:6b:01:85:a3:87:81:3a:53:e7:bc:ba:4b:3e:
         37:bc:64:9a:cb:ee:12:0c:05:39:bf:dc:1d:ae:68:e7:a5:86:
         38:27:ca:c3:fc:55:78:33:9c:a9:9d:ad:17:ae:d4:e3:3b:ad:
         2b:ba:34:9b:d7:e5:c7:29:8b:85:15:f3:9b:f6:95:4e:fc:45:
         61:d0:a8:55:26:b7:96:e5:55:72:57:1c:19:60:8c:47:15:b1:
         62:60:33:0c:20:93:da:97:cb:53:48:8e:21:31:d5:13:67:99:
         1d:fb:97:65:05:8c:0b:5b:f4:53:4d:4b:1d:49:0c:36:2e:3a:
         60:4c:92:ac:6c:4c:c4:7b:7f:a6:44:d6:f1:d7:1a:d5:54:2e:
         70:19:27:8e:26:b2:55:c6:c7:67:3c:5b:cb:60:75:9f:eb:4a:
         ae:af:54:77:7a:ab:51:38:df:90:93:bc:90:b1:5f:c7:5a:2f:
         f8:4f:0c:a4:fe:e8:00:36:2d:45:37:87:e9:91:47:26:05:d9:
         5b:46:e3:80:3f:c4:bb:57:f7:74:01:7b:88:24:22:3d:34:f0:
         2b:81:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:32:03 2026 by rpki-client