Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/Aqaiz3Y6ZUg-1tDA-_uHLMH8iDI.roa
File:                     Aqaiz3Y6ZUg-1tDA-_uHLMH8iDI.roa (raw, json)
Hash identifier:          sCTtwB9r17KgJwnhflBJIFXGFSpF25+jfW3NqhfQ+wM=
Subject key identifier:   02:A6:A2:CF:76:3A:65:48:3E:D6:D0:C0:FB:FB:87:2C:C1:FC:88:32
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       51
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/Aqaiz3Y6ZUg-1tDA-_uHLMH8iDI.roa
Signing time:             Sun 01 Feb 2026 01:28:56 +0000
ROA not before:           Sun 01 Feb 2026 01:28:56 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     24284
IP address blocks:        2402:4200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: Feb  1 01:28:56 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=02A6A2CF763A65483ED6D0C0FBFB872CC1FC8832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:73:32:1b:43:e9:3f:26:cd:90:cb:5a:d5:
                    ef:32:4a:ea:1d:86:2f:98:9f:db:07:55:3b:53:24:
                    3b:23:02:84:74:f8:75:09:47:01:8c:ae:95:c6:4a:
                    e3:eb:7f:46:ac:54:1d:4b:20:94:0b:af:61:0c:c1:
                    e3:2d:a3:4c:1b:0d:a4:e6:26:6b:a7:5c:ab:c3:4b:
                    b9:e0:24:26:ba:c5:6a:03:a3:02:55:8a:a3:82:6a:
                    c9:51:c8:4f:b6:5d:5d:e2:77:b4:b3:86:78:59:87:
                    83:6c:b3:06:38:c7:80:bb:f6:77:4b:35:40:e4:ca:
                    a1:13:35:21:16:89:5f:c2:10:81:6f:40:a9:30:cc:
                    8f:ef:7a:8a:45:83:50:c3:4b:a0:40:0c:97:f8:91:
                    aa:4e:0d:61:eb:83:8f:9c:58:5b:37:e1:3a:4b:53:
                    18:84:61:cf:05:a5:4e:e2:d9:24:d9:53:82:5c:30:
                    d0:bf:39:b4:b0:9a:4f:2e:18:4f:cf:57:10:c0:50:
                    0d:ac:9f:08:72:a0:4a:ae:ae:7f:6b:e4:c1:a6:bf:
                    a8:10:ae:0b:f7:d0:d3:50:cd:cd:4b:d0:e1:ed:61:
                    2d:6e:d2:b0:19:45:8d:26:80:62:0b:95:64:ea:26:
                    2b:45:93:c6:5c:cb:cb:60:d5:f3:ef:6b:ed:c9:a8:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:A2:CF:76:3A:65:48:3E:D6:D0:C0:FB:FB:87:2C:C1:FC:88:32
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/Aqaiz3Y6ZUg-1tDA-_uHLMH8iDI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:29:4b:4d:c2:d0:f5:7e:c0:63:bd:93:c4:03:15:50:7d:69:
         44:3d:12:b1:8b:b5:d9:fe:88:14:19:da:b8:ee:6a:95:a7:f8:
         ce:ed:db:ec:46:75:d0:2b:29:6a:80:24:e9:1b:53:9b:c1:9c:
         01:18:d8:71:e6:1a:f3:e1:a8:a2:a5:e2:62:a0:67:99:01:e0:
         66:76:aa:e8:61:8b:99:5e:49:7c:13:38:0a:e2:71:b1:ef:55:
         19:78:9d:6a:8e:d8:75:ef:1c:e7:71:fd:a9:8c:03:85:81:de:
         ca:d2:61:9a:d7:f9:38:f2:38:f7:86:72:0b:27:ee:4f:a3:cf:
         df:80:08:1f:de:cd:12:d0:2e:29:7e:f0:ac:16:b6:97:42:40:
         51:14:30:78:cb:69:e8:30:e7:29:b7:26:a5:a8:17:20:09:a5:
         26:e9:23:b9:95:79:bd:30:a4:75:fa:b6:30:30:57:c4:da:97:
         3f:48:12:bc:77:66:61:a6:af:72:49:1f:2d:de:4f:bb:c9:36:
         95:75:31:9e:78:11:af:c5:2d:64:04:16:75:21:e7:cc:1a:5f:
         df:a8:90:2e:94:2a:fb:84:1b:2c:80:f5:ed:89:89:10:89:4c:
         88:6f:9f:75:01:ab:99:d9:e9:72:53:93:d6:73:24:96:65:a7:
         33:88:d2:49
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEE5
NTJBMDBEQjIxNTQxNzVDMjBCNEM4ODdFRkEyRjgwQUM2RjA1MB4XDTI2MDIwMTAx
Mjg1NloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMDJBNkEyQ0Y3NjNBNjU0
ODNFRDZEMEMwRkJGQjg3MkNDMUZDODgzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwZczIbQ+k/Js2Qy1rV7zJK6h2GL5if2wdVO1MkOyMChHT4dQlH
AYyulcZK4+t/RqxUHUsglAuvYQzB4y2jTBsNpOYma6dcq8NLueAkJrrFagOjAlWK
o4JqyVHIT7ZdXeJ3tLOGeFmHg2yzBjjHgLv2d0s1QOTKoRM1IRaJX8IQgW9AqTDM
j+96ikWDUMNLoEAMl/iRqk4NYeuDj5xYWzfhOktTGIRhzwWlTuLZJNlTglww0L85
tLCaTy4YT89XEMBQDayfCHKgSq6uf2vkwaa/qBCuC/fQ01DNzUvQ4e1hLW7SsBlF
jSaAYguVZOomK0WTxlzLy2DV8+9r7cmoGUsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQCpqLPdjplSD7W0MD7+4cswfyIMjAfBgNVHSMEGDAWgBTQqVKgDbIVQXXCC0yI
fvovgKxvBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMzUvMEtsU29BMnlGVUYxd2d0TWlINzZMNENzYndVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMEtsU29BMnlGVUYxd2d0TWlINzZM
NENzYndVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTM1L0FxYWl6M1k2WlVnLTF0REEtX3VITE1IOGlESS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAkIAMA0GCSqGSIb3DQEBCwUAA4IBAQCuKUtNwtD1fsBjvZPEAxVQ
fWlEPRKxi7XZ/ogUGdq47mqVp/jO7dvsRnXQKylqgCTpG1ObwZwBGNhx5hrz4aii
peJioGeZAeBmdqroYYuZXkl8EzgK4nGx71UZeJ1qjth17xzncf2pjAOFgd7K0mGa
1/k48jj3hnILJ+5Po8/fgAgf3s0S0C4pfvCsFraXQkBRFDB4y2noMOcptyalqBcg
CaUm6SO5lXm9MKR1+rYwMFfE2pc/SBK8d2Zhpq9ySR8t3k+7yTaVdTGeeBGvxS1k
BBZ1IefMGl/fqJAulCr7hBssgPXtiYkQiUyIb591AauZ2elyU5PWcySWZacziNJJ
-----END CERTIFICATE-----
Generated at Sat Feb 21 10:02:49 2026 by rpki-client