Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30331/6k-penmSXoSuSml4XuWQY2s5kvs.roa
File:                     6k-penmSXoSuSml4XuWQY2s5kvs.roa (raw, json)
Hash identifier:          dEWrZ3quopGqpTEcgtkGFrrLFEZpOkzNwFgo3oT6+ko=
Subject key identifier:   EA:4F:A9:7A:79:92:5E:84:AE:4A:69:78:5E:E5:90:63:6B:39:92:FB
Certificate issuer:       /CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2
Certificate serial:       36
Authority key identifier: AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/6k-penmSXoSuSml4XuWQY2s5kvs.roa
Signing time:             Tue 31 Mar 2026 08:23:37 +0000
ROA not before:           Tue 31 Mar 2026 08:23:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        2001:310::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2
        Validity
            Not Before: Mar 31 08:23:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EA4FA97A79925E84AE4A69785EE590636B3992FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:fa:8a:b0:c1:1b:e9:32:ab:e3:64:cc:2e:
                    1a:e1:4e:eb:00:06:2b:66:a3:68:36:6c:ac:39:45:
                    0a:8a:9c:1a:df:a3:dd:a0:6c:fe:37:d8:94:dc:4c:
                    57:0e:17:86:4b:fd:df:5d:d5:d8:6e:9c:3c:a8:c3:
                    94:69:9d:cd:82:eb:7a:ee:f7:d7:b8:27:1e:96:8c:
                    7e:4f:5e:0c:7a:32:7f:47:7e:b0:b5:1b:4f:0f:6f:
                    80:bd:46:03:22:67:c0:ee:83:96:9a:8f:8c:2f:c2:
                    3f:41:c8:81:10:b7:8a:58:4d:22:7a:8c:ba:8e:76:
                    20:b4:c6:c4:68:89:39:8b:4f:eb:aa:7f:dd:a7:61:
                    1b:83:36:0c:86:f1:57:a1:45:7d:99:8b:a7:51:ac:
                    8c:14:25:10:4b:6c:10:87:58:de:23:e5:54:81:41:
                    ae:d2:13:aa:a8:c8:61:50:38:62:90:bf:1f:28:e8:
                    aa:34:b8:d9:8f:03:e0:8d:63:21:7e:13:55:f4:a7:
                    0e:cd:98:62:70:21:05:f9:31:36:99:44:ab:62:84:
                    a8:e4:bb:e7:f0:dd:c0:4e:fd:60:59:39:00:0f:b8:
                    a5:ba:54:2f:c4:87:60:73:9c:b9:1e:99:29:44:de:
                    cb:72:ed:ef:70:12:94:1c:0f:5d:0a:40:a4:63:e0:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:A9:7A:79:92:5E:84:AE:4A:69:78:5E:E5:90:63:6B:39:92:FB
            X509v3 Authority Key Identifier:
                keyid:AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/6k-penmSXoSuSml4XuWQY2s5kvs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:5a:27:b4:85:1c:e8:38:e4:40:04:48:b6:47:f0:f5:dc:38:
         8c:14:ff:19:5d:6b:3c:72:39:47:b0:36:a5:ea:12:fc:d2:c1:
         05:ad:60:0a:19:3e:03:66:8c:eb:31:66:d4:f7:5f:54:db:2a:
         68:4c:78:eb:3b:60:14:45:26:44:46:5a:17:b7:24:ab:18:e0:
         5e:64:f8:2c:8f:04:a4:dd:5d:5f:5c:58:17:67:3e:6a:1d:11:
         e7:5a:dc:ba:e2:29:ff:a4:c9:c3:4e:9f:96:7a:82:ed:66:90:
         98:10:65:83:16:40:52:ff:e8:cd:04:7f:2c:69:d1:7e:dd:7f:
         f3:b2:15:7b:71:d7:1d:b0:73:98:c2:7a:81:95:50:55:54:38:
         53:19:15:4c:13:b9:06:7f:e1:f3:12:af:5a:03:53:38:b8:b8:
         95:6f:30:ca:15:27:fc:65:ba:1e:d8:37:1f:46:2f:3f:26:de:
         9c:e8:1f:62:21:e1:72:55:14:d9:c5:12:a8:c2:16:8b:e0:16:
         84:1e:6f:ea:fe:5f:f4:49:68:48:52:f7:4c:89:2c:fd:b3:34:
         41:bf:b1:60:58:6b:8b:f7:39:2c:ce:91:f3:f8:21:1e:5e:8c:
         ee:84:d2:33:b6:25:3e:9b:c4:e8:a6:b5:36:99:ef:0d:66:d2:
         fa:aa:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:20 2026 by rpki-client