Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/7HttUotbaLZGr4lCTOZZwyqq_c8.roa
File:                     7HttUotbaLZGr4lCTOZZwyqq_c8.roa (raw, json)
Hash identifier:          psDF9utMejJTNoECbkDpinqsb0kI6PVdgBU6zvkLvi8=
Subject key identifier:   EC:7B:6D:52:8B:5B:68:B6:46:AF:89:42:4C:E6:59:C3:2A:AA:FD:CF
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       06
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/7HttUotbaLZGr4lCTOZZwyqq_c8.roa
Signing time:             Wed 01 Jul 2026 01:26:43 +0000
ROA not before:           Wed 01 Jul 2026 01:26:43 +0000
ROA not after:            Thu 01 Jul 2027 01:12:28 +0000
asID:                     151331
IP address blocks:        2402:6020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Jul  1 01:26:43 2026 GMT
            Not After : Jul  1 01:12:28 2027 GMT
        Subject: CN=EC7B6D528B5B68B646AF89424CE659C32AAAFDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:da:a8:e3:29:84:10:a6:98:85:92:d2:18:65:
                    c8:cd:e8:16:c7:49:71:67:8b:ed:04:b6:77:7a:ca:
                    c9:65:81:63:b2:6e:2e:61:fe:2d:13:3e:95:d5:74:
                    fa:95:52:5c:82:9c:d9:89:05:c7:42:07:9b:e6:96:
                    71:3c:06:58:18:7b:85:85:d2:8a:79:94:60:f9:20:
                    b7:38:c7:dc:fb:c6:69:1d:f5:5a:89:34:66:44:b2:
                    9a:10:d5:84:02:e1:9c:cc:64:07:bd:0a:ff:72:ed:
                    cb:4a:76:95:66:74:9b:5d:31:78:c1:3b:47:ae:2a:
                    ea:d3:48:53:e2:4c:54:8f:fc:ba:00:bc:b2:aa:4f:
                    c2:34:75:8f:73:79:99:e3:65:20:f1:f5:df:1c:2c:
                    bc:95:0c:18:fc:62:88:2a:00:71:a4:7c:32:23:c7:
                    7d:1c:e0:59:3c:46:2a:99:2b:e4:30:33:ed:72:b4:
                    f1:57:e9:9e:af:14:17:d8:98:81:ff:5f:31:63:ca:
                    b2:2b:90:b7:b7:53:c0:69:cc:0b:46:15:99:be:fc:
                    81:4f:52:64:98:f8:86:7e:b9:02:c3:43:bc:de:4c:
                    37:0b:8f:91:d1:33:29:4e:4e:d7:f4:e1:d1:b0:47:
                    08:37:b1:58:71:ec:0c:ea:4d:7b:01:43:e4:26:57:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:6D:52:8B:5B:68:B6:46:AF:89:42:4C:E6:59:C3:2A:AA:FD:CF
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/7HttUotbaLZGr4lCTOZZwyqq_c8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:d7:13:c9:2a:61:ba:92:9d:0c:13:83:d4:38:15:ba:51:85:
         d2:f2:a3:9e:53:03:9b:42:14:34:fb:10:88:3d:5c:66:b7:66:
         9d:a5:e3:b5:91:80:bc:48:3f:8c:f5:6c:c8:e4:aa:ec:bf:b6:
         bc:46:40:c6:19:6c:62:67:26:be:bf:a4:4e:fb:ad:6a:2a:56:
         f9:be:72:1c:12:1e:25:48:90:e7:a8:1b:75:cb:c8:0e:03:8f:
         09:47:d2:21:0c:4f:e1:d5:db:d5:52:58:42:1c:97:a4:2b:bd:
         77:c5:31:91:8a:38:ce:68:49:ef:34:50:af:b9:ac:c6:23:a9:
         b6:ff:4c:b5:cb:b0:74:f3:ed:58:63:ba:ed:bf:c2:68:59:ed:
         12:7d:f4:ce:7b:32:d3:3f:23:a2:16:71:90:3c:4f:3e:be:a4:
         86:2f:dd:ef:25:43:1b:0d:02:48:73:d8:da:d5:e9:04:06:1b:
         bc:03:13:0d:54:7a:1c:02:cc:bc:83:ac:81:45:20:52:84:12:
         5e:0b:45:4e:58:59:8d:a9:60:2b:0d:1d:cb:82:96:98:3a:a9:
         ff:26:4c:07:3e:80:bf:c8:2e:10:70:c4:87:81:f0:15:e9:b9:
         e0:68:dd:c9:fb:0e:38:b9:d1:fa:4f:d6:de:2e:2e:d2:af:56:
         9b:36:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:26:53 2026 by rpki-client