Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa
File:                     D31Y23wpkGD7OzABTWev6dAYwgs.roa (raw, json)
Hash identifier:          +M4p7bmf/YLM41kno0X0kuLr9kLJZ/ieVYsL/NlUPPg=
Subject key identifier:   0F:7D:58:DB:7C:29:90:60:FB:3B:30:01:4D:67:AF:E9:D0:18:C2:0B
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       07
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa
Signing time:             Wed 01 Jul 2026 01:26:43 +0000
ROA not before:           Wed 01 Jul 2026 01:26:43 +0000
ROA not after:            Thu 01 Jul 2027 01:12:28 +0000
asID:                     401776
IP address blocks:        2402:6020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Jul  1 01:26:43 2026 GMT
            Not After : Jul  1 01:12:28 2027 GMT
        Subject: CN=0F7D58DB7C299060FB3B30014D67AFE9D018C20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:03:cc:2f:7b:c7:b8:97:ff:e4:33:54:12:
                    45:3c:96:4d:cb:75:49:47:54:07:05:d8:fd:f1:f6:
                    09:a3:18:a8:ad:6a:59:9b:60:76:bf:68:bc:e9:bc:
                    ed:e2:96:b4:8b:18:b9:a6:26:be:d2:f0:28:fb:f8:
                    8c:13:d8:93:2e:1f:70:fd:94:a3:56:9a:ef:14:f2:
                    ac:96:af:9e:a0:14:37:bf:69:70:3c:ac:79:8b:a1:
                    12:e0:6a:e9:15:76:c3:f3:de:89:38:02:41:53:59:
                    0a:54:2a:db:ad:98:e3:5e:5e:4a:60:de:ce:0d:00:
                    55:29:b1:dd:a1:51:be:65:91:49:7e:51:ae:3f:e2:
                    1a:cc:31:bb:7b:96:5d:81:8b:07:45:de:b8:33:3a:
                    62:31:53:6a:0c:fd:5c:01:16:53:d2:bb:ee:18:17:
                    78:b5:15:2c:2d:96:0b:a7:a2:dd:dc:8a:5a:93:84:
                    f5:c4:62:73:c3:b7:81:15:ff:8d:50:62:a3:66:e8:
                    6b:34:66:8f:39:cb:05:d3:85:0c:30:26:62:c6:b8:
                    3f:1b:39:2c:88:91:23:ae:19:d9:e1:5f:d9:63:09:
                    3b:f6:a6:37:48:9d:1d:6c:59:0a:3b:9b:1c:f4:37:
                    c2:61:4d:c5:a9:71:6c:b7:ad:40:fc:cf:3c:a3:64:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7D:58:DB:7C:29:90:60:FB:3B:30:01:4D:67:AF:E9:D0:18:C2:0B
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:bd:25:9b:16:76:72:1f:b8:96:c0:49:5c:e3:84:10:a8:b4:
         15:0f:5a:25:a2:65:44:49:ab:6e:95:dd:7e:18:25:c2:1b:15:
         fc:c3:f8:92:2c:45:ed:ad:48:30:b1:41:5f:41:53:19:8f:1c:
         3c:c8:c2:10:97:8a:4e:f2:59:a4:b4:d0:0d:fe:e5:dd:e1:c6:
         3c:1a:da:42:2a:f8:cd:bc:d9:88:e9:4a:f0:12:b0:8d:70:0b:
         a4:7a:33:46:76:7b:c6:59:89:44:36:0f:e8:14:f6:c5:f4:04:
         ff:a6:70:3f:a6:7e:4a:51:2f:ba:4d:3c:03:b4:4e:17:85:1d:
         0f:cc:fc:53:fd:01:b9:e1:1a:e6:6b:c5:c0:d3:e7:db:23:52:
         b2:e6:2a:94:ce:04:01:aa:d3:2e:b7:6d:19:a9:02:6b:5f:d1:
         d3:8d:af:81:37:a8:17:82:c8:7e:f4:4f:4e:7e:da:03:9b:de:
         8a:5f:81:c8:c7:f1:72:9f:32:e3:2c:37:11:c1:ec:1e:af:63:
         60:89:2d:9b:84:b3:7b:ef:84:6c:50:42:f9:bd:87:77:2d:e4:
         0d:cc:aa:dc:b0:37:aa:7d:18:e2:79:ab:53:2e:66:d1:02:88:
         6a:8b:fe:f8:44:e9:e5:49:c2:d9:1c:59:7f:e8:7e:fb:7e:a2:
         de:c9:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:26:42 2026 by rpki-client