Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/vv7LMN0V7Y589q2NzMOil1-KJs4.roa
File:                     vv7LMN0V7Y589q2NzMOil1-KJs4.roa (raw, json)
Hash identifier:          qRTzLuqNNeZ6K2xuHgA2yzZHekaLVUvGypzxIlsUgTg=
Subject key identifier:   BE:FE:CB:30:DD:15:ED:8E:7C:F6:AD:8D:CC:C3:A2:97:5F:8A:26:CE
Certificate issuer:       /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial:       04
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/vv7LMN0V7Y589q2NzMOil1-KJs4.roa
Signing time:             Wed 01 Jul 2026 01:26:42 +0000
ROA not before:           Wed 01 Jul 2026 01:26:42 +0000
ROA not after:            Thu 01 Jul 2027 01:12:28 +0000
asID:                     402628
IP address blocks:        2402:6020::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
        Validity
            Not Before: Jul  1 01:26:42 2026 GMT
            Not After : Jul  1 01:12:28 2027 GMT
        Subject: CN=BEFECB30DD15ED8E7CF6AD8DCCC3A2975F8A26CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:07:d4:56:89:e9:90:de:29:bf:f5:a8:cf:
                    b8:81:1c:8c:ab:b9:f1:aa:97:ef:c0:8a:42:c9:2d:
                    39:01:2a:6c:d2:ea:96:46:c0:2d:70:41:76:a5:b7:
                    cf:3a:65:a1:21:bc:bf:ea:86:d9:2e:6b:87:b7:7f:
                    71:39:95:6b:d3:c5:2a:74:f0:db:f4:fc:79:83:f8:
                    c8:c7:ca:44:8c:45:f9:c2:67:59:ca:28:ba:11:4e:
                    be:5d:8b:bc:37:be:74:27:52:69:dc:f6:54:a7:a8:
                    55:e8:8d:fa:65:cf:38:cb:22:a4:5d:52:2b:15:c9:
                    17:4f:0a:df:b5:63:6e:e8:37:b2:30:87:86:54:4f:
                    48:45:22:eb:39:16:81:30:2e:ca:74:d6:5d:9d:c8:
                    ca:50:52:96:b4:53:43:24:c7:e7:c9:06:89:32:b8:
                    eb:4a:49:1b:a5:02:ee:8b:ff:3f:0c:27:7f:0f:d7:
                    15:c3:7d:46:d6:8c:6d:e0:af:7e:58:06:ac:32:04:
                    d8:18:48:92:b4:05:bb:b6:fa:46:d8:ce:01:49:fc:
                    18:fd:02:b9:64:87:3e:1c:f0:26:24:d4:d6:27:3b:
                    15:c1:a6:58:5f:b2:4d:1b:c5:10:33:a5:8a:17:ef:
                    e5:0e:03:c4:54:0e:68:2f:1a:bd:a1:16:68:0d:b7:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:CB:30:DD:15:ED:8E:7C:F6:AD:8D:CC:C3:A2:97:5F:8A:26:CE
            X509v3 Authority Key Identifier:
                keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/vv7LMN0V7Y589q2NzMOil1-KJs4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:66:a8:4d:81:0b:55:75:c7:19:6f:2b:ae:90:de:a5:3c:
         5e:33:ff:8a:2c:c0:12:db:1b:ae:c1:70:4b:0c:a3:5e:8c:0d:
         a3:83:24:e1:8f:ed:b4:77:04:53:44:ff:4f:28:3c:95:41:00:
         e6:e6:89:d9:69:ad:5e:86:f3:38:71:ae:2b:5e:79:b4:ae:67:
         99:d1:e8:59:4c:7b:9b:d2:ac:e8:ed:12:f6:e7:a3:6d:df:aa:
         15:ec:dd:3b:71:4b:2a:6d:30:43:12:6e:a5:de:37:0f:97:a5:
         aa:d0:d6:30:f9:b6:b4:6d:27:69:9f:3c:5d:37:51:be:6c:41:
         37:36:6a:e7:ab:2d:a9:57:42:91:5e:f9:d7:49:26:ec:5f:41:
         92:d5:0e:ac:d3:4d:7f:d0:8c:89:b0:a3:51:d8:39:b9:2f:e8:
         e9:25:bc:de:fc:94:ae:4c:1c:dc:ce:7f:30:69:08:2c:2d:31:
         f3:89:b3:b7:2e:db:91:07:ca:26:70:d7:3b:a9:ba:37:50:fc:
         d6:36:dc:87:be:ea:a7:c4:77:6c:2e:ea:ae:e2:bc:7c:72:f8:
         1c:47:e8:5f:52:7b:2e:d0:0b:71:0e:90:32:2c:d4:04:90:b8:
         84:48:eb:e8:c6:2a:7b:c3:ed:53:c7:b5:bc:7a:f4:c4:f7:69:
         9c:23:9f:78
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzFE
QUFFMjIzQUM3NURBNkExNjM1MDUxQjg3QUFENDJDMzMxRDA0MB4XDTI2MDcwMTAx
MjY0MloXDTI3MDcwMTAxMTIyOFowMzExMC8GA1UEAxMoQkVGRUNCMzBERDE1RUQ4
RTdDRjZBRDhEQ0NDM0EyOTc1RjhBMjZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMLMB9RWiemQ3im/9ajPuIEcjKu58aqX78CKQsktOQEqbNLqlkbA
LXBBdqW3zzploSG8v+qG2S5rh7d/cTmVa9PFKnTw2/T8eYP4yMfKRIxF+cJnWcoo
uhFOvl2LvDe+dCdSadz2VKeoVeiN+mXPOMsipF1SKxXJF08K37Vjbug3sjCHhlRP
SEUi6zkWgTAuynTWXZ3IylBSlrRTQyTH58kGiTK460pJG6UC7ov/Pwwnfw/XFcN9
RtaMbeCvflgGrDIE2BhIkrQFu7b6RtjOAUn8GP0CuWSHPhzwJiTU1ic7FcGmWF+y
TRvFEDOlihfv5Q4DxFQOaC8avaEWaA23Os8CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBS+/ssw3RXtjnz2rY3Mw6KXX4omzjAfBgNVHSMEGDAWgBRjHariI6x12moWNQUb
h6rULDMdBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NjEvWXgycTRpT3NkZHBxRmpVRkc0ZXExQ3d6SFFRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWXgycTRpT3NkZHBxRmpVRkc0ZXEx
Q3d6SFFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDYxL3Z2N0xNTjBWN1k1ODlxMk56TU9pbDEtS0pzNC5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAmAgMA0GCSqGSIb3DQEBCwUA
A4IBAQCOmWaoTYELVXXHGW8rrpDepTxeM/+KLMAS2xuuwXBLDKNejA2jgyThj+20
dwRTRP9PKDyVQQDm5onZaa1ehvM4ca4rXnm0rmeZ0ehZTHub0qzo7RL256Nt36oV
7N07cUsqbTBDEm6l3jcPl6Wq0NYw+ba0bSdpnzxdN1G+bEE3Nmrnqy2pV0KRXvnX
SSbsX0GS1Q6s001/0IyJsKNR2Dm5L+jpJbze/JSuTBzczn8waQgsLTHzibO3LtuR
B8omcNc7qbo3UPzWNtyHvuqnxHdsLuqu4rx8cvgcR+hfUnsu0AtxDpAyLNQEkLiE
SOvoxip7w+1Tx7W8evTE92mcI594
-----END CERTIFICATE-----
Generated at Tue Jul 7 04:26:44 2026 by rpki-client