Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
File:                     -IZtcE6tp0zs3YvoPKFDGjqlK5A.roa (raw, json)
Hash identifier:          YS2d8yJ1dF4PZ890SJVO4dgZUPylHFN4Jodj2A86m6c=
Subject key identifier:   F8:86:6D:70:4E:AD:A7:4C:EC:DD:8B:E8:3C:A1:43:1A:3A:A5:2B:90
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0621
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
Signing time:             Sun 01 Mar 2026 02:21:07 +0000
ROA not before:           Sun 01 Mar 2026 02:21:07 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:21:07 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F8866D704EADA74CECDD8BE83CA1431A3AA52B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:3b:08:dd:11:2c:11:ce:e9:a9:e0:d3:5f:
                    76:50:c0:d6:41:5b:84:12:e6:da:0b:f8:01:49:3a:
                    10:c7:80:e3:ae:2e:32:2b:1a:34:72:df:48:fe:b9:
                    57:2a:f2:30:1a:74:33:e9:d4:4d:3b:68:0d:16:86:
                    df:37:47:84:e6:de:27:69:6f:21:ac:6e:e4:e5:e9:
                    5b:17:32:ee:11:b9:15:0a:2d:77:cc:89:cd:49:a1:
                    fe:ad:e7:6c:62:cd:7f:38:bb:5a:cd:49:f2:08:db:
                    dd:b9:0f:88:8e:f4:b1:c8:78:72:ae:61:63:5b:1d:
                    c4:29:45:e4:ef:59:f2:cf:7a:2f:cd:0b:56:d0:07:
                    75:de:72:59:65:66:62:19:0a:3c:10:76:d6:50:47:
                    c0:1a:9a:c3:84:85:64:b2:e7:55:2c:c2:52:8a:77:
                    14:73:ef:10:18:8f:7f:4c:95:2e:5e:62:aa:a5:37:
                    b7:aa:2f:18:d1:67:2c:b9:73:96:e8:fb:15:d2:a1:
                    88:3f:eb:8b:08:0c:bc:a0:64:6a:e7:f5:f1:21:fb:
                    ce:5b:35:a5:9d:fd:b9:1b:72:7c:91:fc:12:41:4a:
                    62:d8:4f:5f:75:94:f2:04:57:8f:82:56:5b:97:09:
                    20:01:e8:b5:57:92:0b:7c:07:00:ad:f7:3b:b5:31:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:86:6D:70:4E:AD:A7:4C:EC:DD:8B:E8:3C:A1:43:1A:3A:A5:2B:90
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:d5:bb:52:a8:f4:26:27:ec:60:3f:e6:13:ab:25:94:c8:23:
         84:5e:5b:3b:b2:b6:99:46:e6:f1:15:62:c6:e0:ec:fb:32:4f:
         aa:e8:e7:fd:35:97:90:55:70:9f:af:7d:29:c8:8b:ad:81:e4:
         4b:c3:02:51:35:c4:59:9f:57:53:21:dc:ae:31:4c:2f:fd:67:
         23:6d:d8:ee:ae:7a:a7:70:63:80:33:2f:f8:0c:42:6d:61:dd:
         08:29:9a:ca:26:89:88:93:9c:58:82:2e:95:4a:00:3e:ad:41:
         87:ed:9e:16:4d:be:ab:29:52:98:d1:54:72:61:22:07:26:03:
         fb:ff:d4:a7:56:b9:44:e0:2b:4a:d1:49:7f:d3:61:b6:a5:84:
         e1:c6:8b:3a:dd:a4:7a:c8:d6:9e:7b:0a:a7:c9:56:44:dc:1b:
         eb:84:3a:a0:2e:10:8d:76:f9:4a:b9:a1:1a:34:ca:ec:fc:1c:
         92:78:b2:ea:63:9e:71:c2:b6:db:41:70:37:f0:fd:c0:0a:df:
         bf:45:fd:25:c6:cb:88:27:50:91:23:a3:ab:55:46:76:52:fb:
         ea:09:34:44:70:97:35:31:6c:3f:5d:68:5b:35:31:df:55:2e:
         1c:33:bd:22:ec:df:68:09:10:52:33:3f:92:fe:de:11:56:7a:
         b5:3a:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:16 2026 by rpki-client