Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07Hnfh_AQRkSDYIpCejkPIH-IFA.roa
File:                     07Hnfh_AQRkSDYIpCejkPIH-IFA.roa (raw, json)
Hash identifier:          j/N7bvTHoaAPsoafsQICn8DSO7AltnBwc5ao3wUMJ0Q=
Subject key identifier:   D3:B1:E7:7E:1F:C0:41:19:12:0D:82:29:09:E8:E4:3C:81:FE:20:50
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       054F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07Hnfh_AQRkSDYIpCejkPIH-IFA.roa
Signing time:             Sun 01 Mar 2026 01:41:21 +0000
ROA not before:           Sun 01 Mar 2026 01:41:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D3B1E77E1FC04119120D822909E8E43C81FE2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:2e:9f:80:9a:b6:29:72:8d:19:56:ba:c0:
                    e7:f0:ac:52:e5:a3:23:4a:5d:f6:5b:8c:93:4b:d7:
                    d1:76:f7:03:0b:bc:d7:f7:ef:de:5b:32:44:bf:bf:
                    8c:1d:97:e4:1d:c3:42:82:f5:27:95:65:99:4b:8d:
                    08:e9:ab:04:ad:cb:f7:cc:d9:eb:c2:b4:b6:83:51:
                    e5:76:40:3d:dd:0e:3a:44:1a:ad:14:82:5c:22:99:
                    61:fc:e3:79:63:20:db:49:d0:58:f0:3a:5c:28:70:
                    ce:c0:d6:e7:80:15:7d:00:6f:bf:3d:a7:ae:5a:01:
                    ea:c5:84:1d:f3:28:e5:41:95:83:c7:fa:24:89:b6:
                    d0:0e:e6:f3:11:c1:ee:9e:ca:11:5a:16:f4:0b:28:
                    23:24:8d:7c:f5:49:86:71:d0:8d:3e:76:20:7c:2f:
                    72:b8:96:b4:58:76:2a:35:82:d1:39:a9:70:90:8f:
                    97:36:51:36:ad:95:0f:aa:2f:79:18:2b:23:bf:cf:
                    65:c6:bf:8a:32:05:31:23:42:b7:9c:03:c7:53:89:
                    3d:ba:02:57:d1:f0:74:dd:64:34:18:57:05:3e:14:
                    9b:6c:24:f5:c3:67:ae:95:6d:96:96:04:07:5f:00:
                    60:49:33:82:42:40:1a:c0:dc:ed:a9:b5:0b:de:1e:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B1:E7:7E:1F:C0:41:19:12:0D:82:29:09:E8:E4:3C:81:FE:20:50
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07Hnfh_AQRkSDYIpCejkPIH-IFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:15:44:cb:03:41:7b:4b:7e:db:6a:7c:22:08:52:25:4b:
         21:d6:e9:d9:0c:e2:1b:44:4a:4b:15:1c:70:45:d5:16:37:b4:
         4e:0d:00:a6:b7:88:96:21:82:77:6e:0a:08:d4:5b:c0:8a:b3:
         77:90:f0:b5:85:b8:ad:4d:df:2f:99:10:21:13:ad:ed:39:78:
         cb:10:ac:52:88:69:ab:d8:14:b3:0c:bd:4a:0c:7e:6c:87:89:
         81:53:d0:0b:7c:f3:04:dc:de:00:e3:c0:9c:67:76:f9:5b:11:
         32:07:a1:9c:df:c8:19:0f:4f:03:97:85:ef:8a:60:2c:cd:96:
         e6:21:df:bb:ea:c5:15:9c:58:2c:91:da:b0:cf:46:a6:52:34:
         14:68:e0:1a:a3:5e:5e:d6:62:ad:1e:21:5c:fa:3f:1a:8c:a7:
         e5:28:83:98:d1:5a:a8:34:b3:aa:d9:14:72:9a:ca:cf:9a:d7:
         20:b5:d0:3f:1c:75:f7:17:6a:8e:11:d3:b6:30:9a:02:20:e7:
         fb:ad:2c:ad:56:06:9c:85:d7:c6:35:21:c9:ba:d4:35:bb:d1:
         6d:b5:15:be:62:21:8c:9d:e6:60:b3:85:d8:0e:ac:bd:cf:84:
         30:d3:dc:84:85:3a:5a:39:3a:01:97:5d:70:ab:0c:c1:34:ad:
         03:2d:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:07 2026 by rpki-client