Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0CeohzKO3jXQcxRzONxqQDWCOmY.roa
File:                     0CeohzKO3jXQcxRzONxqQDWCOmY.roa (raw, json)
Hash identifier:          Svve+Fi1mZg4jlAWXq62FvXMpH6ZsFfdvQHsIZoMx+4=
Subject key identifier:   D0:27:A8:87:32:8E:DE:35:D0:73:14:73:38:DC:6A:40:35:82:3A:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0CeohzKO3jXQcxRzONxqQDWCOmY.roa
Signing time:             Sun 01 Mar 2026 02:16:06 +0000
ROA not before:           Sun 01 Mar 2026 02:16:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D027A887328EDE35D073147338DC6A4035823A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8d:2a:cf:6e:03:81:a6:04:eb:dd:99:eb:9c:
                    7e:b4:4a:29:70:39:44:46:da:e6:43:13:84:68:b1:
                    c7:2d:32:ce:1e:81:80:dc:16:9a:8d:28:7a:1e:5c:
                    28:e5:c7:cf:63:68:8e:37:89:bf:2f:2c:7c:ff:3e:
                    f2:58:1b:9a:b4:8e:b3:f4:8b:b1:3a:cb:9a:23:dd:
                    04:ca:fa:5b:02:c9:ba:78:29:76:5e:aa:94:d2:95:
                    7e:b6:ef:30:b1:61:b8:19:15:ae:09:45:fa:f8:c7:
                    43:bb:d1:2d:e6:d5:2a:56:cb:62:c2:13:f4:70:8d:
                    dc:72:d4:8b:04:b6:f4:3e:a8:07:2e:4a:1c:1b:d4:
                    67:61:52:30:c1:55:d5:33:e8:62:0f:d6:c4:d0:c4:
                    0e:27:50:07:27:6c:30:dd:d6:4f:e6:80:da:e2:dd:
                    83:d7:01:8c:eb:1e:20:bb:c6:67:6b:08:4b:14:34:
                    1f:c8:d6:7a:a7:ab:5a:cf:78:53:c6:ca:8e:b2:13:
                    08:43:10:a2:f8:07:41:b8:f5:06:fc:c8:fe:55:67:
                    ff:97:51:bf:88:4c:37:0f:b6:bc:90:02:74:0c:d3:
                    82:7a:40:df:69:00:dc:65:e6:c2:31:9b:38:41:91:
                    de:6b:12:4b:2c:06:28:f3:4e:26:ba:bf:91:04:33:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:27:A8:87:32:8E:DE:35:D0:73:14:73:38:DC:6A:40:35:82:3A:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0CeohzKO3jXQcxRzONxqQDWCOmY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:01:f7:d2:e1:60:c1:1a:25:f1:ee:68:7a:52:0a:cd:70:
         2c:d7:f5:72:f1:7d:63:e8:cb:63:c2:4e:e6:87:c6:b4:db:ce:
         18:96:91:ec:c3:a4:17:5a:28:ec:7b:48:c9:8f:41:70:27:ac:
         cd:c4:a9:d8:c2:98:25:12:38:89:5b:67:e4:aa:3f:f8:31:a3:
         3f:74:f7:7b:ed:c2:89:3a:70:ec:a8:04:c7:a7:38:2a:b8:e0:
         12:62:de:f5:c6:cf:f3:ce:b5:49:c0:58:d3:ad:dc:75:1d:b1:
         4d:5d:ad:9f:a0:38:18:23:d0:5d:68:f3:b7:0a:9f:fe:85:17:
         45:44:ce:4c:6b:67:57:66:c6:1f:f6:13:9b:fa:dc:0f:8a:04:
         57:24:97:5e:7a:06:06:d8:bd:3a:99:21:58:67:17:0e:2b:46:
         e8:7a:33:68:d5:60:19:5e:ad:ef:35:55:95:91:d5:90:05:3d:
         73:29:64:b4:fb:5e:46:91:84:40:d6:e9:e9:d4:19:83:2f:9b:
         99:fb:63:ad:74:44:46:ff:3a:92:eb:4c:1a:8a:9c:49:78:54:
         9a:9c:83:3b:df:a5:22:aa:2a:ce:71:bb:db:37:c3:a6:c4:70:
         b3:81:08:58:ad:b1:dc:c0:21:fb:e3:d9:ef:da:99:66:8f:ab:
         05:05:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:21 2026 by rpki-client