Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0XYvPoEXcs9CMhYLHqsuoNLT8Y4.roa
File:                     0XYvPoEXcs9CMhYLHqsuoNLT8Y4.roa (raw, json)
Hash identifier:          KDtjMJEb0p8YyBeoIDCl0Kjf8HKVkHyiWgJpr/NUTzM=
Subject key identifier:   D1:76:2F:3E:81:17:72:CF:42:32:16:0B:1E:AB:2E:A0:D2:D3:F1:8E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0608
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0XYvPoEXcs9CMhYLHqsuoNLT8Y4.roa
Signing time:             Sun 01 Mar 2026 02:16:20 +0000
ROA not before:           Sun 01 Mar 2026 02:16:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1544 (0x608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D1762F3E811772CF4232160B1EAB2EA0D2D3F18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:4c:5a:72:e6:63:49:be:11:a9:a9:35:0b:
                    85:6e:27:58:b2:26:09:29:43:e2:f0:51:33:ba:9f:
                    c8:d3:18:f0:7f:19:3a:7e:db:8e:14:ad:f1:00:2c:
                    c4:c6:d8:82:bc:eb:5a:a6:3c:1f:8c:09:4b:6b:65:
                    89:b2:94:1f:97:65:6d:e5:59:f4:d2:68:dd:f3:04:
                    2d:8b:72:aa:74:9d:e6:dd:bc:33:a0:7f:b2:fd:d4:
                    50:45:8d:b4:44:bc:7b:a8:3c:a0:d1:68:17:41:be:
                    ce:55:8f:0f:22:91:d7:46:f3:2c:4e:f6:67:b8:81:
                    dc:61:38:e6:e2:43:85:fc:26:8d:b5:dc:9f:de:3c:
                    fe:0a:c2:72:c5:64:47:b2:f3:28:81:4b:c6:fd:16:
                    67:a3:ec:18:1c:e0:26:00:9b:32:c8:73:d0:ab:9b:
                    23:28:97:a7:55:e5:25:ae:63:aa:c3:ab:27:74:51:
                    d3:97:49:36:ed:f1:fd:17:26:ba:a2:31:2f:06:3c:
                    8e:97:1f:b4:fa:80:05:45:c0:03:9c:c1:1e:89:18:
                    ea:30:e0:cf:e2:f0:f6:e5:ae:53:dc:7d:a6:16:08:
                    e6:95:15:5e:8f:9f:44:27:66:16:37:25:36:63:d0:
                    43:83:16:07:00:95:d0:c1:bc:1c:bc:ad:dd:0c:25:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:76:2F:3E:81:17:72:CF:42:32:16:0B:1E:AB:2E:A0:D2:D3:F1:8E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0XYvPoEXcs9CMhYLHqsuoNLT8Y4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:37:c6:ed:1b:dc:28:0d:cc:b5:eb:b4:e5:06:af:e6:fa:ca:
         23:2b:ae:03:f0:c8:a0:56:1f:da:13:ab:3e:25:3a:a9:64:d0:
         71:f4:e6:c1:5e:82:f8:4e:ce:f9:7d:2f:10:f0:1c:63:5a:be:
         48:76:cb:b4:b5:e6:b5:90:e6:29:62:c6:ad:f6:ce:72:20:ac:
         60:b4:68:57:4d:2c:09:79:11:97:6e:4e:28:35:08:5d:3d:a0:
         e3:63:1d:0f:b9:8e:ce:6a:81:2e:57:46:14:53:3e:93:2a:5b:
         42:68:c9:3e:c5:49:08:e0:fa:f7:4d:03:05:d9:3f:df:b1:39:
         7c:bd:0c:80:62:46:8f:5f:ac:0a:36:bf:2f:30:e4:fb:e9:69:
         ff:09:a3:34:c7:45:a0:5c:5a:91:73:1f:0b:15:9e:ea:72:05:
         c3:90:73:f1:75:e6:fa:b3:14:4e:64:69:23:6d:ab:95:18:df:
         92:19:17:b7:d0:08:33:49:de:bc:0f:6e:37:18:e8:d9:6a:98:
         6b:2c:50:8a:52:da:9c:95:65:47:32:86:af:20:51:b9:3d:fe:
         7a:9d:42:a3:a0:b5:d2:27:b3:44:46:12:61:65:20:00:16:5f:
         84:d6:8d:ca:8a:97:91:5a:d2:bf:57:5a:7f:ab:eb:d3:f1:32:
         ce:92:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:18 2026 by rpki-client