Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13AilwVnvjTBDUQkZ0Lb3VzVuUI.roa
File:                     13AilwVnvjTBDUQkZ0Lb3VzVuUI.roa (raw, json)
Hash identifier:          WZJCHBtu7rXpE+dvdjdLObPG0PFq9O9qOadrdxlQYMI=
Subject key identifier:   D7:70:22:97:05:67:BE:34:C1:0D:44:24:67:42:DB:DD:5C:D5:B9:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0565
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13AilwVnvjTBDUQkZ0Lb3VzVuUI.roa
Signing time:             Sun 01 Mar 2026 01:46:59 +0000
ROA not before:           Sun 01 Mar 2026 01:46:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D77022970567BE34C10D44246742DBDD5CD5B942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:b7:44:20:19:35:dc:2a:cc:a0:4f:fa:bb:
                    34:a6:d2:f2:55:90:b3:58:fc:9c:ed:e5:9f:c9:41:
                    f9:97:2d:40:fb:46:e2:19:8f:92:b9:95:04:ce:f8:
                    78:39:f2:c7:c0:64:85:ea:fd:ea:e6:59:a0:95:0f:
                    c4:e0:6d:63:ba:8a:31:df:b9:97:80:af:da:6a:22:
                    46:f1:0a:0c:b0:7d:66:f7:e6:aa:57:2d:37:00:08:
                    11:2f:bf:e6:2f:4a:65:cf:e3:3a:6c:9b:50:44:ac:
                    ee:42:77:d6:37:f4:9a:6e:c3:be:17:5e:da:5b:42:
                    77:de:65:0f:c8:e5:3f:17:c6:2b:a0:28:ee:61:4a:
                    aa:b4:68:57:f9:e3:26:a5:0f:35:52:79:fd:cf:fc:
                    24:93:1c:7f:b5:4b:34:04:23:23:b0:f1:5c:71:fb:
                    f7:ee:64:a4:b3:98:73:70:b2:56:27:4f:b7:4e:25:
                    a8:e4:ac:9b:12:f4:bc:63:ad:53:6e:b2:77:96:cc:
                    ea:39:84:c1:29:be:d9:d0:d8:87:b6:bc:55:f3:65:
                    16:c4:20:ea:11:65:95:7e:d6:4c:3f:f6:b0:dd:5a:
                    58:d0:ad:18:b6:06:fb:b0:26:70:fa:fb:6d:27:c1:
                    7a:42:68:ac:93:c5:df:88:74:28:60:55:55:35:61:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:70:22:97:05:67:BE:34:C1:0D:44:24:67:42:DB:DD:5C:D5:B9:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/13AilwVnvjTBDUQkZ0Lb3VzVuUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:c8:df:b7:f1:2f:b2:4d:e2:ce:11:b7:56:f8:d9:45:1f:
         95:e7:81:e6:95:3b:aa:2e:2c:7c:a7:d2:26:fd:1d:b6:51:5e:
         45:c4:ce:04:1b:2a:43:91:9c:b3:69:19:06:98:a3:d7:9f:c8:
         3d:f3:80:16:95:cd:3c:3b:68:2c:ed:4c:90:f3:47:ae:7a:93:
         7a:52:d9:32:c1:a1:ab:cd:f2:7d:20:f3:72:e3:58:1b:02:0d:
         e7:d8:99:21:5d:c1:54:b8:9b:4a:06:31:eb:9f:2d:37:93:67:
         c7:4e:d8:b1:2d:78:6d:93:68:df:25:3a:80:4b:e0:8b:35:8b:
         d6:a5:aa:fe:97:a2:8a:47:74:ec:de:2a:f4:75:59:30:8e:71:
         e6:0a:fe:d9:f6:61:cd:f6:4a:3a:79:37:33:58:cd:1a:46:a9:
         43:e1:cf:9c:1e:d1:e2:d7:ea:28:86:d9:4f:89:73:a6:65:00:
         7f:3c:35:e8:46:71:b7:bc:38:75:20:00:9b:dd:63:32:d5:a7:
         34:5c:72:e8:67:de:31:73:62:91:32:81:ad:36:ed:6d:70:af:
         32:14:81:1f:c0:fd:dc:e1:48:dd:8a:7d:82:ba:25:b0:d6:95:
         a5:ce:27:2e:53:48:21:0e:5d:bd:dc:0a:98:38:34:69:a0:54:
         59:66:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:21 2026 by rpki-client