Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1KbRqijER-ibbpRUkGaQ_LkU_dk.roa
File:                     1KbRqijER-ibbpRUkGaQ_LkU_dk.roa (raw, json)
Hash identifier:          +2JLveCWEGbIPH2NUkR87X64hFkDLd72s3q2JXGHxoU=
Subject key identifier:   D4:A6:D1:AA:28:C4:47:E8:9B:6E:94:54:90:66:90:FC:B9:14:FD:D9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       062C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1KbRqijER-ibbpRUkGaQ_LkU_dk.roa
Signing time:             Sun 01 Mar 2026 02:25:51 +0000
ROA not before:           Sun 01 Mar 2026 02:25:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=D4A6D1AA28C447E89B6E9454906690FCB914FDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:fe:02:a2:f0:47:70:f5:59:e0:b5:85:9e:
                    ea:76:3a:f2:03:da:f7:93:82:7a:cf:e5:7b:0b:58:
                    e4:25:88:03:ab:ee:e7:51:91:2d:48:63:c4:74:5f:
                    b0:0f:6e:91:b3:22:d2:5e:f2:cc:96:0b:37:01:ca:
                    45:20:bb:11:b2:1f:c6:c1:2c:14:19:a7:63:f1:a9:
                    9b:3e:6c:bb:9f:8c:31:35:af:ac:a3:61:bc:a2:4c:
                    c9:46:f1:60:46:db:ae:ff:de:c7:c9:53:2e:cd:d0:
                    c0:e6:00:01:4f:9a:e4:5e:23:f3:8a:ba:7c:16:07:
                    e4:64:7f:e6:e0:c2:92:dc:39:b6:c2:75:2c:5f:e4:
                    b0:8a:29:90:7e:1e:46:dc:c2:c3:5d:dd:0f:e4:ca:
                    77:00:af:96:99:ac:6d:a1:94:69:36:8d:01:ac:6e:
                    5a:69:b0:21:dc:2b:26:28:76:84:4a:2c:f8:74:24:
                    3d:46:32:07:bf:c4:d8:48:db:06:ca:db:8d:ff:60:
                    91:f7:ea:80:23:50:9b:39:2d:84:4c:74:48:d2:7c:
                    8e:43:de:ad:ff:3d:ba:6a:e3:43:3a:4f:e9:85:da:
                    46:8b:e6:ff:d1:a5:71:62:79:ac:52:73:9f:b6:de:
                    90:60:c2:42:72:89:e3:27:6a:12:6f:3d:06:4a:46:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:D1:AA:28:C4:47:E8:9B:6E:94:54:90:66:90:FC:B9:14:FD:D9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1KbRqijER-ibbpRUkGaQ_LkU_dk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:4b:ac:ab:eb:ad:96:7f:84:f5:48:a3:8d:bf:c1:f0:c2:3c:
         66:f2:36:d7:e9:76:ee:46:67:61:07:0e:1c:76:2c:f7:0c:f9:
         c7:e4:8d:9d:1d:fd:35:d4:0f:6f:a6:0e:ea:be:aa:ef:7a:81:
         2b:07:22:73:38:1a:0c:42:71:57:2c:98:28:d1:97:5a:ad:67:
         e9:04:f5:41:27:7f:a4:3b:ed:1b:ec:49:2b:36:e1:18:33:3a:
         92:55:37:b8:ee:cf:5e:71:49:6d:a2:2a:79:b2:36:d4:86:25:
         2a:3a:36:5d:fd:33:56:fd:63:37:09:38:c3:b9:be:29:be:d6:
         6c:51:3c:44:3b:f9:9d:05:48:b5:54:a6:2b:23:0e:65:19:02:
         f7:f4:d4:68:2d:b6:e2:a3:95:5b:09:91:a2:78:24:a1:3e:7b:
         82:42:68:ab:06:b0:7e:69:af:72:f4:ef:69:59:5c:b9:58:b5:
         47:87:41:43:51:e8:b3:b7:84:77:71:6a:e0:94:96:19:89:c8:
         1a:01:1e:34:57:d0:d4:a1:6e:e3:6d:26:90:5d:ba:c7:f8:39:
         2e:b8:c4:ad:fc:70:f1:ea:7c:ec:63:96:38:24:b8:2f:6a:d6:
         91:f3:73:a5:fc:40:30:c1:9a:3c:6f:be:d7:d7:64:52:fa:3c:
         63:01:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:03 2026 by rpki-client