Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4Cp06OQ7HcZu8CRMGfNf032i-0Q.roa
File:                     4Cp06OQ7HcZu8CRMGfNf032i-0Q.roa (raw, json)
Hash identifier:          lb2M8Y+BidtAjMAvqQ0fo+1Ek3RuuZMYUB8mT+mlJRA=
Subject key identifier:   E0:2A:74:E8:E4:3B:1D:C6:6E:F0:24:4C:19:F3:5F:D3:7D:A2:FB:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0571
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4Cp06OQ7HcZu8CRMGfNf032i-0Q.roa
Signing time:             Sun 01 Mar 2026 01:52:16 +0000
ROA not before:           Sun 01 Mar 2026 01:52:16 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:16 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E02A74E8E43B1DC66EF0244C19F35FD37DA2FB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:04:20:63:14:4d:ff:8b:6c:5b:1e:36:54:77:
                    99:bd:34:de:e8:cc:a8:04:03:59:6c:a5:bb:68:cc:
                    c4:2f:25:48:b0:fd:bc:ff:55:c0:e9:32:f2:9c:93:
                    b2:3b:8a:15:8e:b9:a9:9a:67:ed:1a:87:71:6d:9a:
                    ee:e7:c0:28:97:92:9d:47:83:75:5f:da:8d:bf:c2:
                    b8:d8:da:59:2f:f6:c7:bf:e8:78:53:8c:48:64:3b:
                    df:9b:0e:d1:4f:bb:82:5a:20:81:29:97:b6:ac:07:
                    1c:8b:de:b8:a7:21:21:ff:8f:ba:ca:a5:fd:dd:bc:
                    e7:f0:9f:ea:96:20:f1:96:b5:63:70:57:89:6c:34:
                    fe:9c:d4:3a:d2:9c:98:bf:ad:f8:1f:36:8e:d6:ef:
                    8c:79:ab:d2:77:79:86:5d:8c:cd:ba:23:64:04:6d:
                    54:35:ea:b0:4b:7b:52:1e:91:1e:1f:84:f1:fa:85:
                    00:1f:3e:e7:ba:f7:67:1f:7c:22:3e:7c:1e:86:9c:
                    b1:c0:8e:e2:36:1f:e5:30:c3:fe:88:ed:ce:c5:d3:
                    74:85:a5:e8:50:f7:0b:80:f6:42:b2:aa:30:67:40:
                    a1:6a:a6:7b:bf:0d:47:26:7c:ae:e5:b9:d5:4d:2e:
                    43:79:a6:44:dc:36:42:19:c9:2b:ff:b1:cc:8d:77:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:74:E8:E4:3B:1D:C6:6E:F0:24:4C:19:F3:5F:D3:7D:A2:FB:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4Cp06OQ7HcZu8CRMGfNf032i-0Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:5b:3a:b9:77:6f:57:f1:9b:69:65:08:72:d4:7f:92:54:
         3a:8a:30:71:6c:af:5f:4a:e1:87:2e:3b:18:85:77:26:69:8d:
         48:8a:51:72:5a:a6:37:42:89:8f:73:be:28:ba:7b:18:a0:2b:
         53:a2:0d:58:fa:27:bd:51:98:2a:64:15:9f:18:c9:75:66:7e:
         e7:ae:85:f1:9b:11:c3:30:50:ce:4c:fb:de:b6:97:83:85:d0:
         83:4a:18:4c:14:df:61:ea:39:b5:3b:df:a9:ff:ed:25:23:25:
         95:60:37:21:fb:fd:f3:cc:e8:f2:86:04:c1:6c:c0:b6:46:e0:
         17:cd:4b:0c:2d:cc:3b:93:32:77:1b:8a:ca:3c:94:98:bc:0f:
         cc:65:97:89:7a:83:3e:6f:a5:79:c9:98:74:0c:94:47:b7:f1:
         b6:d2:94:9b:4e:4f:3b:1e:a7:f5:45:25:5c:b4:c8:e7:68:bd:
         77:6a:a6:56:ce:bc:45:f5:5a:5b:43:cf:f3:86:b3:eb:67:d4:
         f5:26:68:3f:28:08:cb:9f:38:4d:08:a8:9b:d4:08:c7:ab:90:
         c5:ff:df:7c:05:29:1d:00:7d:0a:c0:19:d7:d3:11:c4:bf:92:
         c1:44:d0:74:97:12:e2:1a:9c:8a:54:99:1f:4b:53:03:0a:15:
         e7:48:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:15 2026 by rpki-client