Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4oowNXs-WRJEAd8czwSeI8ZaTN4.roa
File:                     4oowNXs-WRJEAd8czwSeI8ZaTN4.roa (raw, json)
Hash identifier:          vF+JyJhODGUHT7ZYDYQ2WRYJHwXGQpvszmJMB5Dd9go=
Subject key identifier:   E2:8A:30:35:7B:3E:59:12:44:01:DF:1C:CF:04:9E:23:C6:5A:4C:DE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05AF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4oowNXs-WRJEAd8czwSeI8ZaTN4.roa
Signing time:             Sun 01 Mar 2026 02:00:54 +0000
ROA not before:           Sun 01 Mar 2026 02:00:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E28A30357B3E59124401DF1CCF049E23C65A4CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:50:06:60:21:fc:9c:c3:5c:45:4f:f5:af:
                    c0:a4:7f:05:39:59:87:2b:dc:fe:aa:01:df:a5:0b:
                    49:77:c8:91:ed:6f:04:04:1b:ff:3e:8a:3b:4d:fc:
                    e6:b6:eb:53:df:a2:99:b1:e9:e4:ed:31:2a:75:5d:
                    79:e3:50:ef:b5:a7:bf:72:75:20:ac:ee:38:54:bf:
                    1d:85:da:9a:81:e8:06:d3:bd:c5:a8:6a:85:08:6e:
                    d7:67:a0:f3:c1:1d:5d:1b:41:f1:f1:35:5f:4f:20:
                    be:47:44:8e:12:d0:4c:0a:62:cd:e3:91:b4:96:61:
                    a4:a7:96:d3:2b:60:09:53:0a:f8:19:56:24:b0:3b:
                    45:82:02:99:f4:7f:4c:06:dc:3d:4a:24:a0:e2:4a:
                    2d:09:a4:b2:aa:61:39:c7:1d:8a:67:ef:d0:45:74:
                    04:ea:fc:69:8c:36:2d:da:7e:4d:50:ad:1d:1b:82:
                    6c:0f:a3:1c:b8:a7:d1:5e:95:13:1a:5b:ed:0c:e0:
                    80:30:cf:8a:cb:c3:01:7f:cd:e6:a1:1a:ad:26:bb:
                    42:86:85:58:85:78:96:40:1b:13:01:0e:03:c1:e9:
                    11:5e:61:9b:7e:ed:6b:2f:48:a2:85:3a:78:2c:cc:
                    bd:c3:b3:e4:d0:12:27:00:22:28:6c:31:53:ce:44:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8A:30:35:7B:3E:59:12:44:01:DF:1C:CF:04:9E:23:C6:5A:4C:DE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4oowNXs-WRJEAd8czwSeI8ZaTN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:29:61:b1:04:11:19:4d:84:fb:5e:bf:08:06:bd:b8:a1:
         be:33:97:96:5e:58:ff:0e:d2:90:7e:7d:84:15:4c:8d:18:1c:
         07:9f:9c:0e:27:96:e1:1e:85:f8:ee:7f:e9:96:34:16:26:bd:
         4c:c7:97:23:4f:81:e9:10:d8:f0:3d:b8:6d:fa:82:97:bc:03:
         0a:d2:8c:51:e8:c7:fe:80:40:e0:9d:d6:c4:52:2c:05:95:79:
         2d:09:d7:06:6d:79:da:66:2a:d4:09:87:08:8b:64:92:3a:d2:
         4b:87:15:5f:cf:ac:03:4e:77:a7:c4:80:63:aa:ba:e2:e9:29:
         79:cd:7d:1c:ca:c4:14:2b:38:3c:53:50:6d:5d:6f:fc:4d:03:
         14:f4:a8:9c:1e:b4:ea:30:0c:24:9c:f0:28:9d:b2:bb:75:4e:
         47:05:be:da:4b:3b:84:77:25:9f:74:5c:8e:b9:cb:7c:60:e8:
         71:1f:60:07:9a:c6:ab:85:8b:c4:c9:ed:13:68:8b:9d:0f:de:
         16:7c:20:43:aa:4e:33:7b:56:22:c0:27:c4:bc:d1:30:d4:01:
         d7:9c:12:fd:46:d7:eb:00:6c:63:56:b0:e1:a0:e3:57:32:af:
         51:c6:f1:3e:8e:5c:02:5e:c0:73:63:4b:74:17:3a:61:2b:51:
         6f:db:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:33 2026 by rpki-client