Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5Avvi2wzzNvj7C5SiQffK7gdFIk.roa
File:                     5Avvi2wzzNvj7C5SiQffK7gdFIk.roa (raw, json)
Hash identifier:          C4EHTsyyxKJzizU7OX6k1a8VCvnQ40WmNWSyTuOG5L8=
Subject key identifier:   E4:0B:EF:8B:6C:33:CC:DB:E3:EC:2E:52:89:07:DF:2B:B8:1D:14:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       061D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5Avvi2wzzNvj7C5SiQffK7gdFIk.roa
Signing time:             Sun 01 Mar 2026 02:21:03 +0000
ROA not before:           Sun 01 Mar 2026 02:21:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:21:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E40BEF8B6C33CCDBE3EC2E528907DF2BB81D1489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:21:71:cc:d2:b2:6e:97:40:61:83:06:8c:
                    e8:f1:9d:c2:9a:92:a3:9a:10:5d:68:a9:56:b5:b2:
                    79:b6:2d:40:c0:19:65:2d:86:8f:81:4f:74:3b:e5:
                    2e:52:f9:a5:c0:a6:30:c9:03:7c:d2:20:d5:9b:a2:
                    07:b9:42:12:4c:b6:fa:91:07:67:ab:3d:31:87:00:
                    68:97:e3:70:6d:4d:9f:15:10:1e:9c:4b:7e:d7:5f:
                    1e:e2:5f:2b:42:16:66:40:11:a0:58:84:67:57:67:
                    6f:5a:5b:51:c7:30:bc:5e:cc:b2:d8:57:ae:af:ad:
                    01:4e:2e:f2:ac:9e:f2:26:37:1c:ee:4f:d0:7e:87:
                    08:fa:02:18:3b:66:a0:c2:6c:d2:79:bf:85:37:46:
                    c3:d3:c0:46:c0:d2:47:c1:26:6f:f3:57:d0:fb:b1:
                    10:9f:12:b0:7c:78:2d:bd:7b:8b:84:e9:db:3d:6a:
                    fc:74:d0:be:91:5b:e7:9b:eb:27:de:8e:e0:02:66:
                    0b:0d:5a:30:84:bf:44:9d:18:ff:c1:bb:c9:72:a5:
                    e7:87:a4:a1:e2:40:54:86:3e:b0:bd:ef:79:3b:bb:
                    ec:1d:9b:7f:68:b8:5e:5b:aa:ad:c2:fd:21:9f:48:
                    05:0c:3f:d5:73:fd:56:22:04:ea:9d:6a:8b:78:51:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:EF:8B:6C:33:CC:DB:E3:EC:2E:52:89:07:DF:2B:B8:1D:14:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5Avvi2wzzNvj7C5SiQffK7gdFIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:7e:f1:c9:45:f9:8d:54:c6:a7:6d:09:b9:50:7e:ce:12:
         c4:2f:b2:2a:2e:6d:e9:ec:a0:2f:d2:30:38:cd:7b:7c:1d:00:
         bf:4b:4c:05:21:74:bd:de:3c:87:84:4f:1d:8a:b4:5e:49:d2:
         1a:0d:4f:7d:da:3a:49:a2:be:e2:c9:df:60:0d:6f:71:fb:2a:
         b3:9b:40:b9:6e:2f:85:b0:e9:70:b4:70:f4:41:a7:a4:16:1e:
         14:6b:cc:56:12:15:6e:b7:a0:b0:f9:a6:3f:04:b8:aa:82:88:
         65:e7:1a:a4:57:8e:d9:d1:06:7a:55:d0:21:53:12:7e:e2:a2:
         07:09:d9:f0:a6:62:ea:f0:85:2b:37:1f:a5:f3:e0:58:ce:f2:
         45:d2:cd:51:82:3f:f4:ea:8d:a9:db:21:2c:4e:a0:16:15:5a:
         9f:c6:79:42:fb:71:85:88:2b:b7:44:7e:cd:41:29:70:19:77:
         d1:ba:8d:94:24:14:80:1a:4c:67:df:9e:db:88:2d:a5:70:dd:
         22:87:bc:c9:b3:8e:66:68:fe:dc:51:e0:c4:e7:a0:2f:75:00:
         26:aa:81:c1:2c:f9:0b:27:2f:00:a7:82:d3:66:86:7f:ca:83:
         ce:73:e4:bf:ad:8d:be:4b:98:11:17:b1:6b:8f:5d:e4:bf:d8:
         e4:3d:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:49 2026 by rpki-client