Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5tTFKYnFM84XqjGMnUUAHjYm5SI.roa
File:                     5tTFKYnFM84XqjGMnUUAHjYm5SI.roa (raw, json)
Hash identifier:          nvABMahodGYQc7xr6gDLaBwW1R0oyNqSk2ELaD0bCLA=
Subject key identifier:   E6:D4:C5:29:89:C5:33:CE:17:AA:31:8C:9D:45:00:1E:36:26:E5:22
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05B8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5tTFKYnFM84XqjGMnUUAHjYm5SI.roa
Signing time:             Sun 01 Mar 2026 02:01:00 +0000
ROA not before:           Sun 01 Mar 2026 02:01:00 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:01:00 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E6D4C52989C533CE17AA318C9D45001E3626E522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:e8:74:dc:11:2c:f3:df:cc:e1:83:96:48:
                    96:03:02:74:92:9f:bd:55:07:b3:43:73:f6:4e:9d:
                    58:27:a6:9b:77:f3:4e:ef:f5:6a:a4:65:69:6e:62:
                    13:ea:2d:43:df:ae:95:af:43:47:ab:e5:0b:11:b5:
                    e6:d5:40:36:f1:6d:ec:6a:08:f5:da:ed:b1:72:53:
                    95:c4:83:62:79:43:48:5d:86:af:ef:d9:4f:35:e2:
                    b9:a7:83:d4:2d:f2:6b:94:7a:80:8c:96:b4:e1:8c:
                    25:5c:c4:9a:92:45:b0:db:0f:43:f0:f6:bc:8e:c9:
                    5d:be:19:e9:b0:ff:b6:dd:c1:df:6c:43:81:d6:ba:
                    46:01:ff:eb:ad:0a:d6:42:01:68:ff:16:c9:d3:db:
                    96:9f:ca:27:53:e5:37:5a:86:81:e0:5f:3d:c1:7b:
                    f5:0e:dc:c3:38:f2:ab:84:88:84:a4:3b:d9:38:cd:
                    72:a5:8a:24:25:6d:0f:05:81:8b:f1:5c:02:3b:c5:
                    b6:e6:7c:9e:1a:7c:60:3e:d5:8b:af:42:3f:46:f7:
                    49:cc:7e:f9:51:29:44:9d:d0:9f:b1:f5:dd:47:66:
                    55:9d:1e:6b:7c:14:8c:d5:71:45:4e:68:19:4b:fe:
                    8c:7a:5e:ff:d4:38:56:dc:48:7c:00:3d:73:96:96:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:C5:29:89:C5:33:CE:17:AA:31:8C:9D:45:00:1E:36:26:E5:22
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5tTFKYnFM84XqjGMnUUAHjYm5SI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:e3:04:bf:71:06:7c:f0:97:c8:53:4a:9c:06:7b:e8:a8:
         f1:57:8d:65:3d:40:9b:d1:f5:41:9b:38:81:39:38:0e:68:29:
         ec:29:39:bf:7f:11:33:94:62:df:80:ed:9f:44:55:0f:d7:14:
         39:55:88:57:db:a5:26:a2:94:39:cc:ad:f1:2f:c7:2b:b5:b8:
         57:5e:5e:74:0c:98:c5:d3:8f:d4:e7:31:76:f1:b9:b9:ef:4e:
         36:69:09:2d:e3:84:88:9b:2e:97:8c:7c:3b:3e:13:c6:f1:fd:
         65:51:eb:e8:ab:4d:b8:28:f0:fa:48:25:35:cc:3a:b0:aa:63:
         b5:91:22:8a:51:4a:34:84:de:39:64:41:6f:24:7b:e0:49:bb:
         47:8b:50:e4:85:42:d5:33:66:d1:46:00:21:7e:85:81:9b:4e:
         35:33:98:01:91:b0:42:9e:50:bc:4a:64:f6:16:d2:5d:33:cb:
         23:b7:9b:06:59:d7:f6:64:4e:88:0f:eb:c9:94:3a:4a:7e:0d:
         d3:d6:9c:f6:65:35:e1:0d:d7:76:7d:85:e1:c0:ca:07:10:b3:
         99:11:64:6d:18:5f:9a:21:7e:1e:e7:de:5e:ca:01:89:6e:8a:
         35:93:55:11:79:e3:3e:98:ec:14:b2:e3:2c:ee:e3:dc:b1:cb:
         ed:af:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:17 2026 by rpki-client