Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5y0czfkGnqxS9zO0OsiI407rA40.roa
File:                     5y0czfkGnqxS9zO0OsiI407rA40.roa (raw, json)
Hash identifier:          mUigaHCEHiEW1s1+Zey8qCFcNHVSWwzd9raj2wVXa+M=
Subject key identifier:   E7:2D:1C:CD:F9:06:9E:AC:52:F7:33:B4:3A:C8:88:E3:4E:EB:03:8D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       054C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5y0czfkGnqxS9zO0OsiI407rA40.roa
Signing time:             Sun 01 Mar 2026 01:41:19 +0000
ROA not before:           Sun 01 Mar 2026 01:41:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E72D1CCDF9069EAC52F733B43AC888E34EEB038D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:e4:45:9b:19:81:ef:b3:30:6a:f8:a0:66:
                    45:e8:5f:f1:77:e0:b7:a4:ff:0d:1b:47:78:dd:6d:
                    1d:5f:00:58:ff:59:a2:b6:67:53:0a:44:10:8f:44:
                    b7:cf:74:e9:ff:39:1f:30:c3:b4:91:db:7f:ea:fa:
                    a6:43:98:13:57:7a:91:39:d4:16:66:16:a8:58:42:
                    84:b5:4d:90:ee:6c:5a:04:85:5e:db:60:91:6c:db:
                    de:bf:69:b9:7a:7c:5c:8d:3b:d8:56:95:b4:f4:c4:
                    ae:76:06:f3:d5:fc:42:46:55:8b:a3:05:9b:70:d6:
                    74:3c:e3:01:53:20:91:83:7a:10:fb:a0:f8:5f:20:
                    4d:b1:ea:f8:61:d0:ee:76:cc:37:c8:ce:28:4a:db:
                    04:68:71:08:85:02:5c:8e:1e:c3:0f:1d:16:bb:9b:
                    63:75:59:66:7e:0b:c9:f2:0e:53:59:7e:17:d1:f2:
                    ae:f1:dd:e5:4e:aa:d9:b3:66:62:e2:8b:ac:22:4d:
                    14:48:0b:d1:7f:e9:d7:ec:b5:a5:ae:f0:be:0f:52:
                    a1:f4:98:e3:e8:84:87:96:7a:6b:fe:27:4b:59:29:
                    95:4e:62:06:2f:32:94:d8:d0:03:2f:b2:6d:d5:f9:
                    cc:9b:42:c0:c5:a3:bd:c6:f0:8d:0a:91:33:3e:29:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:1C:CD:F9:06:9E:AC:52:F7:33:B4:3A:C8:88:E3:4E:EB:03:8D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5y0czfkGnqxS9zO0OsiI407rA40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:42:4e:60:14:2b:4d:df:e9:24:b0:75:eb:dc:66:33:ca:f9:
         69:b1:27:11:53:75:0b:e2:b9:d3:57:b0:89:ea:94:e9:c7:6e:
         26:23:35:79:41:d0:77:10:7f:93:b7:db:79:b9:53:67:3e:5f:
         5f:0c:18:28:c2:9c:06:fc:d1:a3:0b:7b:93:5a:9c:27:12:70:
         8c:a2:5a:f1:76:c0:55:1b:76:6e:48:2a:e6:98:11:1b:88:32:
         af:b6:66:02:c3:92:48:96:f3:61:ca:3a:66:b2:e3:70:2e:3a:
         78:ea:33:99:d4:c7:6d:1a:ad:2b:06:d3:eb:eb:f6:81:9c:d7:
         f8:85:33:dc:a6:63:35:71:a2:89:df:bf:88:60:d7:c2:76:e2:
         0c:6a:73:e6:0e:b7:a0:78:f6:4a:a4:ec:62:c9:78:1f:f1:d3:
         a7:37:76:53:10:ec:c4:ec:20:23:ec:9a:65:35:71:1f:34:21:
         ea:6b:a9:e2:93:66:6e:5d:03:c4:8f:76:3f:e7:bb:fd:bd:49:
         88:58:66:57:da:b7:3e:fe:40:ec:26:ae:05:9c:9f:4b:08:07:
         2a:ef:fa:12:62:01:9c:a4:f2:2d:d8:f8:97:3e:92:58:21:bd:
         8f:b9:8e:b6:f8:20:41:a1:11:ff:73:08:4f:3c:74:dd:a5:00:
         56:19:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:50 2026 by rpki-client