Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/65DMqAhcZDzc1kPD1NNRLa5NP58.roa
File:                     65DMqAhcZDzc1kPD1NNRLa5NP58.roa (raw, json)
Hash identifier:          MqHWxvwS8iIt8nXjstmHeXdUI4PF5cgkX/AVcnVICY4=
Subject key identifier:   EB:90:CC:A8:08:5C:64:3C:DC:D6:43:C3:D4:D3:51:2D:AE:4D:3F:9F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/65DMqAhcZDzc1kPD1NNRLa5NP58.roa
Signing time:             Sun 01 Mar 2026 02:00:47 +0000
ROA not before:           Sun 01 Mar 2026 02:00:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EB90CCA8085C643CDCD643C3D4D3512DAE4D3F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:97:d6:da:e8:f6:39:cb:1b:4a:af:2c:d5:
                    df:a8:cb:ae:f3:f0:42:45:d3:c3:c1:33:65:0a:60:
                    6a:c4:08:c9:27:a0:5d:20:bd:c3:f7:bc:d5:f4:11:
                    a1:1a:37:b4:17:8e:f0:da:93:a7:65:f5:20:c1:f5:
                    5b:b2:91:da:c4:e6:7f:2a:19:fc:21:52:a1:38:61:
                    3c:27:0b:67:06:17:fd:88:9d:15:14:e8:7d:00:a4:
                    b8:a0:0b:3d:5a:4f:bf:c5:d7:e7:a8:92:ee:1c:68:
                    a4:6a:c5:2f:70:63:03:bc:43:30:a9:9c:59:54:8f:
                    e1:49:51:c8:01:1b:5f:ad:37:c8:1f:98:19:d3:bb:
                    da:e1:64:e7:0f:76:88:f1:ef:cc:8b:93:55:ba:62:
                    ce:a4:f1:21:28:8f:5b:64:a0:03:32:da:55:44:26:
                    96:ea:b0:8a:7c:5a:fc:ec:e3:ab:46:2b:15:bc:9f:
                    f7:96:9a:84:69:fa:7c:b7:ca:99:44:03:84:72:98:
                    3c:64:88:04:e4:c9:e5:ed:3e:d7:a4:8a:ef:cb:9d:
                    e1:e7:32:0f:49:51:52:49:59:98:ea:37:14:8e:cf:
                    15:30:fd:01:07:50:1e:91:bf:ea:99:16:c8:73:86:
                    fb:6b:06:67:56:a2:e5:2a:97:98:5c:b4:b5:54:78:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:90:CC:A8:08:5C:64:3C:DC:D6:43:C3:D4:D3:51:2D:AE:4D:3F:9F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/65DMqAhcZDzc1kPD1NNRLa5NP58.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a5:5b:a0:49:f9:f0:95:4f:9b:c3:d1:e2:2d:09:aa:f1:45:1b:
         6b:b3:52:d6:d3:58:92:0f:6f:23:63:bb:9d:ad:6a:a8:50:80:
         bb:71:31:1c:b0:87:20:82:34:1c:e2:ae:82:77:41:f5:fb:cf:
         d2:2e:f6:63:43:9f:1a:a2:0c:56:9b:c2:94:f4:f0:33:f5:5f:
         ec:2f:4a:3a:fa:60:a7:03:44:09:bf:cd:05:8a:28:0f:7f:3a:
         63:cb:30:23:16:12:27:a5:9b:f8:17:85:03:4b:a8:b8:07:41:
         4b:cd:e2:e4:56:66:81:fa:e4:d3:03:7d:11:2d:4e:28:42:9b:
         5c:b5:1c:38:f8:1f:6a:e6:0c:95:70:22:34:e7:56:8f:09:c5:
         75:1d:fe:2b:8b:ea:3d:2f:61:e7:75:29:c4:03:da:14:49:6d:
         78:5e:9d:53:27:24:a0:cb:ed:ac:5e:0d:57:1a:18:c1:48:17:
         f8:b1:8d:7a:03:2f:75:28:25:f6:2f:9e:24:f7:12:dd:af:08:
         90:95:90:53:6e:c7:c0:8a:7c:f2:06:89:8d:c2:4a:dd:20:a3:
         f0:68:f2:64:a2:cf:e2:75:b7:56:e2:67:04:85:a0:20:e8:40:
         de:83:e5:e9:fa:92:69:e6:ca:72:fd:4a:9c:ff:62:2e:61:27:
         05:74:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:22 2026 by rpki-client