Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6kzJHWSKPRYqRcjpAwYAIv3ykJw.roa
File:                     6kzJHWSKPRYqRcjpAwYAIv3ykJw.roa (raw, json)
Hash identifier:          MA36kKRQefb1qxr/AIe8T3bBhgD72ebRcmzt37WaO38=
Subject key identifier:   EA:4C:C9:1D:64:8A:3D:16:2A:45:C8:E9:03:06:00:22:FD:F2:90:9C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0583
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6kzJHWSKPRYqRcjpAwYAIv3ykJw.roa
Signing time:             Sun 01 Mar 2026 01:52:25 +0000
ROA not before:           Sun 01 Mar 2026 01:52:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EA4CC91D648A3D162A45C8E903060022FDF2909C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:0a:02:f1:04:10:f2:a6:56:dd:e9:5b:d7:
                    05:fb:87:c2:ae:10:66:75:5d:c4:88:49:50:f1:33:
                    9e:87:0d:bb:dd:28:fe:b2:03:a0:58:a7:72:8f:47:
                    f9:f7:30:59:37:a0:37:b4:28:e9:cb:9a:37:82:c2:
                    fb:f5:35:8b:d7:76:7c:4c:fa:7d:0f:c2:f5:13:bd:
                    5d:46:49:00:1c:56:9a:60:5e:34:49:6b:a9:9d:1a:
                    86:81:89:06:e5:60:b9:a3:e8:c7:7f:41:00:5d:ed:
                    cc:a3:70:2d:29:3a:9c:19:d7:9e:df:d4:0c:24:4b:
                    5d:9c:b1:9e:12:b3:18:e7:8c:8c:b7:b7:69:14:46:
                    3c:15:6b:a8:a9:4d:52:63:2c:75:da:51:70:ed:ee:
                    66:d3:8f:af:8c:0b:1a:ce:24:cc:d4:32:b0:43:82:
                    29:87:e5:a2:c8:90:47:a8:9c:23:d3:a4:da:0f:c4:
                    e7:e6:5f:f6:04:c5:33:27:1d:31:6e:9f:6e:5f:6d:
                    eb:e6:8e:36:72:2f:ba:86:41:90:f6:e4:d3:b2:8b:
                    b2:72:50:cd:72:a9:d8:1f:ff:9b:0d:bc:ba:21:f0:
                    2e:b3:46:f5:c0:7e:49:57:3e:0e:58:d1:a0:35:7d:
                    33:44:78:f0:7c:21:85:4f:e7:65:bd:65:17:17:cd:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4C:C9:1D:64:8A:3D:16:2A:45:C8:E9:03:06:00:22:FD:F2:90:9C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6kzJHWSKPRYqRcjpAwYAIv3ykJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:fd:b4:4d:2c:e9:21:5a:57:eb:21:59:0a:44:e7:14:f6:
         65:8e:7d:5c:81:a4:f9:39:c7:85:cb:f8:bc:dc:37:4b:be:9c:
         eb:95:a9:0f:d9:1d:b7:3f:87:78:7d:fe:e1:bf:2c:ed:7b:72:
         cf:b0:94:2d:a9:be:77:46:c6:94:5b:f8:6d:35:a1:bd:f1:1c:
         e9:aa:ed:41:13:05:83:7c:0e:54:44:f2:f8:fe:c2:06:75:2e:
         c1:06:97:76:45:9e:3e:18:26:13:83:be:68:71:3f:e1:2e:9c:
         31:89:06:1b:c2:9e:79:29:c2:6e:28:5f:f4:02:3e:ef:f8:94:
         a7:d8:4f:70:19:27:dc:b5:3d:1e:ba:8a:fc:0b:6b:02:82:72:
         81:5d:7e:26:1f:c6:6e:ac:08:2a:90:5d:e1:65:12:c2:32:70:
         19:24:b9:49:c7:f5:85:de:1e:72:43:14:80:b2:df:93:35:67:
         d3:9d:37:c4:ed:4e:97:44:8b:28:96:b4:db:43:77:b1:3c:c5:
         42:6b:0c:be:b7:17:eb:33:a8:98:e5:c3:a2:2c:3e:3c:cc:3e:
         e3:01:ca:38:5d:d5:21:26:9c:6c:22:f7:93:1a:72:ba:75:bc:
         33:b6:bf:c3:1e:cb:90:1c:52:cf:3f:52:cf:e5:69:f8:53:85:
         a0:7d:72:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTUyMjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVBNENDOTFENjQ4QTNE
MTYyQTQ1QzhFOTAzMDYwMDIyRkRGMjkwOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGFQoC8QQQ8qZW3elb1wX7h8KuEGZ1XcSISVDxM56HDbvdKP6y
A6BYp3KPR/n3MFk3oDe0KOnLmjeCwvv1NYvXdnxM+n0PwvUTvV1GSQAcVppgXjRJ
a6mdGoaBiQblYLmj6Md/QQBd7cyjcC0pOpwZ157f1AwkS12csZ4SsxjnjIy3t2kU
RjwVa6ipTVJjLHXaUXDt7mbTj6+MCxrOJMzUMrBDgimH5aLIkEeonCPTpNoPxOfm
X/YExTMnHTFun25fbevmjjZyL7qGQZD25NOyi7JyUM1yqdgf/5sNvLoh8C6zRvXA
fklXPg5Y0aA1fTNEePB8IYVP52W9ZRcXzXiXAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU6kzJHWSKPRYqRcjpAwYAIv3ykJwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS82a3pKSFdTS1BSWXFSY2pwQXdZQUl2M3lrSncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7UwDQYJKoZIhvcNAQELBQADggEBAIt7/bRNLOkhWlfrIVkK
ROcU9mWOfVyBpPk5x4XL+LzcN0u+nOuVqQ/ZHbc/h3h9/uG/LO17cs+wlC2pvndG
xpRb+G01ob3xHOmq7UETBYN8DlRE8vj+wgZ1LsEGl3ZFnj4YJhODvmhxP+EunDGJ
BhvCnnkpwm4oX/QCPu/4lKfYT3AZJ9y1PR66ivwLawKCcoFdfiYfxm6sCCqQXeFl
EsIycBkkuUnH9YXeHnJDFICy35M1Z9OdN8TtTpdEiyiWtNtDd7E8xUJrDL63F+sz
qJjlw6IsPjzMPuMByjhd1SEmnGwi95Macrp1vDO2v8Mey5AcUs8/Us/lafhThaB9
cug=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:20 2026 by rpki-client