Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6qfdc7qkfG3h9I4C8onSjYdfrLM.roa
File:                     6qfdc7qkfG3h9I4C8onSjYdfrLM.roa (raw, json)
Hash identifier:          xICeNiuGBsZPmF9KmQEwahXSyV1c/5boi/PazKB6BRc=
Subject key identifier:   EA:A7:DD:73:BA:A4:7C:6D:E1:F4:8E:02:F2:89:D2:8D:87:5F:AC:B3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0616
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6qfdc7qkfG3h9I4C8onSjYdfrLM.roa
Signing time:             Sun 01 Mar 2026 02:20:58 +0000
ROA not before:           Sun 01 Mar 2026 02:20:58 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:20:58 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EAA7DD73BAA47C6DE1F48E02F289D28D875FACB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:f6:b3:20:78:93:19:cd:22:1a:4c:dc:d1:
                    23:75:71:bb:95:18:b3:4f:f0:dc:b4:70:ce:58:b9:
                    45:22:33:2a:3e:b3:c5:84:58:cd:f9:00:30:32:10:
                    9a:e6:4a:0e:dd:c5:09:36:af:92:67:d4:5e:f3:dd:
                    d5:a6:6b:b1:fb:7b:67:ec:b1:94:84:1b:ee:dd:03:
                    c2:3b:d8:b2:f5:1f:fe:0d:1b:98:10:17:64:d8:b2:
                    35:ba:41:9e:eb:82:b8:80:ff:ba:2b:d1:96:8e:54:
                    f9:7e:63:de:bf:a0:05:0f:79:b4:ce:8f:fb:b1:6b:
                    a6:cb:ac:e5:5e:62:04:8f:77:a4:7e:03:73:43:7b:
                    10:e9:84:77:74:25:33:77:b8:64:5f:c6:79:94:eb:
                    b5:bb:3c:16:ef:ed:ab:04:d7:30:04:9b:35:42:11:
                    9d:13:25:64:6c:dc:ea:69:68:a7:18:70:57:a2:39:
                    b8:d5:50:bc:66:d5:dc:4e:f4:61:e6:42:71:21:2c:
                    00:94:cb:c6:14:f7:6b:e5:e9:1f:b1:40:ee:cb:ed:
                    b4:a7:95:74:b1:15:c6:2a:e3:e0:35:d6:f3:25:ef:
                    ca:ff:f3:35:a0:4d:29:60:ce:03:40:b8:e9:74:17:
                    90:26:5a:06:2e:04:fd:c1:87:26:22:79:15:18:f5:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:DD:73:BA:A4:7C:6D:E1:F4:8E:02:F2:89:D2:8D:87:5F:AC:B3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6qfdc7qkfG3h9I4C8onSjYdfrLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:fc:0b:55:1a:ba:c6:85:ea:a4:91:b5:73:09:9b:74:c3:
         2b:7a:4b:25:58:16:f0:50:c7:f3:25:91:a2:2a:cd:79:c3:74:
         5a:92:ab:41:3e:8f:01:aa:c0:87:44:4a:45:a3:99:a8:dc:c0:
         c1:05:77:16:7b:17:c6:4c:ad:11:45:f8:b9:39:04:0c:ce:fd:
         72:79:cc:d9:a0:28:76:3c:a8:4d:3c:b7:ad:d0:cd:aa:f7:69:
         88:f5:88:5c:5b:f3:a5:69:c6:33:8f:01:dc:43:ea:d5:5d:15:
         27:40:9d:36:96:eb:0c:fc:c4:1b:14:94:70:33:15:5a:32:c5:
         bc:53:f1:b2:7d:77:fd:06:04:02:79:6c:8e:b8:8b:39:06:54:
         c4:04:d1:2c:0b:8a:b3:02:ec:d1:c2:5e:91:9f:f4:09:e1:a9:
         df:59:84:2f:83:e8:80:41:0b:53:bc:58:d2:19:e0:62:83:fc:
         a0:da:d5:35:6f:26:aa:47:7c:23:9d:40:ab:f1:18:0e:b4:5d:
         35:3f:3c:f4:c1:3a:51:77:85:9c:25:4b:d6:c1:cd:d4:7f:ed:
         8d:12:4d:fe:4e:bc:f5:c2:01:a1:01:b8:f2:fd:2e:11:c6:f3:
         63:5a:2f:58:2c:4c:ee:5e:b1:9b:c1:58:5b:57:d8:2c:23:06:
         0c:2d:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:34 2026 by rpki-client