Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6w2WsHmjBm68q18UZzrLuZTXO1o.roa
File:                     6w2WsHmjBm68q18UZzrLuZTXO1o.roa (raw, json)
Hash identifier:          0smVPipMuxUFx+qUiDncnnFNzyh9FAQKcFe+S88bOWE=
Subject key identifier:   EB:0D:96:B0:79:A3:06:6E:BC:AB:5F:14:67:3A:CB:B9:94:D7:3B:5A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0640
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6w2WsHmjBm68q18UZzrLuZTXO1o.roa
Signing time:             Sun 01 Mar 2026 02:30:49 +0000
ROA not before:           Sun 01 Mar 2026 02:30:49 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:49 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EB0D96B079A3066EBCAB5F14673ACBB994D73B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:8a:f5:4d:d0:3e:cc:3c:86:7b:51:c8:41:
                    44:6b:33:67:17:ea:19:16:16:4c:45:e0:8e:88:7e:
                    1a:30:30:78:0d:1f:12:17:bd:55:ac:3b:14:db:05:
                    18:05:43:93:35:3a:da:dc:be:31:d1:01:c2:92:ae:
                    2d:62:45:5a:be:f5:90:df:52:a7:03:6d:c4:49:b8:
                    2f:09:68:96:37:84:3b:10:7c:0b:70:e2:84:62:2d:
                    a4:4c:9e:b0:d2:e2:58:a7:80:79:95:f6:d4:53:a4:
                    f7:f2:e0:2a:b6:2b:e3:a2:cf:fb:14:fc:93:d2:cb:
                    3a:dc:ca:36:16:a2:59:a4:a5:8d:09:89:a4:88:6e:
                    2e:8f:ad:62:04:f2:d7:03:32:6a:21:ef:5f:73:32:
                    6e:bb:05:c2:df:b7:60:e9:2c:fb:c0:c9:2f:5c:31:
                    2c:aa:ea:b0:68:d8:16:52:4d:62:2f:ea:7c:f7:f2:
                    09:cf:b8:78:56:aa:6a:24:df:80:59:a3:a2:c6:b0:
                    b5:96:a8:b4:be:a8:90:be:ba:a6:44:63:d9:c5:99:
                    b8:b7:0a:6e:c2:55:77:05:cd:4d:34:19:65:2e:1b:
                    9a:33:ab:bb:1d:bc:86:d5:c4:07:25:0f:85:d8:ac:
                    17:16:bd:ca:ab:8a:26:37:91:9b:3b:10:fa:26:40:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:96:B0:79:A3:06:6E:BC:AB:5F:14:67:3A:CB:B9:94:D7:3B:5A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6w2WsHmjBm68q18UZzrLuZTXO1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:d5:1f:1a:6b:22:89:ac:7b:ce:30:1d:64:b9:0d:ed:f4:
         21:53:e1:1c:aa:0d:dd:e8:6f:de:2d:fa:c0:08:e1:3c:32:c7:
         d9:d4:7a:88:ed:c7:d1:2a:2f:6c:bf:c5:70:1b:a5:d1:4b:40:
         a1:b4:74:36:0b:a7:ac:d5:33:09:4c:1a:38:24:4d:07:a1:a6:
         38:83:27:0b:77:7f:8c:82:fb:89:95:07:fe:4c:ce:94:d6:bc:
         aa:7f:8a:86:1a:a2:cc:65:e9:ab:75:f9:41:4e:20:cd:d9:59:
         33:de:4e:4e:f9:72:2a:77:45:e6:ee:98:57:51:0e:b7:6c:cb:
         2d:4f:b9:fe:1e:58:63:b2:59:28:51:b6:55:b3:00:72:3c:56:
         bf:3d:25:3f:8a:19:94:a3:66:a6:46:35:77:61:98:f8:24:7d:
         3d:03:21:b4:cd:6f:e4:10:94:7e:18:b4:6a:63:e1:ee:b1:e2:
         6a:7e:08:1e:4e:f9:1e:75:3b:09:03:e5:a5:29:f2:93:bc:7b:
         5a:b6:2a:c0:c8:81:99:91:a1:7c:d9:00:94:58:6e:0b:81:41:
         6f:b0:3f:5f:f6:30:89:ce:2c:a0:30:17:5a:ef:ec:a9:1e:be:
         71:70:9c:05:a8:3d:ad:b8:77:d0:46:a5:91:fa:0e:54:e1:3e:
         ae:ba:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:55 2026 by rpki-client