Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7A1HUX8Nl9zmVU1L7YMmSwlO-zg.roa
File:                     7A1HUX8Nl9zmVU1L7YMmSwlO-zg.roa (raw, json)
Hash identifier:          wd8N8vRbioDJ12E+bZIsE4dLlTwpQ7sZMaAsiKch7Iw=
Subject key identifier:   EC:0D:47:51:7F:0D:97:DC:E6:55:4D:4B:ED:83:26:4B:09:4E:FB:38
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0526
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7A1HUX8Nl9zmVU1L7YMmSwlO-zg.roa
Signing time:             Sun 01 Mar 2026 01:34:46 +0000
ROA not before:           Sun 01 Mar 2026 01:34:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EC0D47517F0D97DCE6554D4BED83264B094EFB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:a2:1f:3b:b5:93:54:02:de:f1:da:d2:94:
                    14:04:a1:11:11:41:43:86:92:af:0c:9f:b7:9d:f3:
                    79:04:6a:d6:8e:b1:73:55:af:bb:a8:1b:8c:72:ca:
                    b9:8d:a7:a8:53:97:ce:d8:e4:3f:c0:26:58:37:29:
                    d1:46:8a:bd:4b:9d:24:37:8a:34:85:d0:38:bb:c2:
                    50:e3:6f:36:7d:11:da:90:32:b9:14:eb:19:c5:ae:
                    61:9a:3b:f6:a6:cc:5e:e5:0d:e5:4f:99:41:68:5d:
                    25:f5:57:42:32:0e:57:5b:34:93:18:26:47:3b:af:
                    5a:76:8c:eb:49:a8:c5:dd:60:c5:ee:1c:c3:3f:50:
                    20:1a:d3:ed:2b:c5:2b:c0:94:44:ab:dd:7f:e5:67:
                    2f:e6:70:c5:b1:3e:4f:4e:80:a2:78:ea:e6:4d:86:
                    77:09:cf:49:07:36:24:84:d3:00:c7:f9:8c:27:a4:
                    62:8f:91:13:db:e6:0e:70:26:12:4c:8d:8a:29:69:
                    2b:fb:c5:67:4a:39:84:36:ca:e7:7d:18:7a:33:34:
                    09:d0:d8:db:4e:bf:51:da:ca:36:5a:8b:27:ed:1c:
                    ca:74:50:28:16:52:38:94:61:29:ae:6d:17:2a:df:
                    2d:c4:8a:f2:b1:cf:87:ab:69:99:f5:94:7d:5b:18:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:47:51:7F:0D:97:DC:E6:55:4D:4B:ED:83:26:4B:09:4E:FB:38
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7A1HUX8Nl9zmVU1L7YMmSwlO-zg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:99:5d:cf:84:e1:56:e3:66:b8:ae:43:49:a8:a0:e0:83:
         02:4a:e9:1b:ed:e5:e5:ae:67:db:c0:9f:e4:e8:b7:a7:c6:43:
         3b:3a:77:4e:e2:89:c1:bd:ee:88:5c:65:22:aa:aa:ae:a9:dc:
         1d:a4:0f:bb:15:7d:ce:79:07:f7:56:77:b2:c4:11:75:80:19:
         b8:42:68:8b:0c:34:30:ce:43:1b:35:e9:33:f8:ce:74:0a:ae:
         b4:74:6d:39:9d:68:e3:9e:ee:65:06:60:88:ee:8d:97:ad:cc:
         b0:1f:3e:25:70:ad:71:47:15:66:52:5e:41:b9:97:c5:13:01:
         88:22:e8:35:1d:32:74:66:26:a2:83:e8:d9:5a:b4:ea:9a:0a:
         7d:5a:7c:1f:cc:f7:9d:53:be:b0:f4:5a:43:f0:ac:0c:af:63:
         32:41:2a:3b:45:8b:ef:33:87:d2:3b:d5:f2:2a:a8:77:79:ee:
         21:f4:30:46:52:bf:5f:a6:47:80:05:da:1f:88:5c:69:06:41:
         79:36:b2:fd:09:8e:92:47:f2:79:c6:fa:af:99:0f:09:5b:6d:
         ab:5d:61:4c:c5:c4:52:2f:d5:1f:c9:90:d8:5f:bb:62:d5:4c:
         bf:d7:46:e8:55:35:2c:7a:95:29:d0:f6:e5:ce:a2:7d:c3:c5:
         9c:a6:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:24 2026 by rpki-client