Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8RUsVElQ0ZCCENSYr1x3Tloyy6c.roa
File:                     8RUsVElQ0ZCCENSYr1x3Tloyy6c.roa (raw, json)
Hash identifier:          vXbO1xN/ma6IFNWXHyoIYJSXyd9yDaMsm4ZN/dTcCIw=
Subject key identifier:   F1:15:2C:54:49:50:D1:90:82:10:D4:98:AF:5C:77:4E:5A:32:CB:A7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       055F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8RUsVElQ0ZCCENSYr1x3Tloyy6c.roa
Signing time:             Sun 01 Mar 2026 01:46:55 +0000
ROA not before:           Sun 01 Mar 2026 01:46:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F1152C544950D1908210D498AF5C774E5A32CBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:e6:c3:d1:ff:31:2c:c5:19:b0:c9:49:62:
                    a0:cf:a6:7b:cf:c5:21:26:f7:92:4c:b2:ca:f5:e6:
                    02:c2:72:8b:de:9e:d1:73:69:2c:4f:75:d2:10:9e:
                    f4:51:44:c6:32:f7:2e:04:53:7f:5d:ad:12:ba:ab:
                    79:18:d9:65:ee:fb:87:61:ee:56:a5:83:3e:92:6b:
                    5e:65:62:ef:68:ad:2b:af:43:9a:a4:87:c7:8f:53:
                    83:ae:99:3b:02:51:82:35:7c:6c:cc:de:8d:74:88:
                    76:83:83:a0:86:b8:24:a3:9b:52:8e:bb:74:55:83:
                    38:5c:4a:8b:ad:12:18:ee:f1:c7:b7:08:6f:e1:75:
                    5c:f8:67:8a:1f:97:9b:dd:a0:40:5c:23:30:4b:43:
                    02:b6:f1:26:93:2e:eb:3b:bd:dc:9a:97:f9:0c:7b:
                    37:a9:c5:06:eb:33:e1:33:d0:26:df:ee:e7:9a:d9:
                    26:73:3c:ae:6d:66:d7:17:24:3f:67:a2:1b:65:87:
                    02:05:64:68:90:1c:03:12:ca:9a:cc:af:a2:dd:63:
                    8b:c7:2a:87:e0:d4:3a:c6:e5:1a:3c:18:34:ee:2b:
                    76:55:d4:af:8b:3c:b2:d0:80:b7:97:97:d3:a1:42:
                    66:76:7e:84:6a:ff:1f:51:81:f7:f6:28:ea:69:ca:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:2C:54:49:50:D1:90:82:10:D4:98:AF:5C:77:4E:5A:32:CB:A7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8RUsVElQ0ZCCENSYr1x3Tloyy6c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:65:71:0c:ae:01:9b:26:a5:c1:5c:98:cb:65:4a:58:5f:
         73:09:17:ab:20:0e:e4:4e:ca:75:9d:4b:9f:8c:1c:a0:81:35:
         e6:1c:1c:73:ff:2f:93:1a:6c:f6:ba:b7:39:c9:da:b4:a8:55:
         a3:38:9b:d6:e0:a0:8d:f0:b6:87:68:c7:f9:f3:2f:77:58:df:
         d5:eb:70:3d:18:d5:41:01:7a:7e:f8:48:b8:75:e9:99:f4:5e:
         8f:ec:63:63:2b:29:e5:73:d6:98:24:14:f8:21:9b:b7:3a:66:
         09:5a:94:35:1b:77:f2:18:24:49:20:db:8a:11:21:73:8b:f5:
         08:e7:e9:01:d6:37:d1:68:1f:d2:4e:6d:38:04:2c:57:49:31:
         0b:1b:47:41:78:c3:ea:36:d5:54:eb:84:cf:a2:70:23:99:2b:
         c0:12:68:95:fd:8a:6e:b2:d1:01:89:05:91:82:d5:7b:04:74:
         ea:c9:5a:9a:c2:0b:2c:6d:c2:f4:de:2a:2e:ee:dd:48:fb:86:
         3e:e8:9c:63:d4:be:e1:7d:d9:ad:56:68:50:12:35:41:73:18:
         c7:f5:c8:7a:e5:b4:e8:8a:ed:60:1b:62:45:08:01:5e:16:1f:
         2b:d4:61:a5:e4:69:6b:0b:f9:8b:e7:b6:ea:46:c0:77:a0:4f:
         8b:b8:a6:80
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTQ2NTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYxMTUyQzU0NDk1MEQx
OTA4MjEwRDQ5OEFGNUM3NzRFNUEzMkNCQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2eebD0f8xLMUZsMlJYqDPpnvPxSEm95JMssr15gLCcoventFz
aSxPddIQnvRRRMYy9y4EU39drRK6q3kY2WXu+4dh7lalgz6Sa15lYu9orSuvQ5qk
h8ePU4OumTsCUYI1fGzM3o10iHaDg6CGuCSjm1KOu3RVgzhcSoutEhju8ce3CG/h
dVz4Z4ofl5vdoEBcIzBLQwK28SaTLus7vdyal/kMezepxQbrM+Ez0Cbf7uea2SZz
PK5tZtcXJD9nohtlhwIFZGiQHAMSyprMr6LdY4vHKofg1DrG5Ro8GDTuK3ZV1K+L
PLLQgLeXl9OhQmZ2foRq/x9Rgff2KOppynO/AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU8RUsVElQ0ZCCENSYr1x3Tloyy6cwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS84UlVzVkVsUTBaQ0NFTlNZcjF4M1Rsb3l5NmMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa8gwDQYJKoZIhvcNAQELBQADggEBAGtUZXEMrgGbJqXBXJjL
ZUpYX3MJF6sgDuROynWdS5+MHKCBNeYcHHP/L5MabPa6tznJ2rSoVaM4m9bgoI3w
todox/nzL3dY39XrcD0Y1UEBen74SLh16Zn0Xo/sY2MrKeVz1pgkFPghm7c6Zgla
lDUbd/IYJEkg24oRIXOL9Qjn6QHWN9FoH9JObTgELFdJMQsbR0F4w+o21VTrhM+i
cCOZK8ASaJX9im6y0QGJBZGC1XsEdOrJWprCCyxtwvTeKi7u3Uj7hj7onGPUvuF9
2a1WaFASNUFzGMf1yHrltOiK7WAbYkUIAV4WHyvUYaXkaWsL+YvntupGwHegT4u4
poA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:44 2026 by rpki-client