Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8jnS7wZlps5-6syrJDqofGEYzYQ.roa
File:                     8jnS7wZlps5-6syrJDqofGEYzYQ.roa (raw, json)
Hash identifier:          NjHE9/qmpD07xE3vrRAzyEjr7CNKqn1TFDX82rUjNYg=
Subject key identifier:   F2:39:D2:EF:06:65:A6:CE:7E:EA:CC:AB:24:3A:A8:7C:61:18:CD:84
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       053A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8jnS7wZlps5-6syrJDqofGEYzYQ.roa
Signing time:             Sun 01 Mar 2026 01:41:10 +0000
ROA not before:           Sun 01 Mar 2026 01:41:10 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:10 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F239D2EF0665A6CE7EEACCAB243AA87C6118CD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:ca:b0:5e:18:18:07:66:86:21:c5:a1:5a:
                    9f:ba:a3:ac:52:0a:6c:ba:3b:ed:54:3b:3f:32:8a:
                    ad:62:bb:44:9f:24:44:ee:29:61:c1:b3:d5:55:98:
                    fe:2e:d1:92:c7:64:c8:5e:17:8a:7b:b1:54:23:5e:
                    02:b1:08:60:1d:e4:91:1e:13:14:1d:f0:15:b1:ec:
                    dc:d7:f0:82:10:ca:e1:0d:16:bd:cb:2c:5f:36:e7:
                    37:bf:3c:25:78:2a:5f:ca:88:22:6d:a0:c4:6d:07:
                    b5:7f:b0:67:e6:1b:9c:2b:6b:b3:ba:48:80:fb:6f:
                    53:a8:15:ba:b2:96:55:24:c1:07:30:69:e4:9e:59:
                    f1:2d:67:40:b2:23:71:d4:1d:13:3f:5d:b9:c4:de:
                    0f:70:d1:c5:7f:6d:d2:42:5d:7f:ec:5c:95:a2:48:
                    f9:ae:e4:e2:fb:6a:d2:c3:d0:ec:b7:24:84:3c:63:
                    04:84:7f:51:ae:0c:5b:2c:c0:74:85:f4:73:48:c5:
                    ac:94:c5:f6:24:4e:4c:40:50:da:4c:be:8e:49:c8:
                    22:94:bf:f7:1c:57:cf:20:db:80:7c:24:08:fa:50:
                    50:7c:10:df:5c:1e:a5:ae:66:ed:b7:5b:56:a5:ae:
                    29:c9:8f:ba:df:6c:d4:c8:50:0e:27:ec:c9:ea:54:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:39:D2:EF:06:65:A6:CE:7E:EA:CC:AB:24:3A:A8:7C:61:18:CD:84
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8jnS7wZlps5-6syrJDqofGEYzYQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:10:97:ed:08:4d:64:57:af:09:07:23:b5:98:b4:43:de:fd:
         ae:53:7b:f7:8e:ff:db:79:40:f9:b0:c0:b8:9d:08:bb:e2:c6:
         c5:9f:5a:4c:72:f9:bd:30:83:85:69:71:eb:93:52:aa:fd:c7:
         e2:59:77:09:31:11:89:e6:b1:76:8b:7a:50:6b:f0:63:82:a4:
         6b:33:8b:c1:d8:72:09:6d:ae:80:a2:59:56:f8:39:0a:09:93:
         a1:9c:73:e3:3f:3d:0b:99:e3:91:c9:e8:9a:fa:1a:45:a9:d7:
         c0:ab:01:9b:05:84:08:5f:dd:40:47:aa:a2:0e:d1:21:ba:7a:
         32:b1:34:71:05:f3:5c:68:3c:04:4f:4d:9c:b6:b9:b0:8a:cb:
         7a:ae:c8:f1:07:ee:d8:31:8c:17:ee:77:81:b1:84:48:72:4c:
         b3:3d:b2:14:d5:27:8b:e4:bc:84:d1:8f:c1:4f:4b:dc:7d:e4:
         56:f2:3b:ad:e8:c5:2c:c5:67:b1:d9:a0:e8:f9:60:5d:68:92:
         e4:b1:f1:6d:7c:03:01:d1:97:fc:59:66:aa:86:75:a7:49:57:
         c5:1a:7d:df:15:36:36:36:5f:90:81:58:cb:c2:57:17:5e:c4:
         de:8c:b6:f6:e2:51:30:a4:a3:df:df:cb:f0:45:de:5a:f3:e5:
         82:49:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:10 2026 by rpki-client