Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9B58l8WSv_nfl6v7G8yiZ2XCjyo.roa
File:                     9B58l8WSv_nfl6v7G8yiZ2XCjyo.roa (raw, json)
Hash identifier:          4dLM7pQo6E8420043kv1Pa5l8mnti0SryVSgJWw1+Gw=
Subject key identifier:   F4:1E:7C:97:C5:92:BF:F9:DF:97:AB:FB:1B:CC:A2:67:65:C2:8F:2A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9B58l8WSv_nfl6v7G8yiZ2XCjyo.roa
Signing time:             Sun 01 Mar 2026 02:00:49 +0000
ROA not before:           Sun 01 Mar 2026 02:00:49 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:49 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F41E7C97C592BFF9DF97ABFB1BCCA26765C28F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:46:95:7e:af:db:07:85:5d:8b:e8:9b:4a:
                    82:2f:ac:3f:37:cf:75:85:68:90:17:5b:db:ec:6e:
                    04:f2:e1:2b:49:5d:3b:ec:d6:78:9a:a0:0d:25:0a:
                    d2:93:c6:71:0d:41:d5:21:37:ce:02:06:b5:c9:c2:
                    b2:3a:5d:50:cb:0c:55:2d:40:48:80:5c:ae:b0:ba:
                    8c:60:23:78:19:26:55:aa:12:f6:6a:6d:96:96:93:
                    00:e1:c8:65:4f:f8:b4:a8:89:37:1b:a7:30:62:fe:
                    a7:c3:f0:81:49:d7:19:24:d7:9a:9c:5e:ee:a8:18:
                    c7:bb:ef:35:a8:57:5f:dd:28:c8:7d:fb:8c:0e:bb:
                    17:a0:f7:13:e0:a2:57:c2:ea:24:32:d3:72:ee:fb:
                    69:69:43:d0:29:46:39:08:a8:ae:50:29:c4:2e:75:
                    1c:b0:67:f5:37:54:99:fb:1c:ae:0b:1a:24:d4:ac:
                    17:77:51:9a:da:95:63:fe:cc:1a:36:ec:b6:4b:74:
                    7a:24:2b:65:29:1a:a3:d7:41:90:21:14:95:a7:0e:
                    c0:69:b2:77:68:79:af:1c:c0:dc:66:ca:4d:06:d8:
                    97:8f:15:aa:0b:34:3f:65:bb:19:1f:e2:df:70:1e:
                    c5:fe:53:87:24:05:8e:9d:07:20:74:c9:0b:29:42:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:7C:97:C5:92:BF:F9:DF:97:AB:FB:1B:CC:A2:67:65:C2:8F:2A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9B58l8WSv_nfl6v7G8yiZ2XCjyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:4b:e0:3a:6e:bf:50:a0:af:9d:30:ce:12:2b:a8:19:f6:
         7e:2e:60:ff:2d:8b:00:15:62:42:04:f2:9b:f1:8a:5a:df:5c:
         53:40:cc:42:c9:c3:df:ec:99:a1:bd:79:77:c4:19:47:a9:ae:
         8e:b1:4a:2c:f8:93:56:87:4c:4f:ea:c3:58:45:36:fe:97:5b:
         25:06:68:dd:86:94:1a:0e:9d:58:91:2e:16:e8:44:1c:5f:81:
         29:a3:22:8c:34:84:ed:c1:78:35:98:f5:e9:b9:f9:02:38:90:
         6e:e6:a8:9a:75:db:b4:d8:fb:2a:97:5c:76:72:34:61:eb:af:
         e8:0e:29:86:3b:63:34:e3:7c:5e:50:68:52:52:32:68:c0:15:
         a3:8c:de:7e:48:c1:a6:f4:60:ba:94:ac:83:58:08:9e:82:a6:
         38:75:2a:fb:6c:05:49:81:51:c4:21:6f:3d:57:b2:8c:87:2d:
         2b:a4:4d:76:35:0c:80:7b:6f:e1:48:79:cf:a5:73:a0:f9:fd:
         44:c5:f1:21:c6:06:7b:fa:b6:4d:29:75:88:77:74:80:fa:fe:
         42:85:07:9a:2a:aa:00:ad:50:1a:d5:b5:99:da:34:7f:97:46:
         ee:53:81:fe:e3:b4:52:40:c3:8a:64:55:bd:0d:5b:1d:69:0c:
         ef:bd:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:51 2026 by rpki-client