Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9r96ewOqFcE9hh9ltkcy_Zloh8k.roa
File:                     9r96ewOqFcE9hh9ltkcy_Zloh8k.roa (raw, json)
Hash identifier:          HIv8JMvogULBT+/CdGGaVFe9pu7bKRIZ6c4MhavPdTo=
Subject key identifier:   F6:BF:7A:7B:03:AA:15:C1:3D:86:1F:65:B6:47:32:FD:99:68:87:C9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       051A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9r96ewOqFcE9hh9ltkcy_Zloh8k.roa
Signing time:             Sun 01 Mar 2026 01:34:40 +0000
ROA not before:           Sun 01 Mar 2026 01:34:40 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ab00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:40 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F6BF7A7B03AA15C13D861F65B64732FD996887C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:66:11:bc:6c:e7:50:62:da:6a:2a:2e:80:
                    6f:3f:a5:d9:07:08:c8:28:42:52:c6:53:cf:c9:35:
                    9c:00:dd:d1:2d:47:70:86:b2:67:f8:3f:a0:56:6f:
                    5d:2a:51:3d:82:2e:ed:7c:89:8c:ea:44:5c:22:6e:
                    ab:1c:1a:85:7e:57:e7:f5:09:bd:63:f4:09:2f:b3:
                    e6:81:61:37:7c:ac:e3:e8:91:1f:c6:10:22:37:5a:
                    49:89:b7:ee:2c:ac:21:f9:fb:4d:9a:0b:e8:e5:41:
                    80:0a:e3:7c:76:b7:6f:e6:33:d5:5c:9d:a0:b7:f8:
                    a6:58:bd:18:f9:77:41:d1:00:d9:c2:56:01:e1:d1:
                    fc:f1:b5:77:64:a5:2b:f1:d7:27:1c:39:bd:e1:36:
                    4c:fb:50:4a:e0:b5:14:02:17:0b:5f:5e:01:24:2b:
                    e2:26:f8:e0:ba:44:1c:12:34:a5:43:e7:0b:c7:32:
                    ba:4a:71:34:c6:ac:c2:5a:a8:95:af:27:1a:57:05:
                    fe:3c:ac:d8:de:d6:4f:cd:18:22:08:3a:5f:7a:6d:
                    21:1b:9a:07:a7:d6:a1:23:71:c4:14:4d:9d:49:9b:
                    a7:d0:73:82:65:d1:56:77:72:23:23:d4:66:ba:ce:
                    3b:03:a9:38:7e:08:6c:7b:a8:1f:8c:74:09:cc:2b:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BF:7A:7B:03:AA:15:C1:3D:86:1F:65:B6:47:32:FD:99:68:87:C9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9r96ewOqFcE9hh9ltkcy_Zloh8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:6e:2d:95:66:ff:eb:40:1e:43:08:61:d5:20:d9:64:cf:
         f6:6a:b6:15:9e:50:08:d7:fa:a0:b2:d0:3d:45:c2:46:2f:ef:
         09:79:cc:8e:e8:79:b4:3a:b4:9f:f2:3d:26:80:67:9a:26:29:
         bd:92:52:c1:56:84:09:01:a6:67:1b:c4:2f:82:d5:68:a6:d4:
         6b:68:09:51:62:a3:92:27:3e:c7:d9:fc:8a:08:b2:1a:e4:34:
         61:d7:40:3a:5c:dc:79:2e:9a:de:a6:7e:e1:9f:a6:42:51:7b:
         6b:34:1d:6f:18:7d:8c:7c:9b:fd:62:1b:94:e5:49:9a:6e:f3:
         ff:6c:44:a0:a1:92:3d:f4:37:28:da:8b:f4:cb:79:60:c4:a1:
         84:b1:32:a8:03:12:85:d0:dd:1d:d5:66:40:c7:81:a8:31:0f:
         3b:69:91:d5:64:32:87:e3:99:83:cf:8b:3e:c3:be:83:15:45:
         89:50:ca:e0:dd:2a:43:83:6b:62:13:9b:ec:99:8e:9e:a6:af:
         7a:ba:ff:64:d7:91:fb:24:d9:3b:2e:0a:0c:71:63:08:16:54:
         e1:5d:04:8b:43:f8:88:fa:e1:27:54:3a:b7:5e:8d:5b:45:47:
         cc:f6:00:28:d0:c0:2f:69:db:1f:a0:37:a0:03:1b:7c:28:0f:
         1c:fe:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:46 2026 by rpki-client