Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A_RaM7lpQMEWZp-t1A9lORZgYx4.roa
File:                     A_RaM7lpQMEWZp-t1A9lORZgYx4.roa (raw, json)
Hash identifier:          fIVF6+ucWdWLhl/+3SaDu5q3gYuUOdm/5jcSGEt9w0c=
Subject key identifier:   03:F4:5A:33:B9:69:40:C1:16:66:9F:AD:D4:0F:65:39:16:60:63:1E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0631
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A_RaM7lpQMEWZp-t1A9lORZgYx4.roa
Signing time:             Sun 01 Mar 2026 02:25:53 +0000
ROA not before:           Sun 01 Mar 2026 02:25:53 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=03F45A33B96940C116669FADD40F65391660631E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:f9:27:ca:7c:39:b7:70:86:a7:12:c6:a8:
                    d0:3f:c9:40:fa:5e:46:d1:0f:f0:66:c0:5a:a0:f2:
                    6d:5c:fe:5c:ee:a8:70:2b:f8:2e:f6:92:32:fc:f9:
                    ef:b8:95:f6:fe:f2:73:fe:a2:84:94:1a:ba:19:5b:
                    c0:69:c9:57:03:79:89:a9:32:eb:28:ec:ab:cf:40:
                    f3:98:83:13:74:e2:61:05:3f:23:c5:25:2d:16:b4:
                    73:dc:bc:ae:71:2c:3d:55:5c:8d:f1:24:27:51:68:
                    da:44:4a:3a:a4:10:ef:ed:99:99:90:a1:07:b0:35:
                    b1:9e:73:52:07:82:4c:9c:fd:d7:5c:99:10:77:84:
                    e6:5d:c6:55:b6:af:ba:77:6a:0b:a6:f2:e9:5f:1a:
                    ba:70:ed:03:3b:38:71:4b:36:c0:1f:c4:78:dc:b4:
                    a1:6b:bf:61:77:08:35:36:3a:85:66:2d:5f:f9:bf:
                    f6:57:af:d6:cc:ec:68:cd:45:9a:15:9e:72:87:d0:
                    74:01:e4:a4:24:37:3e:e3:31:91:d3:20:90:1f:2b:
                    4f:f7:63:e1:b9:af:4b:e1:74:09:3b:f7:c1:d8:19:
                    9a:d0:15:d7:ab:62:8e:1f:74:36:cd:73:83:ed:2c:
                    7b:57:d4:e0:93:34:47:0c:71:e8:03:33:a5:c1:27:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:5A:33:B9:69:40:C1:16:66:9F:AD:D4:0F:65:39:16:60:63:1E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A_RaM7lpQMEWZp-t1A9lORZgYx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:86:74:bc:a2:c9:18:e8:e5:57:08:8b:19:13:55:b0:03:
         86:d2:27:e8:d4:85:60:f0:cc:ac:ff:f6:c9:da:60:ee:be:ce:
         13:cb:83:b4:42:4b:65:bb:0c:ca:16:3b:10:e2:14:2b:00:f5:
         e6:18:00:a9:9a:b1:6e:db:08:88:31:9d:f0:84:b5:1b:ed:97:
         b9:d4:38:70:d8:b2:3b:1d:8f:78:ff:1c:c9:c1:ef:fa:8d:47:
         89:7d:9d:5a:2c:45:25:cc:a8:d5:ab:7a:fc:39:63:be:a8:85:
         10:20:0a:a2:49:4d:aa:ae:49:96:19:56:20:e1:d0:95:c2:d7:
         b9:57:69:14:a9:ba:f9:6e:2c:38:21:82:6c:35:2c:b3:31:62:
         e5:df:44:c9:a1:6b:bd:41:48:20:4b:de:54:c0:e3:21:1d:47:
         b2:ea:2a:1b:d2:25:61:e9:d0:ec:49:a8:6b:a1:4a:2a:ee:60:
         20:9d:47:6a:61:de:62:2c:05:c8:14:3a:c2:74:b9:70:65:70:
         41:03:3f:2f:59:bb:d3:e8:eb:bf:5a:57:58:2a:6b:70:52:95:
         a6:9b:b3:ff:17:9c:bc:4c:e4:9b:e4:48:51:96:2a:af:64:d0:
         05:30:36:3d:1a:29:b4:0d:72:7f:c2:d6:32:57:96:27:8c:7f:
         af:23:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:43 2026 by rpki-client