Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CFiRDyUwFEgJtY1sBo2VbB_jBvA.roa
File:                     CFiRDyUwFEgJtY1sBo2VbB_jBvA.roa (raw, json)
Hash identifier:          fj+0DjNmFzxw9rkN79WG1wldY5gsNMnt4Qqefmf01sI=
Subject key identifier:   08:58:91:0F:25:30:14:48:09:B5:8D:6C:06:8D:95:6C:1F:E3:06:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05CB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CFiRDyUwFEgJtY1sBo2VbB_jBvA.roa
Signing time:             Sun 01 Mar 2026 02:05:36 +0000
ROA not before:           Sun 01 Mar 2026 02:05:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0858910F2530144809B58D6C068D956C1FE306F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:6c:e4:05:fd:ad:88:14:fc:1b:f9:e1:bd:
                    e9:40:d1:3a:2b:e3:e4:7f:78:0a:38:24:e7:26:e5:
                    37:c5:fd:cd:da:d9:fb:38:ee:8a:12:3a:c2:a6:e3:
                    69:fb:53:7d:0c:7a:26:18:f7:90:4a:5b:4e:72:f9:
                    7d:27:75:d6:6d:ca:dd:0a:00:c4:10:fe:60:d4:1c:
                    89:7d:54:ef:f8:e0:35:e4:37:4f:05:b0:e4:f4:d8:
                    d2:98:3d:e5:4c:de:61:e9:2a:48:4a:ea:f2:56:6b:
                    12:31:29:45:47:73:2c:b1:28:d9:05:81:0c:7c:66:
                    8c:78:65:5b:e1:41:a1:0f:23:65:b6:51:59:f3:00:
                    98:a0:60:40:ea:c5:83:e1:fc:80:6b:ba:71:9c:9d:
                    4e:3e:00:8f:a2:1d:8a:21:42:25:bd:f8:53:eb:1b:
                    df:4b:a5:54:a1:1a:2c:9c:44:16:eb:e9:f4:0f:85:
                    da:1a:e3:e3:87:83:30:82:ca:b5:9a:b7:5a:23:d9:
                    3b:ad:ad:27:af:59:2f:23:1c:70:c2:7e:0f:aa:18:
                    5d:e3:fd:17:3a:72:80:41:a9:66:4d:97:80:01:40:
                    a8:7c:02:12:0a:b7:4a:19:14:74:a9:6c:2a:4b:df:
                    62:b3:92:64:da:fb:5a:8d:f7:3a:5f:20:5c:fa:21:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:91:0F:25:30:14:48:09:B5:8D:6C:06:8D:95:6C:1F:E3:06:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CFiRDyUwFEgJtY1sBo2VbB_jBvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:a1:66:87:11:38:77:39:e1:95:2b:7e:19:f6:e3:26:3a:6a:
         10:e5:a1:18:44:5e:d5:09:5e:c0:af:cf:a0:62:0d:de:67:de:
         e6:ef:00:f9:d3:06:28:ea:d4:82:78:62:69:64:73:68:e2:07:
         37:2b:90:99:05:80:1c:4d:6d:8d:0f:22:62:19:c0:29:7f:34:
         be:06:7e:e1:54:4f:16:34:be:6a:0b:1b:f3:af:42:2c:c9:33:
         d6:12:8b:9e:ca:22:eb:9a:eb:96:9d:47:05:ce:97:fd:13:ce:
         60:8b:21:90:10:18:60:71:4f:2d:40:b2:21:3b:ee:10:ad:5a:
         c4:19:f1:3b:9e:a7:1d:a6:79:1e:3c:fa:13:1c:ea:c1:bb:53:
         cd:cf:01:0f:2f:d6:e2:b6:89:42:49:80:1c:f8:1d:5b:a9:b5:
         0d:ed:d8:57:b8:dd:fc:d0:d5:12:d2:29:ba:46:e1:82:a5:04:
         5e:3e:33:0b:42:42:b2:a4:51:ce:35:21:eb:90:11:ce:e6:fc:
         c7:15:e2:74:08:28:46:7d:95:fd:01:bf:1f:d6:66:1f:57:9d:
         dc:c5:0c:ff:d7:b3:82:9e:60:45:79:a2:5b:f7:3a:28:6c:90:
         ff:b6:8c:1e:bf:53:99:12:af:33:9b:6b:1c:7a:82:1c:90:c5:
         ff:87:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:01 2026 by rpki-client