Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5DxqLwxOjHhFG_BK4ff_mcHgoY.roa
File:                     F5DxqLwxOjHhFG_BK4ff_mcHgoY.roa (raw, json)
Hash identifier:          LnRsewkv80VvUYc2AhkwNMWKL/gPR+LAq86icbSyEso=
Subject key identifier:   17:90:F1:A8:BC:31:3A:31:E1:14:6F:C1:2B:87:DF:FE:67:07:82:86
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       056E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5DxqLwxOjHhFG_BK4ff_mcHgoY.roa
Signing time:             Sun 01 Mar 2026 01:52:14 +0000
ROA not before:           Sun 01 Mar 2026 01:52:14 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:14 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1790F1A8BC313A31E1146FC12B87DFFE67078286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:46:7f:c6:95:2f:eb:ae:7a:7f:6d:b1:f6:
                    a6:79:69:1a:a3:18:93:8a:2e:89:22:62:9f:45:ae:
                    8e:fb:7f:06:dd:2b:6f:87:c9:16:43:8e:52:6e:80:
                    89:1b:9d:45:be:55:4d:7b:fd:40:8b:45:c9:e8:d8:
                    7e:95:e7:41:14:b7:8a:62:3f:52:10:79:72:4d:1b:
                    a3:84:1e:83:92:35:da:54:8c:d5:00:9d:32:1a:13:
                    71:b0:9c:4d:c0:6d:a0:41:2c:9f:cd:b6:fc:e5:a0:
                    e7:09:a6:1a:61:33:31:65:03:3f:26:73:9a:6a:92:
                    46:55:45:6f:3e:d8:9d:1e:66:89:c5:8c:25:31:da:
                    99:dd:df:3a:06:5d:83:5f:93:81:11:16:49:2e:74:
                    ae:78:74:47:5f:1e:8f:78:49:cd:8f:e6:48:85:bc:
                    be:d0:df:29:d5:01:0d:cd:98:f4:81:1b:3a:54:6e:
                    81:e7:26:9a:59:21:43:eb:6c:27:f1:1b:2c:91:49:
                    8f:87:29:78:18:88:ac:c2:b2:68:b1:4d:1e:45:60:
                    5a:f5:86:6e:7b:e9:d5:7f:68:62:5d:62:e9:b9:be:
                    3e:93:eb:4b:b8:7d:b1:2c:e6:3f:94:ea:fc:34:f8:
                    67:c1:c2:5c:81:14:da:c4:20:df:91:59:05:0e:c4:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:F1:A8:BC:31:3A:31:E1:14:6F:C1:2B:87:DF:FE:67:07:82:86
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5DxqLwxOjHhFG_BK4ff_mcHgoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:78:7e:f3:38:03:e1:70:47:94:cd:cf:77:7f:b9:9a:d0:d6:
         f6:dd:cd:37:9d:87:58:5a:91:39:bb:79:fa:01:cb:1d:86:fb:
         3b:13:af:68:4b:5a:af:a0:0c:15:d3:36:58:3f:f7:f1:e3:6f:
         ce:e2:e4:8d:ce:ab:b5:7f:51:73:0f:20:08:77:a3:cd:d1:b4:
         92:06:b2:35:1d:40:fc:a9:6f:ec:91:5b:36:21:85:07:10:44:
         9c:03:8b:d8:ca:df:8b:63:41:f5:99:a9:fe:2b:21:03:30:1e:
         ed:a0:4b:35:32:3b:f5:d1:e3:3e:80:8b:e8:ff:82:20:60:9f:
         24:17:71:0f:43:4a:81:44:2c:92:15:44:fc:08:a2:c1:88:9a:
         3f:2b:eb:5f:6f:ab:a4:b6:25:bb:9b:fa:aa:0e:8a:df:65:bb:
         08:ee:d0:21:e1:87:b8:3c:d6:32:0d:0d:49:63:be:7a:de:fb:
         3d:61:3a:1c:ef:79:97:fd:d5:9d:10:c5:e4:e8:e2:ce:8a:50:
         2c:52:f7:fa:b5:0d:aa:f0:18:17:c3:51:4f:ff:d3:fb:04:d9:
         01:6f:ea:49:3c:d6:c0:d3:e7:f6:ff:f5:71:e2:b2:74:24:7b:
         bc:15:80:b3:e2:61:0f:fc:46:8b:4c:80:1b:6c:86:3c:30:5a:
         ee:c2:16:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTUyMTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3OTBGMUE4QkMzMTNB
MzFFMTE0NkZDMTJCODdERkZFNjcwNzgyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjX0Z/xpUv6656f22x9qZ5aRqjGJOKLokiYp9Fro77fwbdK2+H
yRZDjlJugIkbnUW+VU17/UCLRcno2H6V50EUt4piP1IQeXJNG6OEHoOSNdpUjNUA
nTIaE3GwnE3AbaBBLJ/NtvzloOcJphphMzFlAz8mc5pqkkZVRW8+2J0eZonFjCUx
2pnd3zoGXYNfk4ERFkkudK54dEdfHo94Sc2P5kiFvL7Q3ynVAQ3NmPSBGzpUboHn
JppZIUPrbCfxGyyRSY+HKXgYiKzCsmixTR5FYFr1hm576dV/aGJdYum5vj6T60u4
fbEs5j+U6vw0+GfBwlyBFNrEIN+RWQUOxK9bAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUF5DxqLwxOjHhFG/BK4ff/mcHgoYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9GNUR4cUx3eE9qSGhGR19CSzRmZl9tY0hnb1ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa4kwDQYJKoZIhvcNAQELBQADggEBAHR4fvM4A+FwR5TNz3d/
uZrQ1vbdzTedh1hakTm7efoByx2G+zsTr2hLWq+gDBXTNlg/9/Hjb87i5I3Oq7V/
UXMPIAh3o83RtJIGsjUdQPypb+yRWzYhhQcQRJwDi9jK34tjQfWZqf4rIQMwHu2g
SzUyO/XR4z6Ai+j/giBgnyQXcQ9DSoFELJIVRPwIosGImj8r619vq6S2Jbub+qoO
it9luwju0CHhh7g81jINDUljvnre+z1hOhzveZf91Z0QxeTo4s6KUCxS9/q1Darw
GBfDUU//0/sE2QFv6kk81sDT5/b/9XHisnQke7wVgLPiYQ/8RotMgBtshjwwWu7C
FpA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:34 2026 by rpki-client