Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5PMiSn5r05kVVrAVqqj-CBctiY.roa
File:                     F5PMiSn5r05kVVrAVqqj-CBctiY.roa (raw, json)
Hash identifier:          8kc6/WIU4N9PRyEQh82Q92rNCR6c+HbEUOz0sfBG59I=
Subject key identifier:   17:93:CC:89:29:F9:AF:4E:64:55:5A:C0:56:AA:A3:F8:20:5C:B6:26
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0627
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5PMiSn5r05kVVrAVqqj-CBctiY.roa
Signing time:             Sun 01 Mar 2026 02:25:47 +0000
ROA not before:           Sun 01 Mar 2026 02:25:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1793CC8929F9AF4E64555AC056AAA3F8205CB626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:d8:7f:c8:1c:23:3a:c8:26:6d:1f:ca:54:
                    bf:cd:93:6d:d1:eb:1b:a2:b1:9f:c5:af:9a:4b:3e:
                    7e:bc:df:bd:b3:d7:40:40:dc:18:4c:9c:ca:00:3a:
                    be:4d:f0:fd:7e:f2:9f:35:c1:b7:f9:8f:bb:35:14:
                    b9:b7:72:5b:ce:2e:9f:5f:90:e7:35:1a:88:76:77:
                    74:97:c3:c1:b8:51:45:1f:94:75:87:d2:86:cd:cf:
                    30:f5:3b:7b:12:1e:cc:bf:59:2f:53:38:ee:c3:03:
                    11:8e:9d:32:94:56:92:68:b8:ce:7b:7d:e4:27:67:
                    f7:fb:5a:05:fa:4d:5d:5c:1b:44:cc:c8:a6:d4:36:
                    cf:c8:9f:f4:ea:6e:4b:54:41:7e:dd:3f:d2:53:d0:
                    76:6c:2d:26:7f:d4:1f:9e:fa:ec:05:47:42:c0:d1:
                    26:ad:a9:67:19:59:2e:76:d6:8b:0f:40:94:ca:5a:
                    65:50:95:84:99:a5:23:78:cb:ff:f7:7d:2e:c2:13:
                    43:9d:e0:40:8f:83:b9:75:fd:1a:43:29:05:f9:f9:
                    42:c0:65:ea:d2:64:bd:41:b8:04:aa:37:34:ad:4f:
                    85:d8:cc:c3:71:84:06:ae:24:de:2e:92:26:fc:e6:
                    82:85:02:08:f8:36:95:65:2a:d1:e0:aa:31:cc:cc:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:93:CC:89:29:F9:AF:4E:64:55:5A:C0:56:AA:A3:F8:20:5C:B6:26
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F5PMiSn5r05kVVrAVqqj-CBctiY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:76:7c:dc:29:20:df:cd:ca:df:60:6f:5e:da:80:c4:f8:ba:
         ad:ef:8d:b4:14:0d:e4:e8:ce:69:ef:80:0f:df:94:10:b6:1e:
         cb:bc:e3:29:7d:f8:58:f9:6f:18:3c:b0:c6:fc:1f:16:19:fb:
         5e:0b:98:a8:52:ef:79:1c:13:1a:47:47:2b:a4:80:ba:ac:56:
         51:8d:e2:46:02:c3:1c:62:be:16:d9:1c:45:eb:c2:3e:3b:38:
         c2:72:a9:5a:18:0b:6d:89:ec:44:ac:5a:2b:15:74:ca:6a:3a:
         84:46:35:f8:13:aa:ce:92:ad:8b:64:25:24:d8:05:0f:51:cf:
         6d:56:5e:e2:7c:2e:8a:71:42:44:aa:0b:f4:01:57:4a:a7:cf:
         35:45:b5:4d:4e:f2:cf:b2:ff:3d:19:5f:c8:16:e8:b1:61:58:
         af:6b:08:3d:88:55:97:ba:7f:29:c4:19:26:1b:ac:0d:dd:57:
         b4:38:ad:32:51:6a:21:3f:a3:d3:8f:55:63:a1:b7:4e:9e:f9:
         90:b3:06:ee:55:ec:09:12:14:37:40:32:62:c7:16:3b:23:40:
         1b:b0:b7:29:ce:ca:79:fb:06:5c:d4:36:d2:be:2a:ac:ab:1d:
         47:3a:49:00:07:29:c8:8d:2c:93:3c:d2:da:1b:12:27:8d:3b:
         6b:26:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:42 2026 by rpki-client