Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FB5KuroAArDWHuhpN5-wqpBMmmM.roa
File:                     FB5KuroAArDWHuhpN5-wqpBMmmM.roa (raw, json)
Hash identifier:          3ilw6WpRlwseInWTkKYVBApl9mWyruPLlBMJcjBKbCI=
Subject key identifier:   14:1E:4A:BA:BA:00:02:B0:D6:1E:E8:69:37:9F:B0:AA:90:4C:9A:63
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05EB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FB5KuroAArDWHuhpN5-wqpBMmmM.roa
Signing time:             Sun 01 Mar 2026 02:11:06 +0000
ROA not before:           Sun 01 Mar 2026 02:11:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:11:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=141E4ABABA0002B0D61EE869379FB0AA904C9A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:17:be:9f:51:38:4e:61:1a:9b:84:2c:dd:
                    fc:51:5c:42:0c:45:40:f7:17:8b:40:d6:ad:10:2f:
                    5f:41:5b:c1:b4:76:47:84:9a:5d:c5:70:ea:49:d2:
                    e1:8d:29:5a:fb:9f:6b:e0:71:58:ba:e6:79:41:b6:
                    80:92:94:cb:97:1d:92:68:f7:22:c6:75:23:a6:07:
                    5a:50:0a:0f:ae:04:d2:8c:0b:23:fe:a4:26:ba:49:
                    41:dc:f0:76:05:28:10:31:30:48:10:61:51:74:2a:
                    82:a4:e5:1a:38:1f:52:fe:b4:23:8e:3a:c9:69:aa:
                    d4:6d:44:b8:f7:96:c3:57:a2:85:85:2a:3f:a5:72:
                    43:ab:04:55:78:d7:8f:5b:fb:82:2e:9e:93:c4:02:
                    39:3d:2a:79:0e:f9:ea:0d:c5:a4:84:44:00:fc:e0:
                    9d:3c:17:01:33:6b:f3:d6:4d:a7:82:e8:3f:0c:d0:
                    a8:8f:b5:67:14:1f:43:8c:f5:ba:f8:2e:4d:82:d0:
                    6c:3b:eb:2c:a5:22:a6:bc:6f:a5:10:f1:bb:4f:49:
                    a1:01:5e:f3:c5:9e:91:5c:8f:0f:7f:89:ac:81:2d:
                    ff:3f:9e:c6:fc:c7:99:1f:e3:7a:27:ca:67:91:97:
                    4f:52:fb:bd:77:e1:0b:ca:d5:78:2a:4e:c8:07:51:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1E:4A:BA:BA:00:02:B0:D6:1E:E8:69:37:9F:B0:AA:90:4C:9A:63
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FB5KuroAArDWHuhpN5-wqpBMmmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:eb:b3:b2:c9:ab:47:66:46:23:87:e5:a9:0e:43:fd:7a:0e:
         b7:cb:11:36:e8:ea:5d:83:48:cf:b9:fd:31:3c:a0:1b:c2:8a:
         fb:66:84:ad:d8:f3:d3:d6:c7:67:be:a6:f2:67:d9:cc:bb:7c:
         ac:f4:87:ae:1e:1f:57:1f:21:4f:f7:8b:d9:bc:40:00:fe:27:
         2a:10:cf:bd:8c:11:f0:1a:6d:78:6e:3c:a9:43:47:81:c6:68:
         87:d0:22:04:21:81:b3:b5:76:56:a4:59:29:27:0b:f1:8e:61:
         4f:83:cc:7a:69:4d:de:74:10:1a:df:dc:47:13:a5:0c:bc:c0:
         3c:21:31:e7:3f:a6:2c:d9:e8:e6:e9:cd:95:0d:83:ba:d9:08:
         bb:90:f2:33:0a:17:ef:57:01:d7:98:37:4f:37:6c:be:5e:0d:
         e0:88:fa:1f:93:ee:cf:a0:a6:46:a4:d8:58:5d:61:3b:5e:c7:
         fc:ca:73:42:ba:40:3f:ff:d5:2b:da:a9:b7:dd:18:a3:40:ae:
         fb:62:7b:8a:6c:37:f1:7d:cc:bf:e9:85:e5:79:bd:e2:2a:70:
         19:22:4d:ae:ea:95:1e:0e:68:2f:47:ab:c6:fc:b4:ee:3e:f0:
         b0:a2:84:23:c5:89:5b:c0:d1:79:24:de:1c:1b:d8:32:93:e0:
         81:9f:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:40 2026 by rpki-client