Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FN0Zjc5Q27x-V5efU8tW9jHJ4k8.roa
File:                     FN0Zjc5Q27x-V5efU8tW9jHJ4k8.roa (raw, json)
Hash identifier:          WnZ0GJRqofk8Fzp/KvIkzqdTLuFnbwZzHf+uWamGCPQ=
Subject key identifier:   14:DD:19:8D:CE:50:DB:BC:7E:57:97:9F:53:CB:56:F6:31:C9:E2:4F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       051C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FN0Zjc5Q27x-V5efU8tW9jHJ4k8.roa
Signing time:             Sun 01 Mar 2026 01:34:41 +0000
ROA not before:           Sun 01 Mar 2026 01:34:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=14DD198DCE50DBBC7E57979F53CB56F631C9E24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:64:a8:39:e4:ce:cc:87:6a:c7:14:72:3c:
                    ee:e2:05:bb:1f:a4:57:e7:f2:32:5d:9e:a3:04:cf:
                    d1:d4:02:3d:d8:69:d1:5b:34:1a:9b:91:07:2d:d1:
                    ee:31:81:b1:b4:e9:a1:63:c3:ff:d5:cf:87:01:22:
                    73:66:1a:8e:16:66:a6:f5:6b:10:d2:c2:31:04:06:
                    f1:11:63:3b:36:36:4b:37:a6:3f:0a:9e:0e:a6:32:
                    18:85:1e:d8:99:fb:34:9b:5b:57:b8:8a:64:d5:9e:
                    cb:2c:d8:bf:1d:a9:60:ee:06:2a:f4:e3:c1:01:14:
                    ed:0b:a2:97:26:93:3c:ef:38:b5:a6:97:5b:35:be:
                    e3:b6:e4:66:33:36:42:a2:6a:b0:4f:0a:51:15:33:
                    5a:06:8d:cf:cd:56:8d:fe:69:df:44:00:e8:da:38:
                    6e:a0:5b:13:1b:63:30:73:a2:b0:72:15:50:bf:47:
                    df:57:06:f7:23:76:98:40:76:bb:31:34:fa:25:8c:
                    a4:39:31:0e:86:0d:98:fa:6c:d9:85:c7:24:b9:96:
                    4a:51:4e:34:fe:8c:e2:2b:26:da:e8:c4:83:b9:4a:
                    52:87:23:b3:80:2d:85:ba:1b:ac:b0:6d:b8:b4:77:
                    68:9f:c4:d3:28:b0:84:79:a4:06:6b:35:76:bf:c7:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DD:19:8D:CE:50:DB:BC:7E:57:97:9F:53:CB:56:F6:31:C9:E2:4F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FN0Zjc5Q27x-V5efU8tW9jHJ4k8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:54:42:cd:03:5b:ea:29:3f:8c:b5:46:24:89:a8:fe:b0:
         13:2e:ff:2c:62:fb:72:51:90:4e:13:f3:cd:85:79:22:a3:72:
         72:72:d8:92:b5:6f:db:dc:cd:0b:32:ce:60:55:f4:d6:d5:39:
         9d:38:ff:6c:3f:86:15:63:c3:be:f9:74:f0:98:63:02:e4:66:
         66:86:1e:73:47:7f:7f:d6:bf:fe:2d:79:6f:0b:e2:25:9f:86:
         3a:71:a4:40:87:af:61:43:a7:1e:b1:27:2d:89:bb:da:cf:34:
         8f:17:db:03:42:8f:da:3f:0d:74:1b:28:12:6b:46:c6:87:3d:
         44:97:68:a1:98:86:cf:0c:b5:0a:84:b5:90:5a:ef:d3:25:f0:
         dd:a3:ad:bf:55:7e:13:b5:eb:4e:1f:c0:10:29:c2:a6:a6:f6:
         f8:3c:f3:e1:91:79:da:53:a6:9c:9a:4e:85:2c:37:92:8b:9d:
         46:ac:40:6e:97:c8:ff:11:8e:c6:48:01:d4:93:b7:ff:15:b4:
         bf:d2:49:cf:4a:31:72:46:31:50:0e:6c:f2:e1:ba:8d:14:f9:
         ec:e2:a0:30:d3:e6:84:73:a2:be:52:fa:a5:c9:05:09:5f:8e:
         23:65:25:95:22:32:d3:be:5b:da:af:5f:8c:17:80:7c:96:52:
         c6:46:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:44 2026 by rpki-client