Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G1_gYPtUCDfhRJ625c6VrLeJbbw.roa
File:                     G1_gYPtUCDfhRJ625c6VrLeJbbw.roa (raw, json)
Hash identifier:          kpbtm+c0MiRI+iIt3agAMeVE9+yFqRPbiHVxFPhPWEc=
Subject key identifier:   1B:5F:E0:60:FB:54:08:37:E1:44:9E:B6:E5:CE:95:AC:B7:89:6D:BC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0529
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G1_gYPtUCDfhRJ625c6VrLeJbbw.roa
Signing time:             Sun 01 Mar 2026 01:34:47 +0000
ROA not before:           Sun 01 Mar 2026 01:34:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ea00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1B5FE060FB540837E1449EB6E5CE95ACB7896DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:e2:1d:f7:78:0d:17:14:da:d8:68:ba:9c:
                    22:35:80:d1:ba:9e:31:f4:52:1b:4d:01:d8:1b:15:
                    8e:14:49:f9:b0:38:93:b5:28:cf:f4:9a:a5:03:ed:
                    96:94:67:7b:c4:28:cf:55:f4:85:7b:c1:58:3b:f2:
                    a6:8a:a9:4a:55:eb:6b:ce:d6:4e:43:34:d7:fc:4c:
                    f2:b2:00:a9:cd:d7:3a:ad:b1:64:32:c6:66:c8:f4:
                    f8:59:55:f2:9c:bc:79:5c:ca:e0:ed:f1:63:ca:fc:
                    d7:1a:30:72:8d:46:f7:f1:3c:3e:40:d7:37:89:de:
                    31:46:8d:90:19:8b:f0:e0:7e:74:eb:66:b1:0a:87:
                    b1:3d:ba:c3:5b:28:e2:47:e0:00:fb:5d:23:70:9f:
                    b4:ff:91:8a:a2:f4:53:5e:8a:c9:e5:f6:7c:c4:e5:
                    74:c2:53:6b:a1:19:33:85:32:a6:a4:40:6d:5f:9d:
                    c3:84:e2:c0:47:a6:7e:0d:cf:e9:8a:15:3d:84:2c:
                    61:c8:a2:50:d8:37:8a:1d:bd:f5:fe:53:2e:ab:df:
                    02:1b:85:b2:63:8a:d6:34:ae:0d:8e:70:b2:44:28:
                    88:1b:2c:71:e6:5b:5b:04:c3:a8:8b:43:78:d4:dd:
                    1c:6a:0c:e1:ab:a9:f3:bb:3d:e3:c5:90:58:71:ba:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:E0:60:FB:54:08:37:E1:44:9E:B6:E5:CE:95:AC:B7:89:6D:BC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G1_gYPtUCDfhRJ625c6VrLeJbbw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:0b:c8:6f:b5:a0:4c:57:a7:b3:0a:c8:a5:9c:cf:b5:ae:
         5d:01:b0:a4:53:ac:b9:46:34:42:21:11:dd:7d:b8:59:16:32:
         80:c0:d5:e9:d5:ba:14:8a:90:6d:ac:46:09:7f:7e:ba:e5:11:
         1a:cd:f2:b7:84:d5:c2:ed:d9:3b:9d:5c:11:b8:df:d2:e9:d5:
         e1:b2:2d:60:db:8b:3c:e0:9b:01:0f:af:fb:1c:0a:37:9f:dd:
         d0:ee:2b:48:af:e2:e4:cc:75:c8:6c:4d:cc:2d:4e:d8:18:ba:
         71:7f:57:ec:f7:40:85:60:17:31:e2:fd:32:d3:00:fd:03:1b:
         10:ed:8a:d0:3d:43:a3:1d:f0:fb:c7:bf:bf:a1:15:a6:97:5a:
         18:d8:5d:9f:64:cd:c5:b8:d5:84:8e:7e:98:13:ad:7e:8a:6c:
         a6:8d:aa:72:17:db:91:8f:55:94:a3:59:76:53:2a:8f:5e:e3:
         71:7a:9b:01:95:10:8b:07:a0:66:09:55:33:f9:28:64:c5:9e:
         57:3e:c3:7b:ef:66:54:9a:1a:72:1d:0f:6c:a3:b9:19:78:c4:
         b7:16:5c:1c:4a:35:b8:ec:df:db:b8:c0:4a:ed:b5:e5:1c:bc:
         82:d7:ee:45:f7:d8:58:c3:e2:2a:99:b2:c7:fb:a3:67:bc:7f:
         39:ae:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:55 2026 by rpki-client