Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GRK6vxTJDP3Y2juDuPYRTfD5b5E.roa
File:                     GRK6vxTJDP3Y2juDuPYRTfD5b5E.roa (raw, json)
Hash identifier:          r6V5HyeCESyZ6SDDPsNsevGHaK1KgclGhTmXgSbmcVU=
Subject key identifier:   19:12:BA:BF:14:C9:0C:FD:D8:DA:3B:83:B8:F6:11:4D:F0:F9:6F:91
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0581
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GRK6vxTJDP3Y2juDuPYRTfD5b5E.roa
Signing time:             Sun 01 Mar 2026 01:52:24 +0000
ROA not before:           Sun 01 Mar 2026 01:52:24 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:24 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1912BABF14C90CFDD8DA3B83B8F6114DF0F96F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:4d:f9:83:71:26:26:1a:6e:93:f0:9e:bf:
                    1e:71:a9:5f:82:d1:86:89:9f:be:cf:17:ac:39:e7:
                    9d:c0:a9:1e:80:6d:8f:55:26:eb:ec:90:70:cd:1f:
                    4d:db:ed:f2:1f:01:6d:48:e3:a1:d1:a2:ba:f6:fe:
                    4f:00:1e:fb:ab:ea:cc:d7:ec:5d:1c:ce:f5:cb:76:
                    98:51:c8:32:3f:c6:07:38:ab:9e:c9:ab:6e:3f:1f:
                    47:fb:3a:3e:e7:48:b2:da:64:2f:1c:3c:05:3d:f8:
                    51:c2:d3:b8:32:ef:13:a9:c9:2d:88:9f:67:6e:8c:
                    f1:e4:71:6a:e0:c5:1b:99:a2:bd:f9:1f:b9:29:af:
                    13:f1:2c:72:a6:93:71:d7:3b:5d:77:f2:1d:94:77:
                    ba:3b:18:66:f5:34:64:9d:c9:fb:b1:27:e8:ca:00:
                    a2:71:26:0f:13:b3:e6:5a:dc:01:57:59:21:af:b8:
                    f8:37:0a:68:74:1a:29:e0:99:72:7c:8b:80:3c:42:
                    e4:cc:02:57:7b:1a:a1:f0:87:ba:3c:e3:b4:4e:15:
                    5d:18:59:b2:0e:9d:05:99:81:8d:d7:5b:7a:a5:a2:
                    a6:bf:bc:51:98:cc:9c:b2:71:cd:d0:7e:4e:92:be:
                    f7:37:72:0c:76:9b:c0:bf:93:0d:83:ab:9b:5b:30:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:12:BA:BF:14:C9:0C:FD:D8:DA:3B:83:B8:F6:11:4D:F0:F9:6F:91
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GRK6vxTJDP3Y2juDuPYRTfD5b5E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:81:3a:42:05:e2:e6:50:70:cd:3b:92:2e:05:3c:52:1c:2f:
         e2:b8:69:fa:d7:4b:00:1d:cb:31:e4:63:06:b0:46:e5:8b:e9:
         9b:2e:cc:4f:15:6d:1e:6e:a3:fe:dc:85:16:8d:2f:fc:b7:19:
         05:fe:6e:e5:f3:b2:e4:69:68:d0:4d:8f:83:c0:5f:8b:11:76:
         49:1f:c4:58:98:c0:ef:92:8e:2d:36:e4:4d:1b:fd:06:fb:17:
         9b:90:4c:49:87:49:25:d3:25:12:53:95:d2:78:9b:a5:26:d9:
         c4:cc:ea:7e:59:fc:fa:a4:c0:c2:81:3e:78:23:6f:53:9d:bd:
         37:cd:e3:78:50:b7:86:59:0a:5e:21:49:60:70:2d:a0:e4:a6:
         2e:5b:b1:1f:1a:08:08:9d:f7:b7:71:4a:b3:f0:57:7e:fd:7a:
         04:60:f6:e2:5d:ab:99:96:93:fc:72:10:d1:b6:ca:2d:70:43:
         6e:39:6e:cf:0f:64:f8:40:55:71:19:8f:72:3c:ab:57:71:25:
         70:a0:65:d5:88:98:72:8f:22:c6:6c:15:b4:97:4d:3b:de:c7:
         b8:f3:58:dd:6a:f9:d4:63:48:41:7a:83:e4:66:04:02:81:84:
         ef:1e:e4:64:a1:ea:ff:3f:ff:de:c6:79:ea:5c:b5:ea:1a:6f:
         58:8f:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:41 2026 by rpki-client