Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ga2Vb7cDjxprXtyngH2YbCKVCw4.roa
File:                     Ga2Vb7cDjxprXtyngH2YbCKVCw4.roa (raw, json)
Hash identifier:          D2PwpVFE+Mvj4a+6v7BMY0KbwgZbaw5mSoUBP+VUHbQ=
Subject key identifier:   19:AD:95:6F:B7:03:8F:1A:6B:5E:DC:A7:80:7D:98:6C:22:95:0B:0E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       058A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ga2Vb7cDjxprXtyngH2YbCKVCw4.roa
Signing time:             Sun 01 Mar 2026 01:56:35 +0000
ROA not before:           Sun 01 Mar 2026 01:56:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=19AD956FB7038F1A6B5EDCA7807D986C22950B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:4a:2a:55:39:1c:30:51:55:7c:d8:1d:6c:
                    a3:37:38:ab:2a:c3:c7:67:3b:a7:f8:a8:ee:c6:98:
                    86:fb:81:dd:b9:b4:92:05:27:d5:e3:fa:ad:ea:15:
                    bc:ba:20:d9:04:52:c6:eb:26:cc:93:2d:6f:18:d2:
                    cf:1c:26:8e:1f:70:45:5b:85:ce:b0:6a:fd:25:0e:
                    fe:64:fe:44:39:57:60:3d:82:1f:30:29:d4:16:cf:
                    76:30:ed:b1:b1:44:34:69:a3:25:c0:84:57:e8:63:
                    ad:9b:3a:48:44:42:76:27:c0:b8:a0:10:00:69:2d:
                    a4:49:a9:ce:c4:29:b3:62:b1:8c:6d:34:4a:5c:90:
                    89:97:04:9d:28:b7:47:c9:b3:0a:bd:ae:75:59:2b:
                    21:0a:04:ef:b8:3d:0c:8d:4f:48:bb:ad:cf:f8:20:
                    71:01:07:cb:72:ca:aa:76:98:cb:7e:8e:51:25:88:
                    e7:97:9f:95:0d:82:9e:ab:a3:63:e3:74:6f:d9:9e:
                    44:90:88:c0:9d:da:c0:8b:b3:9b:2b:ed:25:6a:06:
                    ff:1b:95:1d:b2:32:b8:a0:a0:50:cd:f4:a2:15:65:
                    11:a6:43:e6:89:1a:94:f9:e6:78:7f:6e:f1:78:42:
                    89:ab:0b:f7:f6:6a:01:76:a9:5f:40:7c:64:96:3d:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:95:6F:B7:03:8F:1A:6B:5E:DC:A7:80:7D:98:6C:22:95:0B:0E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ga2Vb7cDjxprXtyngH2YbCKVCw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:8c:b8:1b:e0:2e:ae:b0:16:44:5e:53:5c:b5:61:99:03:
         f5:7b:45:fd:2a:b4:0f:b1:78:72:ab:9b:da:f2:2e:ca:c3:34:
         f3:1e:72:9f:48:2b:f5:bd:3e:2b:6a:cd:06:62:d4:62:81:7b:
         f1:6f:54:c3:10:75:64:8f:cf:12:0d:92:83:f2:7a:ea:9a:3d:
         04:38:57:cd:d0:36:74:1f:0b:c2:68:3c:b3:a6:de:ca:79:1e:
         3b:f1:7e:76:23:e1:3d:0b:d3:30:18:1f:e7:3b:3b:a0:74:df:
         fb:ed:aa:07:4c:85:8a:9d:bf:9b:c1:c2:3a:33:0a:a9:67:28:
         01:8a:d6:28:61:0a:c5:72:00:80:c0:42:03:52:39:6e:0b:5b:
         68:d3:b2:73:64:9f:d9:da:15:a6:d6:93:21:08:55:54:26:c1:
         90:1b:72:7b:bc:2c:dd:28:39:d4:88:6a:69:02:65:db:cc:b4:
         f4:6b:3e:f9:b5:0d:7f:8e:d9:18:a3:b3:ac:3b:4f:4d:4e:29:
         ca:b2:33:8a:8a:0f:6e:da:f7:75:37:18:0c:23:a9:79:ac:be:
         bb:73:ef:db:98:be:7f:20:3c:54:50:dd:2e:15:59:34:df:d7:
         57:ad:1f:99:90:42:04:ea:87:03:40:a8:58:57:11:82:59:3c:
         0e:a6:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:01 2026 by rpki-client