Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2e2SXeQtQjhcnbgdZlgsf6NStU.roa
File:                     H2e2SXeQtQjhcnbgdZlgsf6NStU.roa (raw, json)
Hash identifier:          35xcJY3UxAnM5B9RDtNZRbDVdqczwgVIg0p05y8zLjA=
Subject key identifier:   1F:67:B6:49:77:90:B5:08:E1:72:76:E0:75:99:60:B1:FE:8D:4A:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0556
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2e2SXeQtQjhcnbgdZlgsf6NStU.roa
Signing time:             Sun 01 Mar 2026 01:46:52 +0000
ROA not before:           Sun 01 Mar 2026 01:46:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1F67B6497790B508E17276E0759960B1FE8D4AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:a1:c0:86:b5:c1:03:67:a5:fa:b6:f1:d1:
                    43:5b:b7:87:11:19:8d:10:c7:f4:ec:54:67:2c:a3:
                    7b:0a:71:5d:fb:55:79:4b:e7:81:8e:f9:83:66:06:
                    2d:55:75:16:a4:53:76:c8:e6:9c:da:5f:c4:53:c2:
                    53:77:11:6a:81:cd:a7:35:78:58:9f:49:72:bb:fa:
                    c6:e2:bf:e4:0b:5e:fc:6b:de:0a:54:76:ff:f8:76:
                    d3:46:ac:5e:cd:c7:ad:cc:58:d1:22:0f:27:2f:51:
                    1e:0f:a2:a6:5f:7c:10:68:8b:15:ac:cf:79:3a:b7:
                    26:8e:37:66:46:96:88:57:91:13:07:3b:0b:22:93:
                    03:84:b5:b8:93:74:42:18:21:a3:32:a8:78:80:9e:
                    ed:99:50:0b:8b:55:26:fa:c8:35:b5:d9:1d:93:ec:
                    e6:09:64:4c:39:12:35:ff:ea:ab:4b:8b:9b:82:87:
                    e8:d4:6f:3e:67:68:ab:3d:5e:eb:78:cb:4a:de:d2:
                    71:1c:34:26:62:90:53:6c:cc:06:f5:d3:ba:4d:d3:
                    77:23:fd:8a:c7:a4:d0:a5:45:2a:57:b5:65:00:99:
                    1a:1e:67:11:1d:a7:00:85:65:2b:3b:22:29:22:4a:
                    cb:c0:a8:20:5f:49:b8:7e:dd:1b:44:e9:55:86:0a:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:B6:49:77:90:B5:08:E1:72:76:E0:75:99:60:B1:FE:8D:4A:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2e2SXeQtQjhcnbgdZlgsf6NStU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:e5:29:63:b2:c8:b8:1c:93:6a:d0:30:6b:46:70:fb:0c:
         d7:f5:63:a7:6e:53:96:dd:f4:7a:8a:ec:68:9b:76:ff:fc:2a:
         08:e8:57:e1:b0:42:ea:1f:f1:94:44:e1:9f:b2:c7:26:e9:49:
         90:02:7a:81:53:ee:7a:96:4f:55:f1:c8:c4:88:02:42:d7:1f:
         60:fc:a1:08:a3:64:55:1b:2b:24:d4:68:5c:a8:ed:1f:34:6f:
         1a:86:77:f3:bf:41:44:42:f2:cb:84:66:e1:b4:56:72:e0:0a:
         c0:6d:4a:d9:71:8a:ca:23:c3:5a:82:44:e8:3b:33:8a:b6:25:
         97:d5:5b:b7:1a:0a:8b:f8:ec:e3:43:79:f5:fb:e4:a3:ee:28:
         42:49:68:69:c2:eb:71:00:ee:f4:b2:16:5f:31:92:f2:eb:39:
         27:66:94:a2:1b:f9:7a:6c:aa:bf:ed:a4:ae:b5:f9:59:03:9f:
         58:e9:ee:bd:c4:e0:7b:f1:8c:7e:2a:ad:d9:bf:e6:7e:66:61:
         8f:31:91:8a:f1:c3:a8:73:b6:ac:49:74:7c:05:5c:34:51:a4:
         2d:6f:00:39:9d:5f:92:29:87:81:8e:95:f1:89:91:fe:06:24:
         dd:4b:d5:8b:eb:ae:49:a0:ad:e2:40:3a:82:e9:b8:b1:e8:c5:
         b4:f5:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:17 2026 by rpki-client