Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhtINHFWmz4_KZkqy8a8SNpJRYs.roa
File:                     HhtINHFWmz4_KZkqy8a8SNpJRYs.roa (raw, json)
Hash identifier:          BmWEWag8G11CD2nv5RHA//FFDggtU8TybxhG353l4iM=
Subject key identifier:   1E:1B:48:34:71:56:9B:3E:3F:29:99:2A:CB:C6:BC:48:DA:49:45:8B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05B4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhtINHFWmz4_KZkqy8a8SNpJRYs.roa
Signing time:             Sun 01 Mar 2026 02:00:57 +0000
ROA not before:           Sun 01 Mar 2026 02:00:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1E1B483471569B3E3F29992ACBC6BC48DA49458B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:68:b3:df:c5:1a:0c:7d:e5:82:58:46:f5:
                    1e:2c:f1:43:99:d7:56:65:39:25:19:f2:74:09:79:
                    0b:04:f1:96:7c:3e:1c:4f:a8:dd:57:6a:cb:aa:3e:
                    66:26:e5:0d:27:67:64:a2:64:14:2c:6f:d7:fd:49:
                    6e:2d:dd:93:08:09:cf:60:d2:d8:18:be:4f:e6:40:
                    1f:6c:27:ec:0b:2e:66:22:4a:a3:07:9a:2d:87:1a:
                    f6:a0:46:72:16:04:19:6c:a6:98:20:29:db:55:b8:
                    5f:eb:c9:24:f8:6c:8c:4f:26:0b:20:1a:61:c0:14:
                    47:ce:3d:63:e3:8a:38:9b:2f:54:05:f0:4b:d9:2f:
                    e4:91:61:f6:a6:7c:96:ff:28:d0:77:4b:90:09:23:
                    ec:32:73:13:58:24:53:9b:eb:cf:d7:45:fc:82:d9:
                    b7:12:af:7a:d9:28:e0:52:81:53:96:35:2a:60:a5:
                    76:9a:cf:9b:75:3e:9b:72:a1:b9:4d:12:6f:94:22:
                    b3:25:f3:e9:12:de:47:54:5c:54:a5:01:3d:ce:ae:
                    5c:0c:de:f5:26:6c:44:f4:3d:27:bb:72:d9:fc:08:
                    b2:06:ea:b4:89:1b:b3:4e:5f:6d:2e:af:7b:d8:00:
                    ee:6f:09:9e:4c:95:5e:90:bd:9d:85:8a:74:4d:50:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:48:34:71:56:9B:3E:3F:29:99:2A:CB:C6:BC:48:DA:49:45:8B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhtINHFWmz4_KZkqy8a8SNpJRYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:0c:b8:bb:8f:69:77:69:e4:07:d0:dc:0b:7b:0d:d5:0b:
         4c:50:90:55:ff:fe:0e:62:05:b4:2c:ec:bb:08:ac:5e:33:89:
         31:a5:6f:3b:70:46:41:27:ae:0d:62:b5:e0:6b:a7:a3:4d:31:
         19:cf:aa:86:ff:46:c9:31:7a:6d:27:87:5c:5d:c3:5c:8c:1a:
         d8:35:52:10:77:63:fb:40:bc:a1:14:b2:aa:14:76:64:45:6d:
         35:d7:4c:5a:c9:e7:e4:4d:ca:a8:bb:70:a8:23:bc:27:c5:1c:
         cf:a3:e9:d3:b4:d3:a3:90:1b:d0:61:66:bd:0a:84:be:8b:47:
         24:01:54:88:26:7a:c4:91:07:9b:f2:3d:70:31:a5:d4:af:86:
         2e:32:7b:0c:20:65:47:66:53:4f:95:c5:6b:6d:b3:e6:18:1a:
         91:4e:db:d5:48:01:06:a4:0f:cf:ce:da:59:84:47:97:c0:74:
         0d:76:9f:9e:37:e8:d6:a7:64:8f:0e:8e:04:95:1d:7c:7f:f6:
         31:94:c7:7a:c7:ce:99:15:0c:cc:82:a9:97:2e:f5:a2:a8:c7:
         6f:1a:88:bc:4c:15:a0:83:c7:03:05:6b:c7:93:1f:6b:7e:ac:
         92:c8:b7:46:76:1c:31:79:15:9c:3f:cf:21:50:bc:bc:c5:a3:
         4b:ef:ac:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjAwNTdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFMUI0ODM0NzE1NjlC
M0UzRjI5OTkyQUNCQzZCQzQ4REE0OTQ1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuGWiz38UaDH3lglhG9R4s8UOZ11ZlOSUZ8nQJeQsE8ZZ8PhxP
qN1XasuqPmYm5Q0nZ2SiZBQsb9f9SW4t3ZMICc9g0tgYvk/mQB9sJ+wLLmYiSqMH
mi2HGvagRnIWBBlsppggKdtVuF/ryST4bIxPJgsgGmHAFEfOPWPjijibL1QF8EvZ
L+SRYfamfJb/KNB3S5AJI+wycxNYJFOb68/XRfyC2bcSr3rZKOBSgVOWNSpgpXaa
z5t1PptyoblNEm+UIrMl8+kS3kdUXFSlAT3OrlwM3vUmbET0PSe7ctn8CLIG6rSJ
G7NOX20ur3vYAO5vCZ5MlV6QvZ2FinRNUCVTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUHhtINHFWmz4/KZkqy8a8SNpJRYswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9IaHRJTkhGV216NF9LWmtxeThhOFNOcEpSWXMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa4cwDQYJKoZIhvcNAQELBQADggEBAC3TDLi7j2l3aeQH0NwL
ew3VC0xQkFX//g5iBbQs7LsIrF4ziTGlbztwRkEnrg1iteBrp6NNMRnPqob/Rskx
em0nh1xdw1yMGtg1UhB3Y/tAvKEUsqoUdmRFbTXXTFrJ5+RNyqi7cKgjvCfFHM+j
6dO006OQG9BhZr0KhL6LRyQBVIgmesSRB5vyPXAxpdSvhi4yewwgZUdmU0+VxWtt
s+YYGpFO29VIAQakD8/O2lmER5fAdA12n5436NanZI8OjgSVHXx/9jGUx3rHzpkV
DMyCqZcu9aKox28aiLxMFaCDxwMFa8eTH2t+rJLIt0Z2HDF5FZw/zyFQvLzFo0vv
rH0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:38 2026 by rpki-client