Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
File:                     IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa (raw, json)
Hash identifier:          h9QsFoSqyJrEjYT23N+p1uYE5gOhWm0K82GQTirXXRU=
Subject key identifier:   22:1C:1A:BF:30:B6:1D:58:49:E8:89:08:C2:03:06:EB:1F:67:0D:16
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0601
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
Signing time:             Sun 01 Mar 2026 02:16:16 +0000
ROA not before:           Sun 01 Mar 2026 02:16:16 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:16 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=221C1ABF30B61D5849E88908C20306EB1F670D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:17:3f:74:83:80:0d:10:a4:89:6e:2f:0b:
                    a5:57:c7:dc:2a:34:b0:66:02:bd:7a:ba:1e:29:c3:
                    b0:54:bf:c3:fc:46:4d:b2:70:72:4d:4b:2d:55:7e:
                    a4:8d:6f:fa:5c:49:b0:1c:54:24:21:5e:ca:b0:08:
                    58:3d:16:3e:e6:78:cf:8a:6d:f9:84:01:4b:9b:f9:
                    11:8f:17:4b:de:13:c5:ec:39:56:d6:bd:9c:a5:89:
                    73:01:58:02:25:0c:7e:b5:96:4b:5e:0f:3d:71:16:
                    3d:17:e4:86:bc:50:de:2d:b5:92:6d:25:62:cd:f6:
                    61:09:d7:2e:cf:09:8b:24:9f:e1:e4:4c:b6:f5:b3:
                    94:91:3b:73:70:0f:d7:69:0b:ca:00:9e:b7:56:4d:
                    5a:e2:17:37:e6:9c:bf:54:2b:09:8b:77:75:52:67:
                    1d:a8:d1:b1:58:cf:fa:f1:22:3f:d2:e2:0a:b5:39:
                    15:f6:a6:b7:e8:53:34:cd:ee:f2:ab:7c:b6:79:42:
                    cb:bd:25:56:eb:65:cf:74:d7:45:8e:27:07:a2:8b:
                    5f:38:ee:0f:5c:66:de:b6:30:77:97:34:44:7f:45:
                    a1:f9:f5:44:c9:81:a8:48:32:61:fe:78:f0:4b:e9:
                    b6:5e:c6:50:30:27:35:04:a9:ae:49:7a:0c:f5:66:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:1A:BF:30:B6:1D:58:49:E8:89:08:C2:03:06:EB:1F:67:0D:16
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:bb:ec:bf:84:e0:c4:69:72:dd:3f:9c:1d:7a:21:fd:26:90:
         08:f1:7d:d0:02:1b:d2:ac:5b:09:3a:41:2c:1c:9e:28:71:81:
         4c:19:01:47:70:89:cf:89:4d:8d:d9:09:ed:47:28:c7:33:9f:
         ea:c8:f9:c7:ce:b2:f0:55:22:31:6d:1b:fd:05:d3:c8:0f:30:
         0b:a0:07:b0:d1:7b:53:cf:fd:c9:d7:19:e9:e1:29:dc:ad:43:
         57:e9:91:43:15:56:78:50:ab:97:08:f3:eb:83:a7:9d:f7:3a:
         5c:d1:13:90:2d:96:cb:f9:42:65:a8:14:e9:0b:63:3a:7e:12:
         f4:9b:a2:73:7c:97:76:87:a4:4b:b3:6f:11:c8:b2:e6:3b:3e:
         71:bf:d8:a3:18:53:14:87:89:c2:05:c7:c4:b8:05:74:92:e1:
         f0:77:22:fb:b3:b9:e2:16:74:30:05:28:c8:f7:43:df:4c:bd:
         d1:9a:79:21:ed:9e:bc:91:3d:08:1d:99:d3:fb:00:ec:fa:01:
         9c:bc:f4:dc:2c:9c:b0:09:e9:5a:6b:2b:48:5f:0b:83:da:99:
         76:63:ec:f6:92:1e:99:0a:17:01:5a:a0:2c:51:1f:a9:3d:8e:
         46:b2:cd:de:41:eb:97:b5:2c:6c:f0:2b:3c:27:b5:b0:9f:49:
         81:b1:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:57 2026 by rpki-client