Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JgaC11W7eY7QXwFTHEKYbLux_mc.roa
File:                     JgaC11W7eY7QXwFTHEKYbLux_mc.roa (raw, json)
Hash identifier:          2wdbuw9Z/mX4MTxqz+7wm7sNmaDc6oiMNEl+QvZZ/OA=
Subject key identifier:   26:06:82:D7:55:BB:79:8E:D0:5F:01:53:1C:42:98:6C:BB:B1:FE:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0578
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JgaC11W7eY7QXwFTHEKYbLux_mc.roa
Signing time:             Sun 01 Mar 2026 01:52:19 +0000
ROA not before:           Sun 01 Mar 2026 01:52:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=260682D755BB798ED05F01531C42986CBBB1FE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:7f:b6:e6:b2:ef:94:25:0f:2e:0f:5d:a8:
                    93:b3:d5:99:c0:fd:23:07:7c:dc:43:7d:d4:63:1c:
                    d4:37:bb:70:1c:6e:b2:82:d5:18:e0:f9:6c:b7:8e:
                    27:de:c5:1c:55:bb:6b:78:be:01:12:ec:19:21:0f:
                    5c:f0:80:0a:61:c8:32:f9:6f:7d:55:6e:7b:3b:8c:
                    81:37:10:6c:c2:68:cf:bf:4a:ea:d2:88:ee:5f:9d:
                    94:55:b0:d3:1e:a0:c8:74:4b:3f:3a:bc:1f:02:65:
                    ca:01:d1:dd:d8:35:eb:2a:b2:ce:7f:8e:df:71:9a:
                    38:d5:5a:44:93:5b:c1:cb:d8:e7:4d:08:d5:b3:c7:
                    35:dd:c4:e6:e4:ca:9d:6d:1e:6c:8b:9c:f7:87:57:
                    59:9f:c5:f3:73:60:f0:70:d1:9b:43:85:f8:7f:76:
                    4b:98:cf:17:f5:ce:86:db:b0:a3:0d:ac:41:59:48:
                    55:c6:e3:d9:29:84:cf:b6:d9:aa:9a:2a:5c:6b:df:
                    08:9b:71:6d:38:17:74:dc:46:62:26:2f:e2:ac:ea:
                    30:70:d3:a9:dc:62:20:9c:3b:4d:18:ea:b0:44:de:
                    bc:a4:70:22:e1:ae:ea:84:70:4f:b8:1c:1a:ee:6f:
                    e1:d7:af:a1:38:12:fe:82:e2:be:65:c1:3a:34:41:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:82:D7:55:BB:79:8E:D0:5F:01:53:1C:42:98:6C:BB:B1:FE:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JgaC11W7eY7QXwFTHEKYbLux_mc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:87:fb:87:d5:76:e9:23:f9:9c:2b:ee:d4:63:d1:08:bd:
         e2:63:6a:8e:39:25:93:8e:ce:b5:48:e4:ba:7e:09:78:3d:88:
         48:bc:9e:8c:aa:a1:aa:6a:b4:c5:af:8b:c9:7c:ed:fd:fd:25:
         35:1c:fa:a2:d7:58:b6:66:b0:cf:1b:e5:93:04:af:e3:4d:6f:
         3f:bd:2d:c7:7a:8e:7d:21:b3:5e:16:83:17:67:59:e2:3a:30:
         92:3d:17:00:5b:5a:c0:3d:3d:4d:eb:79:9d:68:3f:00:c0:94:
         96:0a:9e:56:4e:b0:36:1c:fc:39:9e:d4:cf:6f:02:19:35:59:
         98:d4:11:c8:7c:5b:1c:6b:b7:1a:73:f7:8f:cd:27:4f:ee:9b:
         d8:6b:31:99:b9:c1:83:f8:6a:d3:18:55:c8:cb:ba:14:ef:ea:
         8c:ae:40:ec:d4:52:df:b7:44:d8:12:e7:cf:b2:e8:2d:e8:90:
         b8:63:20:6d:d7:52:d2:ce:5c:dc:19:c3:67:11:71:0d:85:57:
         92:f8:09:d8:64:ab:aa:22:c8:d0:2d:fa:f1:7c:c9:fb:73:ae:
         fe:4e:82:68:64:0f:23:4b:cc:62:16:3a:85:09:6b:1a:d4:8e:
         ce:86:f9:9b:7b:17:d5:7a:5c:55:44:ff:b1:c4:0c:75:21:79:
         c1:e9:bd:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTUyMTlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2MDY4MkQ3NTVCQjc5
OEVEMDVGMDE1MzFDNDI5ODZDQkJCMUZFNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQI3+25rLvlCUPLg9dqJOz1ZnA/SMHfNxDfdRjHNQ3u3AcbrKC
1Rjg+Wy3jifexRxVu2t4vgES7BkhD1zwgAphyDL5b31Vbns7jIE3EGzCaM+/SurS
iO5fnZRVsNMeoMh0Sz86vB8CZcoB0d3YNesqss5/jt9xmjjVWkSTW8HL2OdNCNWz
xzXdxObkyp1tHmyLnPeHV1mfxfNzYPBw0ZtDhfh/dkuYzxf1zobbsKMNrEFZSFXG
49kphM+22aqaKlxr3wibcW04F3TcRmImL+Ks6jBw06ncYiCcO00Y6rBE3rykcCLh
ruqEcE+4HBrub+HXr6E4Ev6C4r5lwTo0QcG3AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUJgaC11W7eY7QXwFTHEKYbLux/mcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9KZ2FDMTFXN2VZN1FYd0ZUSEVLWWJMdXhfbWMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa4QwDQYJKoZIhvcNAQELBQADggEBAGYch/uH1XbpI/mcK+7U
Y9EIveJjao45JZOOzrVI5Lp+CXg9iEi8noyqoapqtMWvi8l87f39JTUc+qLXWLZm
sM8b5ZMEr+NNbz+9Lcd6jn0hs14WgxdnWeI6MJI9FwBbWsA9PU3reZ1oPwDAlJYK
nlZOsDYc/Dme1M9vAhk1WZjUEch8Wxxrtxpz94/NJ0/um9hrMZm5wYP4atMYVcjL
uhTv6oyuQOzUUt+3RNgS58+y6C3okLhjIG3XUtLOXNwZw2cRcQ2FV5L4Cdhkq6oi
yNAt+vF8yftzrv5OgmhkDyNLzGIWOoUJaxrUjs6G+Zt7F9V6XFVE/7HEDHUhecHp
vdA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:11 2026 by rpki-client