Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L4SS_2_eCe0fRy76XHefwyCTKGc.roa
File:                     L4SS_2_eCe0fRy76XHefwyCTKGc.roa (raw, json)
Hash identifier:          XoBEW4ad7BfqPo5SSpbXjKzHZdBiJWf2kIwoL7ZEdEc=
Subject key identifier:   2F:84:92:FF:6F:DE:09:ED:1F:47:2E:FA:5C:77:9F:C3:20:93:28:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0585
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L4SS_2_eCe0fRy76XHefwyCTKGc.roa
Signing time:             Sun 01 Mar 2026 01:52:25 +0000
ROA not before:           Sun 01 Mar 2026 01:52:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2F8492FF6FDE09ED1F472EFA5C779FC320932867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:fa:58:ac:3b:12:b4:6c:e3:df:e1:50:01:
                    9a:7f:b4:bc:03:72:7e:95:a4:58:39:6d:b8:6b:1a:
                    4b:bc:fc:48:23:4f:18:8c:19:fb:56:6c:2a:30:f6:
                    e9:0e:4f:18:b4:f9:4c:e4:af:db:fc:7e:c0:60:44:
                    15:35:21:35:f2:ab:ee:2e:c0:a3:09:a1:96:3b:08:
                    c5:b0:f4:f7:6d:23:d4:b2:a4:99:da:4c:b7:b9:c0:
                    10:2f:2a:85:8c:0a:1a:e5:f6:ac:c4:48:aa:a5:3a:
                    9e:8b:20:53:5d:7b:bf:32:09:5c:a3:2d:0b:12:33:
                    96:0f:4b:04:7e:cc:28:0d:78:46:bb:46:a0:13:55:
                    fb:3e:94:22:f6:92:1d:94:dc:20:f5:d1:0c:a7:36:
                    e1:14:a0:d5:3d:02:cb:ca:b5:e9:3d:b7:10:59:9c:
                    c6:84:0a:45:1e:ad:fa:7e:5b:bd:65:42:2a:08:29:
                    a4:41:26:44:3b:be:1b:87:d4:8f:97:ed:db:61:13:
                    7e:3b:15:55:ab:01:c2:77:5b:44:4a:c0:1f:5f:55:
                    e5:e5:87:85:53:02:d1:7b:fb:e8:81:fd:a1:ab:15:
                    1b:48:48:5d:45:a2:9d:c7:cb:1b:f3:fa:2f:76:9f:
                    e0:9a:09:a6:97:ef:c9:fb:be:13:c8:d0:36:29:9e:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:92:FF:6F:DE:09:ED:1F:47:2E:FA:5C:77:9F:C3:20:93:28:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L4SS_2_eCe0fRy76XHefwyCTKGc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:04:eb:9b:b1:96:3c:ae:3f:06:85:62:01:d5:9f:9f:20:
         0e:43:7f:96:13:7a:f6:07:07:cd:b8:83:6f:c9:bf:cc:2f:db:
         23:07:d8:77:b0:13:17:8a:64:b8:7a:8d:bf:ce:fe:eb:38:f7:
         af:1f:70:c6:f8:e4:d7:3b:b3:1d:0a:ca:22:25:b0:cd:09:28:
         41:1b:47:d8:29:00:cb:77:58:25:77:74:90:36:81:a1:19:d5:
         d4:cc:28:2f:91:11:24:0a:67:cd:a0:68:20:34:07:e4:f1:56:
         da:e1:12:8f:0c:a2:7d:44:bf:44:d0:a2:2d:5a:0c:e2:48:21:
         84:ab:a3:65:aa:df:46:d4:0e:47:c1:d7:55:32:ee:bc:0a:51:
         c8:9d:d4:93:98:bd:15:48:31:b3:00:db:62:a3:fc:17:7e:3f:
         1d:8a:47:6c:09:ab:8c:bb:62:36:64:7d:d2:f0:22:a8:3f:1d:
         ea:ab:43:7a:dd:ec:40:68:ef:aa:97:cc:0e:d2:f3:2c:d2:3e:
         c9:00:6c:4b:11:64:8a:db:79:c7:16:44:23:33:7f:b3:a6:49:
         31:c4:3a:91:ad:6d:90:78:af:77:74:6e:41:9c:61:e2:c7:17:
         6c:1b:ff:84:85:43:01:a2:50:37:bb:68:b1:77:de:00:bc:17:
         18:d2:ca:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTUyMjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGODQ5MkZGNkZERTA5
RUQxRjQ3MkVGQTVDNzc5RkMzMjA5MzI4NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtSPpYrDsStGzj3+FQAZp/tLwDcn6VpFg5bbhrGku8/EgjTxiM
GftWbCow9ukOTxi0+Uzkr9v8fsBgRBU1ITXyq+4uwKMJoZY7CMWw9PdtI9SypJna
TLe5wBAvKoWMChrl9qzESKqlOp6LIFNde78yCVyjLQsSM5YPSwR+zCgNeEa7RqAT
Vfs+lCL2kh2U3CD10QynNuEUoNU9AsvKtek9txBZnMaECkUerfp+W71lQioIKaRB
JkQ7vhuH1I+X7dthE347FVWrAcJ3W0RKwB9fVeXlh4VTAtF7++iB/aGrFRtISF1F
op3Hyxvz+i92n+CaCaaX78n7vhPI0DYpnjC1AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUL4SS/2/eCe0fRy76XHefwyCTKGcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9MNFNTXzJfZUNlMGZSeTc2WEhlZnd5Q1RLR2Mu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa2UwDQYJKoZIhvcNAQELBQADggEBAGfDBOubsZY8rj8GhWIB
1Z+fIA5Df5YTevYHB824g2/Jv8wv2yMH2HewExeKZLh6jb/O/us4968fcMb45Nc7
sx0KyiIlsM0JKEEbR9gpAMt3WCV3dJA2gaEZ1dTMKC+RESQKZ82gaCA0B+TxVtrh
Eo8Mon1Ev0TQoi1aDOJIIYSro2Wq30bUDkfB11Uy7rwKUcid1JOYvRVIMbMA22Kj
/Bd+Px2KR2wJq4y7YjZkfdLwIqg/HeqrQ3rd7EBo76qXzA7S8yzSPskAbEsRZIrb
eccWRCMzf7OmSTHEOpGtbZB4r3d0bkGcYeLHF2wb/4SFQwGiUDe7aLF33gC8FxjS
ypM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:35 2026 by rpki-client