Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LROq6sNODEEQT3nJoULJiT9az3I.roa
File:                     LROq6sNODEEQT3nJoULJiT9az3I.roa (raw, json)
Hash identifier:          T0QpcykJvrZPpRyhZ7LpTdmF259Jr1ksmDHaoOJ6Wpw=
Subject key identifier:   2D:13:AA:EA:C3:4E:0C:41:10:4F:79:C9:A1:42:C9:89:3F:5A:CF:72
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05D6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LROq6sNODEEQT3nJoULJiT9az3I.roa
Signing time:             Sun 01 Mar 2026 02:10:52 +0000
ROA not before:           Sun 01 Mar 2026 02:10:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:10:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2D13AAEAC34E0C41104F79C9A142C9893F5ACF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:50:86:5c:9e:bc:ab:74:47:74:e8:47:cf:
                    69:7d:f7:a3:5c:e0:7a:91:a6:eb:70:6b:5b:46:2f:
                    66:3a:fc:d9:a1:6e:33:ee:2e:6b:5a:cd:c2:62:10:
                    de:f8:77:8c:24:39:a2:b1:0e:b1:f5:05:57:a4:a6:
                    b1:77:f0:39:c4:25:d8:26:db:7e:d3:36:2a:71:d9:
                    29:4a:d9:25:99:91:f4:98:c7:6a:e4:a5:f7:ef:92:
                    91:f1:6b:a3:61:fc:5b:c2:66:66:dd:3c:ff:06:00:
                    cd:e6:2e:08:a8:2c:93:18:2e:2a:bf:23:22:3c:a7:
                    1c:f3:bc:b0:51:85:c5:b7:8d:72:ed:ac:5b:c7:7e:
                    81:f0:ed:b2:9f:77:99:3c:02:20:5b:46:b4:39:e3:
                    6d:f0:4b:e2:bc:ac:b3:67:24:a5:cd:a8:9b:8a:50:
                    d3:25:48:63:40:62:39:84:1f:d4:c4:82:4d:ae:6c:
                    37:36:18:64:59:2f:48:d7:f8:fa:8c:78:8a:26:54:
                    87:d5:6a:84:40:df:e2:41:b6:23:09:dc:2b:8d:f3:
                    7d:0f:3d:f2:c4:1e:4e:fa:01:8b:49:f4:56:c5:63:
                    30:80:56:b6:75:c4:74:c0:44:a0:47:22:c2:45:4f:
                    f1:e1:98:cc:c7:84:32:18:c7:cd:48:1a:9b:c2:3a:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:AA:EA:C3:4E:0C:41:10:4F:79:C9:A1:42:C9:89:3F:5A:CF:72
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LROq6sNODEEQT3nJoULJiT9az3I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:d4:bf:e3:74:fa:ba:eb:b2:cc:ee:a1:a3:7c:e3:46:4f:17:
         7c:1f:ba:47:32:a5:02:e8:a1:e8:e2:9c:7e:8f:7a:3d:67:d8:
         99:30:f9:73:e2:e0:b8:6d:b4:89:7e:cc:b9:fb:a8:ef:c6:97:
         13:6c:1e:e4:30:9b:1d:cd:a2:9d:5f:c7:97:d0:4b:f8:c9:2a:
         86:89:6a:91:46:a9:dd:64:db:72:be:48:9c:e3:3c:86:9b:af:
         25:61:95:3d:0d:cd:b5:d1:87:06:97:51:0f:af:64:20:62:21:
         6e:fb:7d:e7:2b:c1:74:73:c5:a0:85:00:9c:3a:6b:c6:3c:71:
         c5:a9:e6:fa:1f:c4:98:7b:8b:f7:d4:12:a4:2d:08:17:a7:03:
         4e:d7:fd:a4:93:b2:9d:79:7e:b1:05:10:9d:a9:7f:0f:cf:50:
         97:97:9b:57:dd:18:20:f3:a8:61:05:3e:b3:30:18:38:1d:cc:
         53:a6:6e:ab:6b:46:2f:43:77:de:aa:69:7d:5e:a4:66:dd:ec:
         df:21:70:28:e3:6b:f9:eb:23:74:f3:75:f5:4f:e5:25:d3:37:
         89:2c:a4:eb:c5:36:12:a4:4d:23:b2:fc:3a:db:12:9f:de:5b:
         d1:8b:69:01:ad:74:bb:99:4a:34:a3:09:e0:9c:64:05:d1:45:
         6f:b3:40:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjEwNTJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJEMTNBQUVBQzM0RTBD
NDExMDRGNzlDOUExNDJDOTg5M0Y1QUNGNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCV0FCGXJ68q3RHdOhHz2l996Nc4HqRputwa1tGL2Y6/NmhbjPu
LmtazcJiEN74d4wkOaKxDrH1BVekprF38DnEJdgm237TNipx2SlK2SWZkfSYx2rk
pffvkpHxa6Nh/FvCZmbdPP8GAM3mLgioLJMYLiq/IyI8pxzzvLBRhcW3jXLtrFvH
foHw7bKfd5k8AiBbRrQ5423wS+K8rLNnJKXNqJuKUNMlSGNAYjmEH9TEgk2ubDc2
GGRZL0jX+PqMeIomVIfVaoRA3+JBtiMJ3CuN830PPfLEHk76AYtJ9FbFYzCAVrZ1
xHTARKBHIsJFT/HhmMzHhDIYx81IGpvCOo6TAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQULROq6sNODEEQT3nJoULJiT9az3IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9MUk9xNnNOT0RFRVFUM25Kb1VMSmlUOWF6M0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7cwDQYJKoZIhvcNAQELBQADggEBACjUv+N0+rrrsszuoaN8
40ZPF3wfukcypQLooejinH6Pej1n2Jkw+XPi4LhttIl+zLn7qO/GlxNsHuQwmx3N
op1fx5fQS/jJKoaJapFGqd1k23K+SJzjPIabryVhlT0NzbXRhwaXUQ+vZCBiIW77
fecrwXRzxaCFAJw6a8Y8ccWp5vofxJh7i/fUEqQtCBenA07X/aSTsp15frEFEJ2p
fw/PUJeXm1fdGCDzqGEFPrMwGDgdzFOmbqtrRi9Dd96qaX1epGbd7N8hcCjja/nr
I3TzdfVP5SXTN4kspOvFNhKkTSOy/DrbEp/eW9GLaQGtdLuZSjSjCeCcZAXRRW+z
QEI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:34 2026 by rpki-client