Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MJ_u4BB0aL4gZ5gywOTTNYm0RTo.roa
File:                     MJ_u4BB0aL4gZ5gywOTTNYm0RTo.roa (raw, json)
Hash identifier:          c9iLquYseh7cUTt7bJteibVg0llMczafGdEFsrhPDG0=
Subject key identifier:   30:9F:EE:E0:10:74:68:BE:20:67:98:32:C0:E4:D3:35:89:B4:45:3A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0538
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MJ_u4BB0aL4gZ5gywOTTNYm0RTo.roa
Signing time:             Sun 01 Mar 2026 01:41:09 +0000
ROA not before:           Sun 01 Mar 2026 01:41:09 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:09 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=309FEEE0107468BE20679832C0E4D33589B4453A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:76:c1:c3:f8:eb:17:f9:df:5b:49:be:88:
                    9b:49:e9:01:fc:24:85:86:5c:3a:40:bd:bb:8a:17:
                    8e:4e:21:0a:f9:aa:07:58:f8:f7:53:ae:a9:2c:98:
                    b1:fe:ef:82:86:54:ac:a7:95:01:f6:71:3d:9a:d8:
                    57:53:be:a9:71:ff:42:da:36:2f:20:f1:bb:14:9b:
                    bd:a6:23:1a:16:78:79:4b:dd:83:35:97:f6:c5:54:
                    f8:a6:ff:7c:9c:94:32:25:98:9b:af:0b:d9:ef:f4:
                    39:bb:e0:ad:87:9d:92:46:da:5a:00:f0:b2:b2:99:
                    39:99:dd:38:76:ad:f9:0f:b4:57:25:0b:8d:f3:71:
                    fa:fd:16:85:7e:0c:0b:d1:ac:25:c2:45:b9:b5:e4:
                    59:5d:ef:08:ad:cd:c6:c1:07:3d:17:1d:3b:45:79:
                    8b:ba:fb:70:eb:33:21:e4:fa:aa:f8:fb:7e:11:f4:
                    1b:e9:c9:92:fa:37:9b:3a:6d:4d:f7:d8:87:a7:64:
                    5d:ee:44:d0:12:3c:07:3d:cb:0e:64:75:24:4b:a9:
                    ea:0c:66:9e:fb:a9:ef:2f:58:b8:f2:00:25:c8:88:
                    33:0e:67:f4:bf:7b:49:e1:e0:22:08:5c:25:c2:4a:
                    af:ca:81:16:69:02:ac:84:04:fd:22:2b:b1:f5:91:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:EE:E0:10:74:68:BE:20:67:98:32:C0:E4:D3:35:89:B4:45:3A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MJ_u4BB0aL4gZ5gywOTTNYm0RTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:c4:c3:5c:58:81:ea:42:5b:26:05:a1:a7:ff:bd:cb:ca:
         25:d3:14:25:d8:81:b7:8e:c1:c1:83:a7:9f:1d:64:03:ad:90:
         7a:c2:2a:bb:16:ed:2b:e8:f2:d5:4a:1d:05:7b:c4:c8:3f:9e:
         85:5b:cb:fc:8a:c9:de:7b:80:34:3e:11:88:24:97:4e:b5:04:
         ff:5d:b8:84:70:8a:37:d1:a8:d6:83:8c:92:90:01:02:ac:7d:
         03:d6:60:40:4e:37:cb:74:34:87:65:4a:65:a3:9a:0c:0a:9e:
         69:6d:3e:0e:9d:42:fe:2e:8b:84:c8:48:38:c3:43:ef:ad:39:
         ef:b4:ef:4d:c0:2c:cc:02:aa:55:ca:e9:91:ce:a6:f8:7c:9a:
         b1:fa:a7:9a:20:7b:23:17:fa:1d:79:0f:d3:80:f5:23:52:38:
         fd:96:2b:88:b4:77:28:1f:fe:87:5d:08:42:88:2e:ef:ac:06:
         ac:65:42:ea:06:64:d9:d6:bd:ae:a7:e6:0c:39:06:da:ca:e1:
         b2:fa:da:18:21:6b:5f:56:d7:07:be:09:fa:3f:e0:16:ce:cd:
         29:59:02:90:28:0a:39:66:f2:ad:d1:eb:c6:a9:82:aa:0e:8f:
         b7:58:60:6f:7c:4a:05:0d:75:37:1f:c9:ce:37:e1:8a:b7:f3:
         e5:b6:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:24 2026 by rpki-client