Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/O_GPN28voUA_cREmA_nkhVKg6Ic.roa
File:                     O_GPN28voUA_cREmA_nkhVKg6Ic.roa (raw, json)
Hash identifier:          JwOsaEhVgcQHs39iO89hvFYcZ1DKXrK+QQHYDRLQ478=
Subject key identifier:   3B:F1:8F:37:6F:2F:A1:40:3F:71:11:26:03:F9:E4:85:52:A0:E8:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05ED
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/O_GPN28voUA_cREmA_nkhVKg6Ic.roa
Signing time:             Sun 01 Mar 2026 02:16:05 +0000
ROA not before:           Sun 01 Mar 2026 02:16:05 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:05 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3BF18F376F2FA1403F71112603F9E48552A0E887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:d7:7c:b5:ce:2c:6b:73:70:0a:6e:00:b6:
                    06:c7:c9:cc:8d:49:95:85:3a:c5:48:b8:83:11:3c:
                    d2:2d:c7:ae:73:a4:4e:ca:49:95:02:82:fe:6d:68:
                    35:98:c2:76:eb:2b:0b:91:9a:ac:81:34:9c:d9:5a:
                    ad:a1:1d:73:1a:71:a6:8c:26:82:fd:6d:f3:f2:2a:
                    37:db:59:53:5c:d4:38:a5:6f:12:b9:80:3a:b2:e4:
                    22:70:80:45:60:b6:e7:5c:b4:8f:67:4d:90:b5:4c:
                    89:bc:a9:40:e9:04:24:24:12:44:da:82:a9:11:91:
                    ba:e8:45:be:1f:3e:58:70:67:29:e1:41:8c:b0:57:
                    00:10:77:06:93:68:f4:e0:fe:3c:52:6f:1d:4c:ef:
                    5e:8c:26:75:15:c8:77:60:6c:f3:17:ab:bf:75:0b:
                    86:0c:a9:93:38:5d:57:b5:34:a8:56:33:59:25:70:
                    03:65:15:44:87:a8:8b:95:43:7d:62:d0:a4:40:52:
                    1c:2b:ca:9d:d2:11:83:91:77:50:d9:f1:3f:17:c8:
                    7b:29:62:84:1d:36:f8:bb:08:78:0f:8a:67:60:d1:
                    f5:27:18:e8:16:60:35:b6:b8:61:e1:17:54:91:b8:
                    26:9b:c3:b5:26:67:af:ef:f8:6e:3c:f1:ef:3f:21:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:8F:37:6F:2F:A1:40:3F:71:11:26:03:F9:E4:85:52:A0:E8:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/O_GPN28voUA_cREmA_nkhVKg6Ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:11:96:f0:b1:87:a5:13:2b:25:08:45:4d:58:d9:3c:20:32:
         4c:17:c7:92:85:28:52:f7:31:03:8f:1c:50:2e:32:d3:5b:0a:
         6c:39:19:cd:67:30:79:05:b8:6c:13:39:0a:b1:06:36:d1:f6:
         c1:d7:be:ac:2d:fa:22:f3:76:eb:9e:c7:cd:10:59:d6:5a:7d:
         1e:b7:c3:31:2a:24:e3:78:66:de:4d:e0:96:fc:5c:21:4a:1b:
         8f:40:53:7d:bc:ea:61:d8:c1:b3:6f:35:4e:58:bc:9c:99:ff:
         26:8b:1f:71:4d:59:26:df:3e:7d:21:cd:19:24:ad:ea:45:4b:
         e2:44:9c:53:b0:b3:e3:eb:20:2e:1d:06:d5:3d:9d:e0:fe:76:
         61:49:7c:c1:88:ec:10:dd:5c:1e:3b:22:d0:2a:a7:e4:ca:b1:
         6c:bf:78:76:a3:73:03:5a:20:9e:c1:a4:be:5d:a4:cd:d0:ab:
         40:0f:42:79:5d:f3:f3:00:69:29:af:41:db:65:7b:3b:7c:d1:
         31:36:81:e1:c9:fb:5d:1b:51:ea:10:5b:72:c4:23:f5:05:35:
         cd:0d:ba:8a:3a:eb:20:fc:8b:39:ec:7a:20:9f:49:84:e9:9d:
         4f:d9:9c:a3:dc:67:7b:60:c8:58:ba:58:d6:9e:0b:27:85:14:
         6c:cd:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:21 2026 by rpki-client