Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
File:                     OimOKjce1P9kbuQOi6qPTXcAf0E.roa (raw, json)
Hash identifier:          ieOYR3R0nIi0iX9Wkzdlke3RuilEMOwnV0YRKRuWmok=
Subject key identifier:   3A:29:8E:2A:37:1E:D4:FF:64:6E:E4:0E:8B:AA:8F:4D:77:00:7F:41
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0613
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
Signing time:             Sun 01 Mar 2026 02:20:57 +0000
ROA not before:           Sun 01 Mar 2026 02:20:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:20:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3A298E2A371ED4FF646EE40E8BAA8F4D77007F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:a5:bb:82:1c:13:fb:70:f6:95:34:fe:2f:
                    d5:17:0c:b4:26:bd:7e:72:ea:11:e7:a7:34:97:ff:
                    bf:25:44:ba:47:be:a6:60:16:31:4a:3e:b1:03:c1:
                    8a:28:ed:30:b0:0a:f3:77:70:79:db:6f:bc:75:15:
                    70:8d:f7:9c:71:66:19:61:ec:5c:2a:a2:cc:55:ec:
                    ea:b1:63:ae:c4:79:ee:ba:cf:60:ed:9e:e8:33:32:
                    be:44:7c:fe:67:73:83:2f:68:e3:14:c9:93:9b:6a:
                    a6:7e:be:5e:aa:99:6c:60:af:df:64:36:71:1c:f4:
                    b2:be:3f:65:f6:c3:f6:28:2a:74:05:d5:15:bb:5b:
                    7d:2d:9d:b5:f3:78:22:50:b3:d8:2d:d2:76:4b:c9:
                    5f:c0:2e:fe:4e:25:80:f3:d2:b7:88:16:da:af:ff:
                    fb:a3:22:fe:18:40:07:ba:b0:a0:ef:c5:8c:e4:d1:
                    5f:2f:b9:8a:5c:db:e3:5f:43:39:4a:99:5b:6c:eb:
                    3c:b9:fd:90:db:a7:2c:ee:a4:70:33:07:22:97:fa:
                    28:45:0a:4d:00:b4:09:05:4d:87:ed:91:4e:85:24:
                    ce:e0:e3:b5:1d:5b:6d:73:08:0d:16:f1:20:04:8d:
                    1b:63:80:be:78:da:e6:44:8d:6d:8f:8e:e7:94:d2:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:8E:2A:37:1E:D4:FF:64:6E:E4:0E:8B:AA:8F:4D:77:00:7F:41
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:85:6f:66:07:a1:a4:17:23:a1:10:f3:27:80:d1:bf:92:9a:
         64:40:88:01:cf:0c:e6:55:80:3f:b3:9e:e4:6b:e0:25:8d:82:
         64:c1:31:12:9f:31:26:f5:ff:74:55:c9:d4:02:ef:7b:de:2c:
         41:c5:57:cd:66:c7:f0:1e:65:49:c7:99:60:33:92:7b:ef:3a:
         1e:bf:aa:d2:84:d7:b1:12:35:2f:60:e0:16:b7:dc:0c:50:85:
         ad:a5:8d:62:7f:ae:1e:c9:84:d2:c5:82:04:f6:65:21:03:c6:
         5c:a2:2c:40:eb:f0:31:ca:49:8d:4f:64:95:23:8a:f8:16:95:
         90:2b:85:17:d2:6c:74:86:f6:0c:76:31:b6:22:26:df:64:9a:
         19:e7:38:46:63:fc:d7:d3:2b:d0:3f:00:6b:8f:7f:c9:e9:d4:
         79:da:6c:41:9a:3a:f9:e9:a0:42:c6:28:d9:9e:80:40:23:6f:
         b0:fe:f0:9c:aa:1c:1b:89:b8:0d:05:a3:c0:ac:e7:f7:23:c7:
         78:39:d6:c9:53:8f:eb:11:ca:6c:9a:cc:5a:0c:94:2b:14:a1:
         d5:9e:5d:9f:46:b7:29:d3:8b:ec:46:64:aa:f1:34:59:54:bd:
         31:3e:7d:d0:02:ea:de:ef:78:76:18:70:06:d5:6f:45:8e:6f:
         f7:3e:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:39 2026 by rpki-client