Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PlszU2fJtIG7aK9dA5x20ZzvTLc.roa
File:                     PlszU2fJtIG7aK9dA5x20ZzvTLc.roa (raw, json)
Hash identifier:          VfEzYVakOcjAlLaPq/Ny5+c2es55Arf6fERtOFTSQ2E=
Subject key identifier:   3E:5B:33:53:67:C9:B4:81:BB:68:AF:5D:03:9C:76:D1:9C:EF:4C:B7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0603
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PlszU2fJtIG7aK9dA5x20ZzvTLc.roa
Signing time:             Sun 01 Mar 2026 02:16:17 +0000
ROA not before:           Sun 01 Mar 2026 02:16:17 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bcc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:17 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3E5B335367C9B481BB68AF5D039C76D19CEF4CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:e0:35:64:70:42:05:64:bc:af:82:88:0b:
                    aa:10:1d:ed:95:98:02:9e:10:e1:98:f8:ac:82:2b:
                    fb:6f:26:df:4c:6a:4e:d2:a9:a5:c8:43:f3:46:df:
                    fe:4e:a6:1f:84:15:4d:8f:6d:51:b4:50:6c:76:11:
                    d9:0e:85:2c:66:da:c7:79:49:f7:43:0c:45:d3:e6:
                    a3:6d:ae:37:25:35:08:20:09:72:4f:eb:50:4a:d9:
                    04:7a:74:c8:cc:93:8d:9f:eb:38:db:7b:e5:e3:c2:
                    82:48:0d:bb:b0:43:c0:cf:bd:61:1b:f1:ff:83:b2:
                    0b:21:85:36:0d:ec:9a:56:d2:22:d5:e9:2a:e1:37:
                    d9:eb:fc:f6:8c:5a:41:a9:ed:31:cb:97:c3:c5:ce:
                    36:f9:6a:9b:3e:a8:5f:ba:ed:49:2b:c4:0c:34:f5:
                    d8:04:ea:27:71:84:28:8f:e7:b9:08:7f:68:b0:73:
                    3a:06:0e:dc:1b:e9:d3:3d:88:3b:dc:3e:0a:2f:31:
                    c7:bb:44:7c:ed:2b:c6:70:65:4c:5e:ac:2c:19:d3:
                    08:9f:8a:d4:38:db:5f:25:34:52:b6:fc:1a:85:ff:
                    f1:f1:95:82:e4:60:3a:1b:9c:06:67:f7:32:a1:fd:
                    cd:05:a3:d5:40:f7:43:02:d8:aa:ae:f6:01:ff:44:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:33:53:67:C9:B4:81:BB:68:AF:5D:03:9C:76:D1:9C:EF:4C:B7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PlszU2fJtIG7aK9dA5x20ZzvTLc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:5a:6f:32:f0:01:61:48:06:57:f2:1e:3d:41:5d:77:39:ff:
         3d:4e:05:b9:9c:a7:75:ab:38:52:a2:45:8e:95:24:ce:50:c1:
         c7:75:47:50:12:c5:57:40:52:27:f9:ff:d6:29:56:be:e6:62:
         2c:16:f1:8e:ea:8a:6f:ef:9f:ff:29:67:1c:07:5d:4b:74:61:
         70:00:91:9e:8a:8c:14:4e:ef:b8:9d:ca:22:6c:48:fb:68:ce:
         1b:5a:b3:a0:8c:80:18:1e:f3:63:0f:47:97:7c:b0:1f:75:91:
         ab:95:7d:70:a8:71:95:19:1c:6b:50:95:9f:0d:0c:61:3e:e9:
         68:ce:0a:01:aa:ab:69:f5:89:ff:4c:f0:41:41:85:88:d3:e5:
         57:a7:73:f4:7e:14:6a:ea:8f:ba:a6:6c:10:64:af:b9:89:53:
         a5:b7:ba:ba:b3:9d:97:44:53:11:35:ae:99:2e:f9:e2:6c:bb:
         81:a3:22:c7:48:b9:b7:ec:e7:7b:91:dc:4a:41:00:70:da:82:
         f4:f6:6b:46:cd:cf:32:a0:b0:c7:64:7c:7f:fc:bc:ce:d9:4e:
         43:0e:6f:28:0a:76:de:31:24:85:07:65:b1:c5:6b:73:4f:93:
         54:f7:64:5c:a8:8c:4f:db:7d:b9:42:0d:df:16:db:c2:aa:91:
         27:3f:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:41 2026 by rpki-client