Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
File:                     Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa (raw, json)
Hash identifier:          zsjB9fg2xSvcYmwfgjsVa9PFf08MJXaZtsGiFSSR6fA=
Subject key identifier:   43:9B:3E:16:34:90:2D:B7:0E:76:9C:2A:FC:71:A2:D3:1F:AE:98:D3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05E0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
Signing time:             Sun 01 Mar 2026 02:10:59 +0000
ROA not before:           Sun 01 Mar 2026 02:10:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bfe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:10:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=439B3E1634902DB70E769C2AFC71A2D31FAE98D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:ce:07:97:1c:48:dc:6d:85:c9:55:6f:06:
                    3f:32:a8:2e:c9:1a:3f:fc:fa:70:31:b1:26:18:19:
                    e1:b2:0c:a9:55:1d:66:14:fd:5a:ec:51:92:89:4e:
                    fd:31:20:18:39:bd:03:ae:d3:aa:90:59:50:aa:85:
                    cf:68:33:67:7f:d8:79:dd:4a:23:ee:02:5a:fb:3e:
                    9d:0c:19:d5:ef:58:bb:66:ac:e0:86:b6:ce:f3:b1:
                    b2:3d:e8:0e:79:6c:de:c9:89:a7:6d:6a:08:29:eb:
                    a9:b8:33:63:bb:4f:ea:83:8a:63:37:ed:8a:c4:ca:
                    34:8a:52:e1:a8:0f:93:99:89:8b:17:5a:a7:4d:ef:
                    c4:7d:91:fb:ee:49:23:ae:59:71:4f:32:e3:32:5a:
                    cb:8b:bd:63:30:8e:86:61:1e:c0:0f:ea:e2:27:7c:
                    e4:f7:73:2f:4f:f5:13:a4:0b:f4:05:8e:35:9b:81:
                    ce:d8:a5:83:23:81:8e:b5:d3:03:c7:d5:7f:08:31:
                    ed:e1:10:58:7f:29:88:eb:49:a1:66:c2:d3:67:f4:
                    88:8b:b5:26:b0:8b:45:33:f0:e8:a0:13:01:cf:79:
                    55:0b:84:ed:d9:fe:ae:cd:d1:43:85:ee:9c:ed:f9:
                    3d:5e:99:96:bc:f3:6f:00:01:2b:09:37:e9:d0:61:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9B:3E:16:34:90:2D:B7:0E:76:9C:2A:FC:71:A2:D3:1F:AE:98:D3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:07:da:8c:5f:90:c9:e4:51:f4:c4:b3:fb:4a:55:f1:bd:97:
         8b:0c:2f:ea:08:66:e8:c7:8f:9a:22:6e:9f:b9:03:9b:1c:ae:
         5f:9a:ac:4d:0c:7b:94:f7:24:a6:3e:e9:23:50:ac:06:a2:eb:
         26:fa:62:23:d2:a4:4a:f1:b5:88:78:96:61:43:87:18:73:b9:
         92:a5:75:3e:b7:bf:ef:4c:86:78:49:5f:5b:fb:74:03:3f:25:
         bd:3e:ee:0e:25:f6:7b:15:a6:50:9f:a0:86:86:ab:fc:62:5b:
         73:51:95:1f:4a:c8:f8:6f:ed:89:b6:e4:09:06:c2:cb:7f:2f:
         65:49:6f:8b:40:08:76:43:f3:52:7b:7d:dc:06:63:80:aa:f2:
         1b:bc:f7:aa:25:9f:80:e6:6a:f1:79:f3:fa:82:34:82:b5:e2:
         5b:36:e1:7f:1e:ea:1e:9e:ce:9f:11:cf:79:b9:6a:58:2a:47:
         26:e0:a7:d7:aa:fc:b0:1f:b1:32:a5:66:b2:b1:eb:35:22:26:
         6d:ec:80:8d:1c:11:63:d6:2c:db:d6:5d:d4:99:1f:6b:6c:af:
         e7:5d:0d:6d:fe:26:49:63:20:54:26:c6:be:d8:3b:a1:1b:75:
         84:1d:5e:f5:e4:d6:43:8e:8d:13:dd:a3:14:da:07:68:68:12:
         3f:63:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:18 2026 by rpki-client