Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QKu_KdgkOybHNIfqtwSqHaeu_KI.roa
File:                     QKu_KdgkOybHNIfqtwSqHaeu_KI.roa (raw, json)
Hash identifier:          aY/qTGoxJgpbxAUuDoEY45l6HccGJR/lElB9b6HXa8A=
Subject key identifier:   40:AB:BF:29:D8:24:3B:26:C7:34:87:EA:B7:04:AA:1D:A7:AE:FC:A2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       056D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QKu_KdgkOybHNIfqtwSqHaeu_KI.roa
Signing time:             Sun 01 Mar 2026 01:52:13 +0000
ROA not before:           Sun 01 Mar 2026 01:52:13 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:13 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=40ABBF29D8243B26C73487EAB704AA1DA7AEFCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:5b:a4:4e:fd:81:9d:32:41:74:d0:8e:ca:
                    cc:32:1a:fe:25:44:10:3f:0d:b2:ce:3d:e5:a9:56:
                    e0:8c:23:a4:3c:7e:09:78:9c:81:3c:7d:e0:36:2e:
                    df:02:57:75:7f:12:68:f8:94:9a:d1:4a:5d:b9:69:
                    ce:88:40:82:a5:b6:f8:3e:d2:bc:1e:79:e6:58:1a:
                    9a:ba:54:30:b6:e3:a2:3c:37:61:66:eb:76:99:51:
                    97:cb:f3:71:8e:26:56:ce:f0:b6:bd:12:81:b8:45:
                    ea:24:24:9a:5c:a6:9f:43:86:e5:74:e8:88:85:6e:
                    0c:e9:36:0a:78:57:f6:a8:d5:d0:fd:f8:cc:7c:90:
                    8a:cc:34:0a:57:13:6c:8e:9b:12:c1:20:c9:a7:53:
                    3c:f7:8d:e0:90:82:2a:f1:f9:34:ff:22:b3:50:30:
                    03:74:a5:25:3d:be:ff:a4:27:30:a1:ef:f1:87:7b:
                    c8:ab:f1:91:11:e0:ad:8a:34:ed:27:e7:e5:b0:28:
                    8e:f6:ce:9e:f8:6f:17:1f:f8:f3:ad:0c:24:92:aa:
                    07:56:02:9a:db:3c:7e:1f:d7:ad:35:de:dc:d5:d6:
                    9a:b0:c6:75:82:c6:e6:7c:1d:50:e4:e4:94:8a:97:
                    60:1e:05:6c:a4:99:91:40:c3:27:6e:1d:ba:ec:44:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:BF:29:D8:24:3B:26:C7:34:87:EA:B7:04:AA:1D:A7:AE:FC:A2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QKu_KdgkOybHNIfqtwSqHaeu_KI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:45:88:2e:8f:57:63:ef:c3:72:f2:25:17:a1:f1:f7:36:
         92:d0:3c:61:7a:d6:9f:77:68:54:c7:55:54:e3:a9:7d:a8:d3:
         5a:a9:f5:83:b1:b4:bd:f9:7d:ef:bb:d3:a4:02:3e:a8:42:ad:
         1d:8b:0c:3e:a2:b7:cd:76:0c:dc:3b:22:1e:42:63:68:15:47:
         17:92:44:f4:b7:aa:f9:67:ab:4b:56:44:96:77:4d:0d:c7:94:
         39:80:10:f9:b7:58:28:f8:13:30:07:7e:49:d8:ab:d7:b1:a8:
         ce:aa:6e:fd:00:ac:5a:dd:b0:74:07:52:e5:32:bc:0c:6a:e7:
         7b:d6:d9:bf:f0:7f:d3:74:3f:21:fc:e5:b9:0b:e0:19:ba:15:
         87:0c:62:33:2d:95:c9:5e:a4:b5:f5:72:42:9a:c2:2f:3d:34:
         a1:ed:65:1a:49:72:57:df:6e:30:8d:ba:c9:a4:9f:f5:98:6a:
         f9:6b:6b:33:91:76:a0:d5:fa:af:f8:5d:c8:ae:cd:ac:22:86:
         bf:24:ec:74:b7:9f:6d:21:36:dd:1c:71:27:22:a0:32:a2:a4:
         5e:b1:aa:95:93:bc:6d:2e:27:ec:2d:ab:6a:bb:9f:e0:c6:dc:
         c0:64:be:7e:e7:ff:31:d0:a6:09:fb:6e:85:b8:69:c3:20:9e:
         a5:1a:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:05 2026 by rpki-client