Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBndSu8gKsfPyjG9TzinJeD_CmE.roa
File:                     RBndSu8gKsfPyjG9TzinJeD_CmE.roa (raw, json)
Hash identifier:          z47TmBj9t8xs3iSE9tYwVO8ZUSB9zdoAKraZtCU7Zlw=
Subject key identifier:   44:19:DD:4A:EF:20:2A:C7:CF:CA:31:BD:4F:38:A7:25:E0:FF:0A:61
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05E5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBndSu8gKsfPyjG9TzinJeD_CmE.roa
Signing time:             Sun 01 Mar 2026 02:11:02 +0000
ROA not before:           Sun 01 Mar 2026 02:11:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:11:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4419DD4AEF202AC7CFCA31BD4F38A725E0FF0A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:aa:a6:2b:60:37:84:3c:92:f9:96:f5:4e:
                    aa:92:36:bd:82:99:27:14:3a:ef:a2:15:6b:f8:17:
                    e8:e3:63:79:7b:75:3f:be:df:52:7d:64:af:b5:ed:
                    01:92:cd:80:b8:49:6d:98:5d:09:8d:17:20:9a:d8:
                    08:a4:01:f2:e6:61:3d:50:3c:eb:f6:d9:e3:70:60:
                    5c:57:95:19:eb:18:95:43:9c:68:0f:27:b7:b3:50:
                    88:d6:d2:0e:09:dd:9c:66:94:30:1f:24:da:bc:5d:
                    3d:74:e2:51:4c:1f:23:08:96:5e:12:28:fe:b0:39:
                    91:74:29:31:e1:79:d0:88:c7:77:ba:28:25:5e:74:
                    42:49:5a:69:0c:28:54:7e:22:d2:03:5a:2f:f9:6d:
                    9e:b0:84:fa:6d:5d:f7:58:c9:8c:5f:25:dd:d1:e4:
                    c2:d1:c7:3a:e9:c5:44:a5:2f:87:61:78:5a:12:47:
                    4b:08:3d:b7:7d:a9:e5:2d:ae:ba:46:c6:01:4d:83:
                    eb:44:ab:e3:b4:0c:ed:75:c8:04:e0:c0:89:ac:f3:
                    37:12:b4:6b:8f:8a:4a:cb:1a:02:41:d8:ff:48:8c:
                    17:cc:3b:78:f1:89:1c:21:6f:1d:38:48:79:87:1b:
                    ca:18:29:69:f2:c2:5d:5b:b9:c8:8a:87:fc:8e:69:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:DD:4A:EF:20:2A:C7:CF:CA:31:BD:4F:38:A7:25:E0:FF:0A:61
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBndSu8gKsfPyjG9TzinJeD_CmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:33:d8:e0:fc:db:f8:3b:87:0b:2c:db:ee:e8:1a:27:03:2b:
         03:6d:06:cb:1b:00:70:de:8b:3d:9f:ae:12:63:60:69:e6:ea:
         76:7a:f0:10:fa:ae:61:4e:f4:fb:64:94:2c:cb:25:03:e5:05:
         07:4b:f9:dd:4f:59:57:16:37:89:5c:15:44:dd:28:b6:c7:65:
         2d:ed:fb:29:35:32:a7:d6:99:83:d4:55:e4:e5:5f:fb:36:ed:
         19:42:26:13:7f:8b:fb:be:eb:ee:38:0e:fd:e2:1c:7f:9d:1f:
         ab:54:52:d0:fa:13:ee:9c:c1:b9:d1:fd:e8:67:e2:fb:34:7e:
         21:37:4a:f6:d8:14:bb:68:7b:db:45:36:4e:ee:82:d8:c5:d6:
         5e:b7:d4:59:81:76:74:cf:dd:5d:70:25:5c:db:94:5e:56:d4:
         f6:1e:a2:74:2f:61:d1:0b:aa:00:97:94:94:96:99:a4:f0:8c:
         26:9e:f9:e0:86:af:90:d8:06:74:0b:13:bc:37:73:28:c2:f4:
         85:87:d0:8d:fc:fa:c2:c2:a9:bc:11:33:3c:b5:3f:e3:f8:7c:
         ec:04:29:27:dd:4f:54:f6:cd:d5:a3:84:1b:41:4c:d4:9d:01:
         c8:94:2d:a8:26:be:e5:7d:e0:ed:d9:cf:12:78:fd:55:82:bc:
         df:2e:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:17 2026 by rpki-client